Your network contains one Active Directory domain named contoso.com. The forest functional level is Windows
Server 2012. All servers run Windows Server 2012 R2. All client computers run Windows 8.1.
The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01. All
domain controllers and RODCs are hosted on a Hyper-V host that runs Windows Server 2012 R2.
You need to identify which domain controllers are authorized to be cloned by using virtual domain controller
cloning.
Which cmdlet should you use?

A.
Get-ADGroupMember

B.
Get-ADDomainControllerPasswordReplicationPolicy

C.
Get-ADDomainControllerPasswordReplicationPolicyUsage

D.
Get-ADDomain

E.
Get-ADOptionalFeature

Explanation:
If you want to be able to clone a Domain Controller then authorize the original source Domain Controller to be
used as the source for cloning by adding it’s computer object into the new “Cloneable Domain Controllers”
Active Directory group.
The Get-ADGroupMember cmdlet gets the members of an Active Directory group. Members can be users,
groups, and computers.
We use the Get-ADGroupMember cmdlet to retrieve the members of the “Cloneable Domain Controllers”
Active Directory group.
Safely Cloning an Active Directory Domain Controller with Windows Server 2012 – Step-by-Ste
http://blogs.technet.com/b/keithmayer/archive/2012/08/06/safely-cloning-an-active-directory- domain-controllerwith-windows-server-2012-step-by-step-ws2012-hyperv-itpro-vmware.aspx