Why might Jessica choose to create a filtered attribute set for her RODC?

• A. To replicate all objects for better access
• B. To prevent certain objects from being replicated
• C. To enhance the security of the user credentials
• D. To increase the size of the replicated database

Answer: (B)

Creating a filtered attribute set for a Read-Only Domain Controller (RODC) allows an administrator like Jessica to prevent certain objects from being replicated to the RODC. This selection is particularly useful in scenarios where sensitive information, such as user credentials or specific types of data, should not be accessible in a read-only capacity for security reasons.

By filtering certain objects, Jessica can maintain improved security and control over what information is available at the RODC. For instance, if the RODC is located in a less secure environment or is accessed by users who should not see sensitive data, filtering can significantly reduce the risk of unauthorized access to this information. Consequently, while other options may imply benefits such as improved access or increased capacity, they do not align with the primary purpose of using a filtered attribute set, which is to enhance security by controlling the replication of specific data objects.