What is one method for an RODC to improve security in a branch office?

• A. Implementing a strict password policy
• B. Using only two-factor authentication for sensitive tasks
• C. Limiting object replication to necessary accounts
• D. Minimizing traffic to the internet

Answer: (C)

Limiting object replication to necessary accounts is an effective method for a Read-Only Domain Controller (RODC) to enhance security in a branch office. This approach minimizes the risk of sensitive information being replicated to the RODC, which could potentially be compromised if the local office infrastructure is less secure. By restricting the replication to only those accounts that are essential for the operations of the branch office, the organization can reduce its attack surface and prevent unauthorized access or exploitation of critical domain data.

In scenarios where there may be a higher likelihood of physical security breaches or where local users might have less stringent security practices, this tactic is particularly beneficial. It ensures that only the necessary data needed for local authentication and operation is available on the RODC, thus improving the overall security posture of the branch environment. The other options may contribute to security, but they do not target the specific vulnerabilities associated with RODCs in branch offices in quite the same focused manner.