Administering Windows Server 2012 — Question 7

Your network contains one Active Directory domain named contoso.com. The forest functional level is Windows Server 2012. All servers run Windows Server
2012 R2. All client computers run Windows 8.1.
The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01. All domain controllers and RODCs are hosted on a
Hyper-V host that runs Windows Server 2012 R2.
You need to identify which domain controllers are authorized to be cloned by using virtual domain controller cloning.
Which cmdlet should you use?

Answer options

• A. Get-ADGroupMember
• B. Get-ADDomainControllerPasswordReplicationPolicy
• C. Get-ADDomainControllerPasswordReplicationPolicyUsage
• D. Get-ADDomain
• E. Get-ADOptionalFeature
• F. Get-ADAccountAuthorizationGroup
• G. Get-ADAuthenticationPolicySilo
• H. Get-ADAuthenticationPolicy

Correct answer: D

Explanation

The correct answer is D, Get-ADDomain, because this cmdlet allows you to retrieve the properties of the Active Directory domain, including information related to domain controller cloning. The other options either pertain to group membership, password replication policies, or authentication policies, which do not directly provide information about domain controller cloning authorization.