StudyByteLearn
← AZ-802: Administering Windows Server
AZ-802 · AD DS · AD DS | Deploy and manage AD DS domain controllers

Practice question 9 of 506 · easy

A branch needs local domain authentication, has poor physical security, and has no requirement for local directory writes. Which DC model best limits exposure?

Choose the single best answer.

  1. A.A writable DC with every domain password cached locally
  2. B.An RODC with narrowly scoped password caching
  3. C.A separate forest that duplicates all production users
  4. D.A domain member server with the AD DS binaries only
Show the answer and explanation

✓ Correct answer

  • An RODC with narrowly scoped password caching

An RODC limits writable-directory and cached-secret exposure while supporting branch services. Broad writable/password exposure fails the security requirement. A duplicate forest changes identity design, and installed binaries on a member server do not provide DC authentication.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.