Which FSMO role manages the relative ID (RID) pool for new security principals?

• A. It stores the domain naming data
• B. It handles Kerberos tickets
• C. It manages the relative ID pool for new security principals
• D. It processes GPOs

Answer: (C)

The key idea here is that the RID Master controls how new security principals get their unique identifiers. Every user, group, or computer in a domain receives a security identifier (SID) formed from the domain SID plus a relative ID (RID). The RID Master allocates blocks of RIDs to domain controllers, so those controllers can quickly assign a fresh RID to each new object without constantly contacting a central authority. When a DC runs low on its allocated RIDs, it requests more from the RID Master, ensuring every new object ends up with a unique SID across the domain. The other FSMO roles handle different duties (schema changes, domain naming, Kerberos-related processes, or GPO-related tasks), not the RID pool management.