Your forest has the AD Recycle Bin enabled and a tombstone lifetime of 180 days. An OU named ‘Apps’ (containing 40 groups and 200 service accounts) was deleted 10 days ago. You must restore the OU and all child objects to their original locations with the least administrative effort. What should you do?

The Active Directory Administrative Center (ADAC) with the Recycle Bin feature allows for easy restoration of deleted objects, including OUs and their contents, to their original locations. Since the OU was deleted only 10 days ago and the tombstone lifetime is 180 days, it is still within the recoverable period. The "Restore with hierarchy" option in ADAC ensures that the OU and all its child objects are restored together, minimizing administrative effort. Incorrect options: ntdsutil authoritative restore from an online backup is complex and typically used for catastrophic failures, not simple object recovery. It also requires a domain controller to be offline. Recovering ntds.dit from a file-level backup is a drastic measure, often leading to data loss or inconsistencies if not performed correctly and offline. Ldp.exe can undelete objects but requires manual intervention for each object, making it inefficient for 240 objects. Restore-ADObject in PowerShell can restore the OU, but the claim that child objects automatically reappear even if deleted later is incorrect. If child objects were deleted separately or later, they would need individual restoration.