You need to restore the membership of Group1

Your network contains an Active Directory forest named contoso.com. The forest contains a single domain. All
domain controllers run Windows Server 2012 R2.
The domain contains two domain controllers. The domain controllers are configured as shown in the following
table.

Active Directory Recycle Bin is enabled.
You discover that a support technician accidentally removed 100 users from an Active Directory group named
Group1 an hour ago.
You need to restore the membership of Group1.
What should you do?

A.
Perform an authoritative restore.

B.
Perform a non-authoritative restore.

C.
Recover the items by using Active Directory Recycle Bin.

D.
Apply a virtual machine snapshot to VM1.

Explanation:
Authoritative restore allows the administrator to recover a domain controller, restore it to a specific point intime,
and mark objects in Active Directory as being authoritative with respect to their replication partners. For
example, you might need to perform an authoritative restore if an administrator inadvertently deletes an
organizational unit containing a large number of users. If you restore the server from tape, the normal
replication process would not restore the inadvertently deleted organizational unit. Authoritative restore allows
you to mark the organizational unit as authoritative and force the replication process to restore it to all of the
other domain controllers in the domain.
Incorrect:
Not C: A non authoritative restore returns the domain controller to its state at the time of backup and then
allows normal replication to overwrite that state with any changes that occurred after the backup was taken.
After you restore the system state, the domain controller queries its replication partners. The replication
partners replicate any changes to the restored domain controller, ensuring that the domain controller has anaccurate and updated copy of the Active Directory database.