Administering Windows Server Hybrid Core Infrastructure (AZ-800) Practice

What is a characteristic of Read-only Domain Controllers (RODCs) in Azure?

1. Allow write access to directory objects.

2. Reduce egress traffic costs.

3. Act as a bridge between on-premises and Azure.

4. Enhance replication speed.

The correct answer is: Reduce egress traffic costs.

Read-only Domain Controllers (RODCs) are designed to enhance security and efficiency, particularly in remote locations or branch offices where a full Domain Controller might not be necessary or where security concerns exist. One key characteristic of RODCs is that they can help reduce egress traffic costs. In an Azure context, deploying RODCs can minimize the amount of data that needs to be transmitted over the network back to on-premises Active Directory. Because RODCs store a read-only copy of the Active Directory database, they can service many read requests locally without needing to reach the on-premises DC for each query. This capability significantly reduces the bandwidth required for accessing directory information and ultimately cuts down on egress charges from the cloud. The other options presented don't quite align with the core characteristics of RODCs. RODCs do not allow write access to directory objects, as they are intended to be read-only. They also don't serve as a bridge between on-premises and Azure, as that function typically falls more to hybrid configurations involving full Domain Controllers. Furthermore, while RODCs do replicate data, they do not enhance replication speed; in fact, they may introduce latency depending on the network configuration and distance from the writable Domain Controllers. The