Your network contains an Active Directory domain named contoso.com.
The domain contains two Active Directory sites named Site1 and Site2.
You discover that when the account of a user in Site1 is locked out, the user can still log on to the
servers in Site2 for up to 15 minutes by using Remote Desktop Services (RDS).
You need to reduce the amount of time it takes to synchronize account lockout information across
the domain.
Which attribute should you modify? To answer, select the appropriate attribute in the answer
area.

Answer:

Explanation:

Replinterval must be a multiple of 15 minutes, a minimum of 15 minutes, and a maximum of
10,080 minutes (one week).
Therefore cannot be the ‘replinterval’ option
http://msdn.microsoft.com/en-us/library/ms679447(v=vs.85).aspx
Answer is ‘Options’.
Within the same site, AD replication usees ‘Change Notification’. When there is change, source
sends ‘Change Notification’ to replication partners, then, the parters send ‘Update Request’, then
source sends updated AD data.
Between sites, AD replication occurs on scheduled time. Default interval is 180 mins (3 hours).
You can set to minimum of 15 mins with 15 mins increment.
Urgent replication:
At some situations, you want to force replicaton between sites like Account Lockout. Two or more
ways to do this;
1. Use dssite.msc. right-click on the inbound replication partner which has change, then choose
replicate.

2. You can also set automatic replication with Change Notification.
Change Notification is only used intra-site replication.
But by changing an AD attribute ‘Options’ of the site link, you can force the replication between
sites jsut like intra-site repliction using Change Notficiation.
Set Options to 1 (USE_NOTIFY) in adsiedit.msc/ Configuration/ Sites/IP Transports/IP/site link.