MCTS 70-640 Cheat Sheet 2026

The 30 highest-yield MCTS 70-640 facts, distilled from real exam questions. Print it, save it as a PDF, or study it here — free, no sign-up.

1. What role does active listening play in MCTS 70-640 Exam practice? → It ensures accurate understanding, demonstrates respect, and improves outcomes
2. Which Group Policy setting prevents local administrators on member computers from overriding domain GPO settings? → Enforced (No Override)
3. What is the default replication interval between sites in Active Directory when using the default site link? → 180 minutes
4. What is the primary purpose of a Certificate Revocation List (CRL) in a PKI deployment? → To publish certificates that are no longer trusted before their expiry
5. Which FSMO role is responsible for managing changes to the AD DS schema? → Schema Master
6. You need to verify which domain controller holds the RID Master FSMO role in your domain. Which command-line tool provides this information? → netdom query fsmo
7. Which Active Directory feature enables different password and lockout policies for different users or groups within a single domain? → Fine-Grained Password Policy
8. When delegating control in Active Directory, what is the recommended best practice for applying permissions to OUs? → Use the Delegation of Control Wizard and assign permissions at the appropriate OU level
9. To verify that a Windows Server 2008 domain controller has properly registered all required SRV records in DNS, which dcdiag test should be run? → dcdiag /test:DNS
10. Where should you store ADMX template files to make them available to all GPO editors in the domain? → Central store: SYSVOL\domain\Policies\PolicyDefinitions
11. What is the purpose of a stub zone in DNS? → To contain only NS, SOA, and A records for a zone to resolve names in that zone
12. At what minimum domain functional level must a domain operate to support Password Settings Objects (PSOs) for fine-grained password policies? → Windows Server 2008
13. What is a conditional forwarder in DNS? → A DNS server that forwards queries for a specific domain to designated servers
14. Which tool in Windows Server 2008 allows administrators to manually create connection objects and override the automatic replication topology? → Active Directory Sites and Services
15. A risk assessment identifies that users can enumerate all objects in Active Directory via anonymous LDAP queries. Which setting eliminates this risk? → Set the 'dsHeuristics' attribute to disable anonymous LDAP operations
16. How do MCTS 70-640 professionals build trust with clients or stakeholders? → Through consistent competence, transparency, reliability, and ethical behavior
17. Which FSMO role is responsible for maintaining a consistent time source across all domain controllers in a domain? → PDC Emulator
18. What is the benefit of interdisciplinary collaboration in MCTS 70-640 Exam practice? → It brings diverse expertise and perspectives that improve outcomes and innovation
19. Which command-line tool is used to move an Active Directory user object from one OU to another? → DSMOVE
20. What is a site link bridge in Active Directory? → A logical object that allows transitive replication routing through multiple site links
21. A junior administrator accidentally deleted an OU containing 200 user accounts. No Recycle Bin is enabled. What is the correct recovery procedure? → Perform an authoritative restore from a system state backup using ntdsutil
22. What is the effect of setting a DNS zone's 'Allow zone transfers' to 'Only to servers listed on the Name Servers tab'? → Restricts zone transfers to only authoritative secondary DNS servers
23. Which Group Policy preference item type allows you to map network drives per user? → Drive Maps under User Configuration → Preferences → Windows Settings
24. Which of the following would NOT be a justification for starting a new website? → Remote users need access to a centrally located data center.
25. Which Active Directory partition stores the site topology, site links, and subnet-to-site mappings? → Configuration partition
26. An administrator needs to delegate control of an OU to a help desk team. Which tool should be used? → Active Directory Users and Computers delegation wizard
27. What is the most effective communication approach for MCTS 70-640 professionals? → Adapting communication style to the audience while maintaining accuracy and clarity
28. When creating an Organizational Unit (OU), which option should be enabled to prevent accidental deletion? → Protect object from accidental deletion
29. What role does peer review play in MCTS 70-640 Exam practice? → It provides quality assurance and professional development through collegial evaluation
30. What is the purpose of regular risk reviews in MCTS 70-640 Exam practice? → To identify new risks, evaluate control effectiveness, and update mitigation strategies