Your company has a main office and 10 branch offices. The network consists of one Active Directory
domain. All domain controllers run Windows Server 2008 R2 and are located in the main office. You
plan to deploy one Windows Server 2008 R2 domain controller in each branch office. You are
concerned that the branch offices will fail to provide adequate security for the new domain
controllers. You need to recommend a security solution to meet the following requirements:
Prevent any unauthorized user from accessing user passwords whe n the server is running.
Prevent any unauthorized user from accessing user passwords either locally or over the network
on each branch office domain controller.
Which configuration should you recommend for each branch office domain controller?

A.
Enable an IPsec policy.

B.
Enable Windows Firewall.

C.
Enable the read-only domain controller (RODC) option.

D.
Enable Windows BitLocker Drive Encryption (BitLocker).