MCTS 70-640 MCTS 70 640: Active Directory, Configuring 3 — Questions and Answers
Question 1: You need to verify which domain controller holds the RID Master FSMO role in your domain. Which command-line tool provides this information?
- repadmin /showrepl
- netdom query fsmo (Correct answer)
- dcdiag /test:ridmanager
- nltest /dsgetdc
Correct answer: netdom query fsmo
The command 'netdom query fsmo' displays all five FSMO role holders for the current domain and forest.
Question 2: A domain controller is being shut down permanently and it holds the PDC Emulator role. Before taking it offline, you must transfer the role. Which tool allows you to transfer FSMO roles interactively?
- Ntdsutil (Correct answer)
- Repadmin
- Netdom
- Dcdiag
Correct answer: Ntdsutil
Ntdsutil is used to transfer or seize FSMO roles and is the standard tool for role management in AD DS.
Question 3: Your organization uses fine-grained password policies. You create a Password Settings Object (PSO) with a minimum password length of 12. To which object types can a PSO be directly applied?
- Organizational Units and users
- Global security groups and users (Correct answer)
- Domain Local groups and computers
- Universal groups and OUs
Correct answer: Global security groups and users
PSOs can only be applied directly to global security groups and individual user accounts, not to OUs or other group types.
Question 4: You need to raise the domain functional level from Windows Server 2003 to Windows Server 2008 R2. What is the prerequisite for this change?
- All domain controllers must run Windows Server 2008 R2 or later (Correct answer)
- The forest functional level must first be raised to 2008 R2
- The PDC Emulator must be on a Windows Server 2012 DC
- All RODCs must be removed from the domain
Correct answer: All domain controllers must run Windows Server 2008 R2 or later
Every domain controller in the domain must be running at least Windows Server 2008 R2 before the domain functional level can be raised to that level.
Question 5: Which AD DS feature enables administrators to recover accidentally deleted objects without performing a full authoritative restore from backup?
- Shadow Copies
- Active Directory Recycle Bin (Correct answer)
- System State Restore
- Ntdsutil snapshot
Correct answer: Active Directory Recycle Bin
The Active Directory Recycle Bin, available at Windows Server 2008 R2 forest functional level, allows recovery of deleted objects while preserving all attributes.
Question 6: A site link between Site A and Site B has a cost of 100 and replication interval of 180 minutes. A site link between Site B and Site C has a cost of 50. What is the total cost for replication traffic routed from Site A to Site C through Site B?
- 50
- 100
- 150 (Correct answer)
- 200
Correct answer: 150
AD DS adds the costs of each site link in the path, so Site A to Site C via Site B equals 100 + 50 = 150.
Question 7: You need to configure AD DS replication so that changes in Site A are replicated to Site C only after passing through Site B. Which feature should you disable?
- Universal Group Membership Caching
- Site link transitivity
- Intersite Topology Generator
- KCC automatic site link bridging (Correct answer)
Correct answer: KCC automatic site link bridging
Disabling automatic site link bridging (making site links non-transitive) forces replication to follow only the explicitly defined site link paths.
MCTS 70-640 MCTS 70 640: Active Directory, Configuring 3
You need to verify which domain controller holds the RID Master FSMO role in your domain.
Which command-line tool provides this information?