An RODC must not cache privileged administrator passwords. What should be configured and reviewed?

1. The workstation wallpaper policy
2. Its password replication policy and actual cached credentials
3. Only the server's DNS suffix
4. A larger system disk