HOTSPOT
Your network contains an Active Directory domain named contoso.com. The domain contains two
Active Directory sites named Site1 and Site2.
You discover that when the account of a user in Site1 is locked out, the user can still log on to the
servers in Site2 for up to 15 minutes by using Remote Desktop Services (RDS).
You need to reduce the amount of time it takes to synchronize account lockout information across
the domain.
Which attribute should you modify?
To answer, select the appropriate attribute in the answer area.
Answer: 
Explanation:
Enabling reciprocal replication between two sites involves modifying the options attribute value on
the site link object. With this attribute set on the site link, the KCC creates the connections across
the link with the appropriate setting that is in effect. Use ADSI Edit to enable reciprocal replication.Advanced Replication Management
http://technet.microsoft.com/en-us/library/cc961787.aspx
I agree with the given answer, but NOT with the explanation.
Reciprocal Replication could be used but I think Change Notification should be used for this question. This because With change notification between sites set, changes propagate to the remote site with the same frequency that they are propagated within the source site, including changes that warrant urgent replication.
Events That Trigger Urgent Replication
Urgent Active Directory replication is always triggered by certain events on all domain controllers within the same site. When you have enabled change notification between sites, these triggering events also replicate immediately between sites.
Immediate replication between Windows 2000–based domain controllers in the same site is prompted by the following:
•Assigning an account lockout, which prohibits a user from logging on after a certain number of failed attempts.
•Changing a Local Security Authority (LSA) secret, which is a secure form in which private data is stored by the LSA.
•Change in the relative identifier (known as a “RID”) master role owner, which is the single domain controller in a domain that assigns relative identifiers to all domain controllers in that domain.
0
0