Exam 70-417 topic 1 question 432 discussion

Actual exam question from Microsoft's 70-417

Question #: 432
Topic #: 1

Note: This question is part of a series of questions that use the same or similar answer choices. An answer may be correct for more than one question in the series. Each question is independent of the other questions in this series. Information and details provided in a question apply only to that question.
Your network contains one Active Directory domain named contoso.com. The forest functional level is Windows Server 2012. All servers run Windows Server
2012 R2. All client computers run Windows 8.1.
The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01. All domain controllers and RODCs are hosted on a
Hyper-V host that runs Windows Server 2012 R2.
You need to identify which domain controllers are authorized to be cloned by using virtual domain controller cloning.
Which cmdlet should you use?

A. Get-AdGroupMember
B. Get-ADDomainControllerPasswordReplicationPolicy
C. Get-ADDomainControllerPasswordReplicationPolicyUsage
D. Get-ADDomain
E. Get-ADOptionalFeature
F. Get-ADAccountAuthorizationGroup
G. Get-ADAuthenticationPolicySilo
H. Get-ADAuthenticationPolicy

Show Suggested Answer

Suggested Answer: A 🗳️
https://technet.microsoft.com/en-us/library/ee617193.aspx
https://blogs.technet.microsoft.com/canitpro/2013/06/11/step-by-step-domain-controller-cloning/

by ms70743 at Aug. 27, 2020, 9:45 a.m.

Comments

Submit Cancel

ms70743

4 years, 9 months ago

We just have to identify which DCs are authorized to be cloned. You can have more than one DC that is allowed to be cloned, and only 1 DC per domain is allowed to have the PDC emulator. So the answer is A. Get-AdGroupMember There is another question that is very similar but asks “You need to identify which domain controller MUST BE ONLINE when cloning a domain controller.” In that case, the answer is D. Get-ADDomain Get-ADDomain | Select-Object PDCEmulator

upvoted 2 times

...