Exam 70-412 topic 3 question 136 discussion

Actual exam question from Microsoft's 70-412

Question #: 136
Topic #: 3

Your network contains one Active Directory domain named contoso.com. The forest functional level is Windows Server 2012. All servers run Windows Server
2012 R2. All client computers run Windows 8.1.
The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01. All domain controllers and RODCs are hosted on a
Hyper-V host that runs Windows Server 2012 R2.
You need to identify which domain controllers are authorized to be cloned by using virtual domain controller cloning.
Which cmdlet should you use?

A. Get-ADGroupMember
B. Get-ADDomainControllerPasswordReplicationPolicy
C. Get-ADDomainControllerPasswordReplicationPolicyUsage
D. Get-ADDomain
E. Get-ADOptionalFeature

Show Suggested Answer

Suggested Answer: A 🗳️
If you want to be able to clone a Domain Controller then authorize the original source Domain Controller to be used as the source for cloning by adding it's computer object into the new "Cloneable Domain Controllers" Active Directory group.
The Get-ADGroupMember cmdlet gets the members of an Active Directory group. Members can be users, groups, and computers.
We use the Get-ADGroupMember cmdlet to retrieve the members of the "Cloneable Domain Controllers" Active Directory group.
Reference: Safely Cloning an Active Directory Domain Controller with Windows Server 2012 - Step-by-Ste http://blogs.technet.com/b/keithmayer/archive/2012/08/06/safely-cloning-an-active-directory- domain-controller-with-windows-server-2012-step-by-step-ws2012- hyperv-itpro-vmware.aspx

by [deleted] at April 4, 2025, 9:13 a.m.

Comments

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!