Exam 70-412 topic 3 question 220 discussion

Actual exam question from Microsoft's 70-412

Question #: 220
Topic #: 3

Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012 R2. The domain contains two domain controllers.
The domain controllers are configured as shown in the following table.

The Branch site contains a perimeter network.
For security reasons, client computers in the perimeter network can communicate with client computers in the Branch site only.
You plan to deploy a new RODC to the perimeter network in the Branch site.
You need to ensure that the new RODC will be able to replicate from DC10.
What should you do first on DC10?

A. Run the Add-ADDSReadOnlyDomainControllerAccount cmdlet.
B. Create an Active Directory site.
C. Run the Active Directory Domain Services Configuration Wizard.
D. Create anActive Directory subnet.

Show Suggested Answer

Suggested Answer: A 🗳️
Add-ADDSReadOnlyDomainControllerAccount Creates a read-only domain controller (RODC) account that can be used to install an RODC in Active Directory.
Note:
* Notes
Once you have added the RODC account, youcanadd an RODC to a server computer by using the Install-ADDSDomainController cmdlet with the -
ReadOnlyReplica switch parameter.
* Example
Adds a new read-only domain controller (RODC) account to the corp.contoso.com domain using the North America site asthe source site for the replication source domain controller.
C:\PS>Add-ADDSReadOnlyDomainControllerAccount -DomainControllerAccountName RODC1 -DomainName corp.contoso.com -SiteName NorthAmerica
Incorrect:
Not B: There already is a branch site.
References:

by antonskd at Feb. 18, 2020, 7:56 a.m.

Comments

Submit Cancel

wazmac

Highly Voted 5 years, 1 month ago

I believe it should be C as the question is asking what should you do first?

upvoted 5 times

...

JanvL

Most Recent 4 years, 10 months ago

I go with C

upvoted 1 times

...

DanStafford

4 years, 10 months ago

From the answer explanation of question 224: "Site link transitivity is controlled by the Bridge all site links option on the properties pages of transport folders (such as IP or SMTP) in the Active Directory Sites and Services snapin. Site link transitivity is enabled by default. If you cannot place a writable Windows Server 2008 domain controller in the nearest site to the RODC, RODC replication depends on a site link bridge betweenthe site links that contain the site of the RODC and the site ofthe writable Windows Server 2008 domain controller." - so if you have an RODC in the perimeter network & an RODC in the site, you could use a site link bridge to replicate from the Main site to the perimeter RODC. It still doesn't explain to me why you would create the new RODC account on the local RODC rrather than on the Writeable RODC, because the new RODC account would never get replicated back to the Main site...

upvoted 1 times

...

DanStafford

4 years, 10 months ago

This thing is tricky because answer A only creates an account for the new RODC, but you would still have to upgrade DDC10 to a writeable DC before actually adding the new RODC, and before the new RODC *account* would replicate back to the Main site. I suppose you could create the account before switching DC10 to a writeable DC...

upvoted 1 times

...

DanStafford

4 years, 11 months ago

I agree with Wazmac because DC10 is currently an RODC, so you can't replicate from it to another RODC...so DC10 needs to be made a full DC. Every article I can find says no replication from an RODC.

upvoted 1 times

...

antonskd

5 years, 3 months ago

I do not believe that we can or should replicate RODC from RODC. i go with B. Make DC10 writable first

upvoted 1 times

...