You are remediating firewall-related security risks to satisfy the security requirements. Which configuration should you apply to reduce these risks?

A Group Policy Object (GPO) is the correct choice because it allows you to centrally manage and enforce firewall rules across multiple Windows servers and clients within an Active Directory domain. This ensures consistent security configurations and reduces the risk of misconfigured firewalls. Adaptive network hardening in Microsoft Defender for Cloud is a good security feature but focuses on dynamic rule suggestions based on network traffic, not direct firewall rule enforcement for on-premises servers. A network security group (NSG) is used for controlling inbound and outbound traffic to Azure resources, not for on-premises Windows server firewalls. An Azure Firewall policy manages Azure Firewall instances, which are cloud-based network firewalls, not the Windows Firewall on individual servers.