MCTS 70-640 Active Directory Users, Groups & Organizational Units 1 — Questions and Answers
Question 1: Which attribute must be unique within an Active Directory forest and is required for user logon?
- Display Name
- User Principal Name (UPN) (Correct answer)
- Description
- Office Location
Correct answer: User Principal Name (UPN)
The User Principal Name (UPN) must be unique across the entire forest and serves as the primary logon identifier in the format user@domain.
Question 2: Which command-line tool is specifically designed to import and export Active Directory objects using CSV-formatted files?
- LDIFDE
- NTDSUTIL
- CSVDE (Correct answer)
- DSADD
Correct answer: CSVDE
CSVDE is used to import and export Active Directory objects using comma-separated value (CSV) files, making bulk account creation efficient.
Question 3: Which feature introduced in Windows Server 2008 R2 allows administrators to restore deleted Active Directory objects without performing a full directory restore?
- Shadow Copies
- Active Directory Recycle Bin (Correct answer)
- Windows Server Backup
- System State Restore
Correct answer: Active Directory Recycle Bin
The Active Directory Recycle Bin, available from Windows Server 2008 R2 domain functional level, lets admins restore deleted objects while preserving all attributes.
Question 4: Which group scope can contain members from any domain in the forest and can be assigned permissions in any domain within the forest?
- Domain Local
- Global
- Universal (Correct answer)
- Built-in Local
Correct answer: Universal
Universal groups have the widest scope — they can contain members from any domain and be assigned permissions in any domain across the entire forest.
Question 5: What is the maximum character length of a pre-Windows 2000 compatible logon name (SAMAccountName) in Active Directory?
- 64 characters
- 20 characters (Correct answer)
- 256 characters
- 128 characters
Correct answer: 20 characters
The SAMAccountName is limited to 20 characters to maintain backward compatibility with older Windows systems.
Question 6: When creating an Organizational Unit (OU), which option should be enabled to prevent accidental deletion?
- Enable Tombstone Protection
- Protect object from accidental deletion (Correct answer)
- Enable Object Auditing
- Set Deny Delete permission explicitly
Correct answer: Protect object from accidental deletion
The 'Protect object from accidental deletion' checkbox adds a Deny Delete ACE to the object, preventing inadvertent removal from the directory.
Question 7: Which tab in an OU's Properties dialog must be accessed to remove accidental deletion protection before the OU can be deleted?
- General
- Managed By
- Object (Correct answer)
- Security
Correct answer: Object
The Object tab in the OU Properties dialog contains the 'Protect object from accidental deletion' checkbox that must be unchecked before deletion.
MCTS 70-640 Active Directory Users, Groups & Organizational Units 1
Which attribute must be unique within an Active Directory forest and is required for user logon?