You deployed an RODC named RODC1 and need User1 to be a local administrator on that RODC, using the principle of least privilege. Which tool or method should you use?

The correct answer is dsmgmt.exe. This command-line tool is used to manage various aspects of Active Directory, including the administration roles on an RODC. Specifically, you would use dsmgmt.exe to add User1 to the "Delegated Administrators" group for RODC1, granting them local administrator rights without making them a domain administrator. System Configuration (msconfig.exe) is used for managing startup options and services, not for Active Directory administration. Computer Management is a general-purpose tool for managing local computer settings, but it doesn't directly manage RODC delegated administration. Active Directory Sites and Services is used for managing the physical structure of the Active Directory, such as sites, subnets, and replication, not for assigning local administrator roles on an RODC.