ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam 70-411 All Questions

View all questions & answers for the 70-411 exam
Go to Exam

Exam 70-411 topic 2 question 127 discussion

Actual exam question from Microsoft's 70-411
Question #: 127
Topic #: 2
[All 70-411 Questions]

Your network contains one Active Directory domain named contoso.com. The forest functional level is Windows Server 2012. All servers run Windows Server
2012 R2. All client computers run Windows 8.1.
The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01. All domain controllers and RODCs are hosted on a
Hyper-V host that runs Windows Server 2012 R2.
You need to identify which user accounts were authenticated by RODC1.
Which cmdlet should you use?

  • A. Get-ADGroupMember
  • B. Get-ADDomainControllerPasswordReplicationPolicy
  • C. Get-ADDomainControllerPasswordReplicationPolicyUsage
  • D. Get-ADDomain
  • E. Get-ADOptionalFeature
  • F. Get-ADAccountAuthorizationGroup
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
Gets the Active Directory accounts that are authenticated by a read-only domain controller or that are in the revealed list of the domain controller.
Reference: Get-ADDomainControllerPasswordReplicationPolicyUsage https://technet.microsoft.com/en-us/library/ee617194.aspx
by Hamilton at April 19, 2019, 11:39 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
ZUMY
3 years, 11 months ago
C answer
upvoted 2 times
...
Rezerestibeiro27
4 years, 4 months ago
C, it is.
upvoted 2 times
...
TechExams
4 years, 12 months ago
Correct Answer: C. Get-ADDomainControllerPasswordReplicationPolicyUsage.
upvoted 3 times
...
passitfirst
5 years, 6 months ago
Answer is A (found this great explanation on another site) It says all DCs are already 2012 R2. The PDC emulator ONLY needs to be on the server that has the same OS of the server you want to clone. For example, If the PDC emulator is on a server 2008 R2 DC, and I have a Server 2012 R2 server, I cannot clone from that 2008 R2 DC. I must transfer the PDC Emulator role to another 2012 R2 DC then clone from that 2012 R2 DC. In this question, all of the servers are already 2012 R2. So we dont need to care where the PDC emulator is. We just have to identify which DCs are authorized to be cloned. You can have more than one DC that is allowed to be cloned, and only 1 DC per domain is allowed to have the PDC emulator. So the answer is A. provided answer is wong. H-O-W-E-V-E-R…. There is another question that is very similar but asks “You need to identify which domain controller MUST BE ONLINE when cloning a domain controller.” In that case, the answer is D. Get-ADDomain | Select-Object PDCEmulator
upvoted 1 times
passitfirst
5 years, 6 months ago
sorry I pasted this in the wrong question. But there is no delete option. This answer should be C. Get-ADDomainControllerPasswordReplicationPolicyUsage
upvoted 4 times
...
...
Hamilton
5 years, 7 months ago
There is a paradox between right answer and reference!
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago