Exam 70-412 topic 4 question 17 discussion

Actual exam question from Microsoft's 70-412

Question #: 17
Topic #: 4

Your network contains an Active Directory domain. The domain contains a read-only domain controller (RODC) named RODC1 that runs Windows Server 2012
R2.
A domain user named User1 is a member of the following domain groups:
✑ DnsAdmins
✑ Backup Operators
✑ Account Operators
✑ DHCP Administrators
✑ Hyper-V Administrators
✑ Allowed RODC Password Replication Group
User1 is authenticated by RODC1.
You discover that the password for User1 is not cached on RODC1.
Which two groups prevent the password from being cached on RODC1? (Each correct answer presents part of the solution. Choose two.)
NOTE: Each correct selection is worth one point.

A. DnsAdmins
B. Allowed RODC Password Replication Group
C. Backup Operators
D. DHCP Administrators
E. Hyper-V Administrators
F. Account Operators

Show Suggested Answer

Suggested Answer: CF 🗳️
References:
http://www.rebeladmin.com/2014/10/password-replication-in-rodc/

by NerdAlert at Jan. 21, 2021, 7:19 p.m.

Comments

Submit Cancel

NerdAlert

4 years, 5 months ago

From link - Denied RODC Password Replication Group: Members of this group are deny to cache passwords in RODC. Some of the groups which are security critical are member of this group by default such as Administrators, Server Operators, Backup Operators, Account Operators.

upvoted 1 times

NerdAlert

4 years, 5 months ago

(this is the link from the explanation) http://www.rebeladmin.com/2014/10/password-replication-in-rodc/

upvoted 1 times

...