Authenticating users, enforcing policy and replication are the responsibilities of the Domain Controller.

Authenticating users, enforcing policy and replication are the responsibilities of the Domain Controller.

• A. Global Catalog
• B. Site
• C. Domain Controller
• D. Organizational Unit

Answer: (C)

A Domain Controller is the server responsible for authenticating users, enforcing policy, and coordinating replication within an Active Directory domain. When someone signs on to a domain-joined computer or service, the domain controller verifies their credentials and issues the appropriate access tokens, typically using Kerberos. It also enforces policy by applying Group Policy Objects to users and computers across the domain, ensuring security settings, software installation, and startup scripts are consistently applied. Additionally, domain controllers hold the directory data and replicate changes to other domain controllers to keep the AD information synchronized throughout the domain. The Global Catalog plays a supporting role by holding a partial, forest-wide copy of directory data to speed up searches and help with logon in multi-domain forests, but it is not the primary server that authenticates users or enforces domain policies. A Site is a conceptual representation of the network topology used to optimize replication and logon traffic, not a server that handles authentication. An Organizational Unit is a container used to organize objects and delegate administrative rights or apply policies, but it is not a server and does not perform authentication or replication.

A Domain Controller is the server responsible for authenticating users, enforcing policy, and coordinating replication within an Active Directory domain. When someone signs on to a domain-joined computer or service, the domain controller verifies their credentials and issues the appropriate access tokens, typically using Kerberos. It also enforces policy by applying Group Policy Objects to users and computers across the domain, ensuring security settings, software installation, and startup scripts are consistently applied. Additionally, domain controllers hold the directory data and replicate changes to other domain controllers to keep the AD information synchronized throughout the domain.

The Global Catalog plays a supporting role by holding a partial, forest-wide copy of directory data to speed up searches and help with logon in multi-domain forests, but it is not the primary server that authenticates users or enforces domain policies. A Site is a conceptual representation of the network topology used to optimize replication and logon traffic, not a server that handles authentication. An Organizational Unit is a container used to organize objects and delegate administrative rights or apply policies, but it is not a server and does not perform authentication or replication.