Your network contains an Active Directory domain named contoso.com.
Contoso.com contains a domain controller named DC1 and a read-only domain controller (RODC) named
RODC1.
You need to view the most recent user accounts authenticated by RODC1.
What should you do first?

A.
From Active Directory Sites and Services, right-click the Connection object for DC1, and then click Replicate
Now.

B.
From Active Directory Sites and Services, right-click the Connection object for DC2, and then click Replicate
Now.

C.
From Active Directory Users and Computers, right-click contoso.com, click Change DomainController, and
then connect to DC1.

D.
From Active Directory Users and Computers, right-click contoso.com, click Change Domain Controller, and
then connect to RODC1.

Explanation:
Reference:
http://technet.microsoft.com/en-us/library/rodc-guidance-for-administering-the-password-replication-policy.
aspx#BKMK_Auth2
To view authenticated accounts using Active Directory Users and Computers
1. Open Active Directory Users and Computers. To open Active Directory Users and Computers, click
Start. In Start Search, type dsa.msc, and then press ENTER.
2. Ensure that you are connected to a writeable domaincontrollerrunning Windows Server 2008 in the
correct domain. To connect to the appropriate domain or domain controller, in the details pane, right-click
the Active Directory Users and Computers object, and then click Change Domain or Change Domain
Controller, respectively.
3. Click Domain Controllers.
4. In the details pane, right-click the RODC computer account, and then click Properties.
5. Click the Password Replication Policy tab.
6. Click Advanced.
7. In the drop-down list, click Accounts that have been authenticated to this Read-only Domain Controller, as
shown in the following illustration.