What should you do?

You are working as an enterprise administrator at Domain.com. The Domain.com network consists of a single Active Directory forest that contains a single domain named Domain.com. All servers on the Domain.com network run Windows Server 2008.
Domain.com contains a domain controller named CERTKILLER-DC01. One of your job functions at Domain.com encompasses managing CERTKILLER-DC01. During the course of the business day you receive an instruction from management to have the Directory Services Recovery Mode (DSRM) password on CERTKILLER-DC01 reset. You thus need to identify the appropriate tool that will accomplish this.
What should you do?

A.
The best option is to use the Active Directory Security for Computers snap-in.

B.
The best option is to use the ntdsutil utility.

C.
The best option is to use the Netsh utility.

D.
The best option is to use the Domain Controller security snap-in.

Explanation:
You should use the ntdsutil utility to reset the DSRM password. You can use Ntdsutil.exe to reset this password for the server on which you are working, or for another domain controller in the domain. Type ntdsutil and at the ntdsutil command prompt, type set dsrm password.