You need to configure Active Directory to implement the new password policy for the HR department. What should you do？（）

A. Create a new child domain named hr.ad.margiestravel.com in the existing forest. Move the resources from the HR OU to this new domain. Add the appropriate security settings in the Default Domain Policy for this new domain.
B. Add the appropriate security settings to the current Default Domain Policy.
C. Add the appropriate security settings to the local security policy of SQL1.
D. Set the SQL server check_policy and check_expiration options to On when creating all user accounts.