As the Company administrator you had installed a read-only domain controller (RODC) server at remote location.
The remote location doesn’t provide enough physical security for the server.
What should you do to allow administrative accounts to replicate authentication information to Read-Only Domain Controllers?
A.
Remove any administrative accounts from RODC’s group
B.
Add administrative accounts to the domain Allowed RODC Password Replication group
C.
Set the Deny on Receive as permission for administrative accounts on the RODC computer account Security tab for the Group Policy Object (GPO)
D.
Configure a new Group Policy Object (GPO) with the Account Lockout settings enabled. Link the GPO to the remote location. Activate the Read Allow and the Apply group policy Allow permissions for the administrators on the Security tab for the GPO.
E.
None of the above
Correct answer is E.
By default, administrative accounts and groups are part of the Denied group. Adding these accounts to the Allowed group will not override the deny permission.
http://technet.microsoft.com/en-us/library/cc730883(v=ws.10).aspx