Administering Windows Server 2012 — Question 2

Your network contains one Active Directory domain named contoso.com. The forest functional level is Windows Server 2012. All servers run Windows Server
2012 R2. All client computers run Windows 8.1.
The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01. All domain controllers and RODCs are hosted on a
Hyper-V host that runs Windows Server 2012 R2.
You need to identify which user accounts were authenticated by RODC1.
Which cmdlet should you use?

Answer options

• A. Get-ADGroupMember
• B. Get-ADDomainControllerPasswordReplicationPolicy
• C. Get-ADDomainControllerPasswordReplicationPolicyUsage
• D. Get-ADDomain
• E. Get-ADOptionalFeature
• F. Get-ADAccountAuthorizationGroup

Correct answer: B

Explanation

The correct answer is B because the Get-ADDomainControllerPasswordReplicationPolicy cmdlet allows you to view the password replication policy for a specific RODC, which includes information about which user accounts have been authenticated by that RODC. The other options do not provide the necessary information related to user account authentication for RODCs.