Question

Which of the following best describes an rodc?

a. a domain controller that's responsible for making changes to the directory's forest-wide domain name space.
b. a domain controller that hosts read-only partitions of active directory's database.
c. a domain controller that's been assigned the responsibility for performing updates to the directory schema.
d. a domain controller assigned the responsibility to allocate sequences of rids to each domain controller in its domain

Answer 1

The correct answer to the question is b. a domain controller that hosts read-only partitions of Active Directory's database, which refers to a Read-Only Domain Controller (RODC). The correct option is B.

Step-by-step explanation:

The question is asking which statement best describes a Read-Only Domain Controller (RODC). The correct answer is b. a domain controller that hosts read-only partitions of Active Directory's database. An RODC is a type of domain controller in the Windows Server operating system that hosts a read-only copy of the Active Directory database. It is typically deployed in environments where security concerns are paramount, such as a branch office with poor physical security.

Unlike a standard domain controller, an RODC does not allow changes to be written directly to the Active Directory database. Instead, all changes must be made at a writable domain controller and then replicated to the RODC. This helps prevent unauthorized or accidental changes to the directory service and enhances security. Moreover, RODCs can be used to authenticate users and manage network access while minimizing the risks associated with storing sensitive Active Directory data on less secure servers.