A penetration test identifies that an SMBvl Is enabled on multiple servers across an organization.

[Reference:CompTIA Security+ SY0-701 Study Guide, Domain 3.0: Implementation, Section: "Secure System Configuration" (GPOs are covered under centralized management tools for implementing security policies)., Explanation:SMBv1 is an outdated and vulnerable protocol that should be disabled to mitigate risks, such as exploitation by attacks like WannaCry. The question emphasizes efficiency across multiple servers. Option A (GPO) allows an organization to push a policy to disable SMBv1 across all servers in an Active Directory environment with minimal effort, making it the most efficient choice. Option B (ACL) refers to Access Control Lists, which manage permissions but aren’t designed for protocol configuration. Option C (SFTP) is a secure file transfer protocol unrelated to SMBv1 remediation. Option D (DLP) focuses on data loss prevention, not protocol vulnerabilities. Thus, A is the correct and most efficient solution., , , , ]