Your network contains an Active Directory domain named contoso.com.
Contoso.com contains a domain controller named DC1 and a read-only domain controller
(RODC) namedRODC1.
You need to view the most recent user accounts authenticated by RODC1.
What should you do first?

A.
From Active Directory Sites and Services, right-click the Connection object for DC1, and
then click Replicate Now.

B.
From Active Directory Sites and Services, right-click the Connection object for DC2, and
then click Replicate Now.

C.
From Active Directory Users and Computers, right-click contoso.com, click Change
DomainController, and then connect to DC1.

D.
From Active Directory Users and Computers, right-click contoso.com, click Change
Domain Controller, and then connect to RODC1.

Explanation:
http://technet.microsoft.com/en-us/library/rodc-guidance-for-administering-the-passwordreplication-policy.aspx#BKMK_Auth2
To view authenticated accounts using Active Directory Users and Computers
1. Open Active Directory Users and Computers. To open Active Directory Users and
Computers, click Start.
In Start Search, type dsa.msc, and then press ENTER.
2. Ensure that you are connected to a writeable domain controller running Windows Server
2008 in the correct domain. To connect to the appropriate domain or domain controller, in
the details pane, right-click the Active Directory Users and Computers object, and then click
Change Domain or Change Domain Controller, respectively.
3. Click Domain Controllers.
4. In the details pane, right-click the RODC computer account, and then click Properties.
5. Click the Password Replication Policy tab.
6. Click Advanced.
7. In the drop-down list, click Accounts that have been authenticated to this Read-only
Domain Controller, as shown in the following illustration.