Identity with Windows Server 2016 — Question 154

Your network contains an Active Directory domain named contoso.com.
The domain contains a read-only domain controller (RODC) named RODC1.
You need to retrieve a list of accounts that have their password cached on RODC1.
Which command should you run?

Answer options

• A. repadmin.exe
• B. ntdsutil.exe
• C. dcdiag.exe
• D. netdom.exe

Correct answer: A

Explanation

The correct command is repadmin.exe, which is specifically designed for managing Active Directory replication and can also be used to query cached credentials on RODCs. The other options, such as ntdsutil.exe, dcdiag.exe, and netdom.exe, serve different purposes related to directory service maintenance, diagnostics, and domain management, but do not provide the functionality to list cached passwords.