A branch office has limited physical security and needs local authentication services. Which domain-controller option should be assessed?

1. A standalone DNS server as a complete replacement for domain authentication
2. A copied directory database on a workgroup server
3. A read-only domain controller with an appropriate password replication policy
4. A writable controller with unrestricted credential caching