Your network contains an Active Directory domain named contoso.com.
Domain controllers run either Windows Server 2008, Windows Server 2008 R2, or Windows Server 2012 R2.
You have a Password Settings object (PSOs) named PSO1.
You need to view the settings of PSO1.
Which tool should you use?

A.
Get-ADDomainControllerPasswordReplicationPolicy

B.
Get-ADDefaultDomainPasswordPolicy

C.
Server Manager

D.
Get-ADFineGrainedPasswordPolicy

Explanation:
A)
Gets the members of the allowed list or denied list of a read-only domain controller’s password replication policy
B)
Gets the default password policy for an Active Directory domain.
C)
PSO’s managed from AD AC or Powershell Only
D)
Gets one or more Active Directory fine grained password policies.
http://technet.microsoft.com/en-us/library/ee617207.aspx

http://technet.microsoft.com/en-us/library/ee617244.aspx
http://technet.microsoft.com/en-us/library/ee617231.aspx