3.5 -> 18.104.22.168
Yes currently, if the Domain Controller has SRV DNS records advertising it's services, QAS will contact it, and assume the DC is giving back valid and correct information. In the case of a partially replicated server this may not be correct.
Firewalling off the DC, and removing the AD SITE records while the replication is occurring so that it is out of service to clients.
Versions from 22.214.171.124
QAS will check that the DC is in a consistent state by checking isSynchronized attribute.