Your network contains one Active Directory Domain Services domain named contoso.com. The forest
functional level is Windows Server 2012. All servers run Windows Server 2012 R2. All client computers run
Windows 8.1.
The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01. All
domain controllers and RODCs are hosted on a Hyper-V host that runs Windows Server 2012 R2.
You need to identify which user accounts were authenticated by RODC01.
Which Windows PowerShell cmdlet should you run?

A.
Get-AdGroupMember

B.
Get-ADDomainControllerPasswordReplicationPolicy

C.
Get-ADDomainControllerPasswordReplicationPolicyUsage

D.
Get-ADDomain

E.
Get-ADOptionalFeature

F.
Get-ADAccountAuthorizationGroup

G.
Get-ADAuthenticationPolicySilo

H.
Get-ADAuthenticationPolicy

Explanation:
The Get-ADDomainControllerPasswordReplicationPolicyUsage gets the user or computer accounts that are
authenticated by a read-only domain controller (RODC) or that have passwords that are stored on that RODC.