Upgrading Your Skills to MCSA Windows Server 2012 — Question 4

Your network contains an Active Directory domain named contoso.com. The domain contains a read-only domain controller (RODC) named RODC1.
You create a global group named RODC_Admins.
You need to provide the members of RODC_Admins with the ability to manage the hardware and the software on RODC1. The solution must not provide
RODC_Admins with the ability to manage Active Directory objects.
What should you do?

Answer options

• A. From Active Directory Users and Computers, configure the Managed By settings of the RODC1 account.
• B. From Windows PowerShell, run the Set-ADAccountControl cmdlet.
• C. From a command prompt, run the dsadd computer command.
• D. From Active Directory Sites and Services, run the Delegation of Control Wizard.

Correct answer: A

Explanation

The correct answer is A because configuring the Managed By settings allows you to delegate specific management tasks to the RODC_Admins without granting them permissions to modify Active Directory objects. The other options do not provide the necessary delegation of hardware and software management specifically for RODC1 while restricting access to Active Directory management.