Your network contains one Active Directory domain named contoso.com. The forest functional level
is Windows Server 2012. All servers run Windows Server 2012 R2. All client computers run Windows
8.1.
The domain contains 10 domain controllers and a read-only domain controller (RODC) named
RODC01. All domain controllers and RODCs are hosted on a Hyper-V host that runs Windows Server
2012 R2.
You need to identify which domain controllers are authorized to be cloned by using virtual domain
controller cloning.
Which cmdlet should you use?
A.
Get-ADGroupMember
B.
Get-ADDomainControllerPasswordReplicationPolicy
C.
Get-ADDomainControllerPasswordReplicationPolicyUsage
D.
Get-ADDomain
E.
Get-ADOptionalFeature
F.
Get-ADAccountAuthorizationGroup
Explanation:
One requirement for cloning a domain controller is an existing Windows Server 2012 DC that hosts
the PDC emulator role. You can run the Get-ADDomain and retrieve which server has the PDC
emulator role.
Example: Command Prompt: C:\PS>
Get-ADDomain
Output wouldinclude a line such as: PDCEmulator : Fabrikam-DC1.Fabrikam.comStep-by-Step: Domain Controller Cloning
http://blogs.technet.com/b/canitpro/archive/2013/06/12/step-by-step-domain-controllercloning.aspxGet-ADDomain
https://technet.microsoft.com/en-us/library/ee617224.aspx
Isn’t it A instead?
To list members of the Cloneable Domain Controllers Group?
Thank you
Answer:A Get-ADGroupMember
You need to identify which domain controller must be online when cloning a domain controller.
The answer is C in order to clone a domain controller yuo must know wichone has the PDC emulator https://blogs.technet.microsoft.com/canitpro/2013/06/11/step-by-step-domain-controller-cloning/
What you say is a true fact but it doesn’t answer the question. The question asks to identify which DCs can be cloned, and the answer is A, like Calin and MT wrote above.
I mean D Get-ADDomain in order to clone a domain controller yuo must know wichone has the PDC emulator https://blogs.technet.microsoft.com/canitpro/2013/06/11/step-by-step-domain-controller-cloning/
“You need to identify which domain controllers are authorized to be cloned by using virtual domain
controller cloning.”
You must to check which DC’s are in Clonable Domain Controllers group by Get-ADGroupMember. Answer A
A, dcs allowed to be cloned must be in the clonable dc group
Knowing which dc has the pdc emulator is irrelevant to the question, keyword is authorized:
“which domain controllers are authorized to be cloned”
suring there is windows 2012 R2 DC,so what he need to do is to identify which server is member of cloneable domain controllers group
correct answer is A
run get-adgroupmember “cloneable domain controllers”
Agree, it is A
http://mikefrobbins.com/2014/03/20/use-powershell-to-determine-the-pdc-emulator-fsmo-role-holder-in-your-active-directory-forest-root-domain/