You are employed as a senior network administrator at ABC.com. ABC.com has an Active Directory domain
named ABC.com.
All servers, including domain controllers, on the ABC.com network have Windows Server 2012 installed.
You are running a training exercise for junior network administrators.
You are currently discussing the Allowed RODC Password Replication Policy group.
Which of the following is TRUE with regards to the Allowed RODC Password Replication Policy group?
A.
Cert Publishers are members by default.
B.
Enterprise Read-Only Domain Controllers are members by default.
C.
It has no members by default.
D.
Enterprise Domain Controllers are members by default.
https://technet.microsoft.com/en-us/library/cc730883(v=ws.10).aspx.
It’s the Denied Group has many has members.
The Allowed has none by default.
By default, the Allowed RODC Password Replication Group has no members. Also by default, the Allowed List attribute contains only the Allowed RODC Password Replication Group.