70-649 · Question #326
Your network contains an Active Directory domain named contoso.com. The domain has a branch site that contains a read-only domain controller (RODC) named RODC1. A user named User1 is a member of the…
Sign in or unlock 70-649 to reveal the answer and full explanation for question #326. The question stem and answer options stay visible for context.
Question
Your network contains an Active Directory domain named contoso.com. The domain has a branch site that contains a read-only domain controller (RODC) named RODC1. A user named User1 is a member of the Allowed RODC Password Replication Group. User1 frequently logs on to a computer in the branch site. You remove User1 from the Allowed RODC Password Replication Group. You need to ensure that the password of User1 is no longer cached on R0DC1. What should you do?
Options
- AAdd User1 to the Denied RODC Password Replication Group, and then force Active Directory
- BRunrepadmin /rodcpwdrepl rodc2.contoso.com dc.contoso.com cn=User1,cn-
- CRunrepadmin /prp delete rodcl.contoso.com allow cn=User1, cn=users, dc=contoso,dc=com.
- DReset the password of User1, and then force Active Directory replication.
Unlock 70-649 to see the answer
You've previewed enough free 70-649 questions. Unlock 70-649 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.