Administering Windows Server Hybrid Core Infrastructure (AZ-800) Practice

Which option decreases egress traffic when deploying AD domain controllers in Azure?

1. Active Directory sites.

2. Add trust relationships.

3. Read-only domain controllers.

4. Regular domain controllers.

The correct answer is: Read-only domain controllers.

The implementation of read-only domain controllers (RODC) in Azure significantly decreases egress traffic when deploying Active Directory (AD) domain controllers. RODCs are designed to provide a way to operate a domain controller that requires minimal replication and network bandwidth. Unlike writable domain controllers, RODCs do not accept changes to the Active Directory database, which means they only need to replicate data, such as user credentials, from writable domain controllers at the main site. This reduced need for bi-directional replication to and from the RODC helps lower the amount of data transmitted over the network, thus resulting in decreased egress traffic. As the RODC stores only a subset of information and operates effectively in scenarios where complete writable domain controllers might not be necessary, it highlights a streamlined method of handling AD without overloading network resources. In scenarios where organizations deploy additional domain controllers in Azure, leveraging RODCs efficiently mitigates bandwidth issues that might occur with multiple writable domain controllers, particularly in hybrid configurations. This capability makes RODCs an optimal choice for environments that prioritize reducing traffic costs and load on the network.