You configure 'redistribute connected route-map RM' and RM contains a clause that denies certain connected subnets. What happens to those denied connected routes?

When a route-map is used with the redistribute command, it acts as a filter. If a deny clause in the route-map matches a route, that route is explicitly prevented from being redistributed into the target routing protocol. This is the primary function of a deny statement in a route-map applied to redistribution. Redistributing with metric 0 or automatic tagging are not default behaviors for denied routes; they are either permitted and redistributed (potentially with modifications) or denied and not redistributed at all. Redistribution to only internal neighbors is also not a direct consequence of a route-map deny clause; the denial prevents redistribution entirely.