A server shows 'Password must meet complexity requirements: Disabled' in Local Security Policy. A domain GPO linked to the server’s OU sets this policy to Enabled. You need to confirm which setting is effective on the server and identify the GPO providing it, storing the result for audit. Which two tools/commands should you use?

The correct options, gpresult /h and rsop.msc, are the primary tools for determining the effective Group Policy settings on a system and identifying their source. gpresult /h generates an HTML report detailing all applied GPOs and their settings, making it easy to audit. rsop.msc provides a graphical interface to view the resultant set of policy, showing which GPO applied each setting. Opening Local Security Policy (secpol.msc) is incorrect because it only shows local policy, not the effective policy after domain GPOs are applied. Domain GPOs typically override local settings. Running gpupdate /force only refreshes policy; it doesn't show the effective settings or their source. Querying the registry (HKLM\SOFTWARE\Policies) is insufficient as it only shows a subset of policy settings and doesn't identify the GPO source.