Your network contains an Active Directory domain named contoso.com.
Domain controllers run either Windows Server 2008, Windows Server 2008 R2, or Windows
Server 2012 R2.
You have a Password Settings object (PSOs) named PSO1.
You need to view the settings of PSO1. Which tool should you use?

A.
Get-ADDomainControllerPasswordReplicationPolicy

B.
Get-ADDefaultDomainPasswordPolicy

C.
Server Manager

D.
Get-ADFineGrainedPasswordPolicy

Explanation:
A)
Gets the members of the allowed list or denied list of a read-only domain controller’s password
replication policy
B)
Gets the default password policy for an Active Directory domain.
C)
PSO’s managed from AD AC or Powershell Only
D)
Gets one or more Active Directory fine grained password policies.
http://technet.microsoft.com/en-us/library/ee617207.aspx
http://technet.microsoft.com/en-us/library/ee617244.aspx
http://technet.microsoft.com/en-us/library/ee617231.aspx