MCTS Windows Server 2008 Active Directory 2 — Questions and Answers
Question 1: Which tool is used to raise the domain functional level in Windows Server 2008 Active Directory?
- Active Directory Sites and Services
- Active Directory Domains and Trusts (Correct answer)
- Active Directory Users and Computers
- Group Policy Management Console
Correct answer: Active Directory Domains and Trusts
Active Directory Domains and Trusts is the MMC snap-in used to raise both the domain and forest functional levels.
Question 2: What is the default replication interval for Active Directory changes between domain controllers within the same site?
- 5 minutes (Correct answer)
- 15 minutes
- 30 minutes
- 60 minutes
Correct answer: 5 minutes
Within a site, AD replication is triggered immediately (notify-based) and occurs within approximately 5 minutes by default.
Question 3: A user account is disabled in Active Directory. Which of the following best describes the impact?
- The account is permanently deleted
- The user cannot log on but the account and its permissions remain (Correct answer)
- All group memberships are removed
- The account password is reset to blank
Correct answer: The user cannot log on but the account and its permissions remain
Disabling an account prevents logon while preserving the account object, group memberships, and all associated permissions.
Question 4: Which Active Directory feature allows administrators to recover deleted objects within a configurable period without restoring from backup?
- Shadow Copies
- Active Directory Recycle Bin (Correct answer)
- Volume Shadow Copy Service
- System State restore
Correct answer: Active Directory Recycle Bin
The Active Directory Recycle Bin, introduced in Windows Server 2008 R2, allows recovery of deleted AD objects with all attributes intact.
Question 5: Which type of group scope in Active Directory can contain members from any domain in the forest and be assigned permissions in any domain?
- Domain Local
- Global
- Universal (Correct answer)
- Distribution
Correct answer: Universal
Universal groups can contain members from any domain in the forest and can be granted permissions in any domain in the forest.
Question 6: What does the Active Directory attribute 'userPrincipalName' (UPN) represent?
- The user's SAM account name
- The user's logon name in email-like format (Correct answer)
- The user's distinguished name in LDAP
- The user's SID in the domain
Correct answer: The user's logon name in email-like format
The UPN is an internet-style logon name in the format user@domain.com, used for logon across domain boundaries.
Question 7: Which FSMO role is responsible for ensuring that the same object is not created with the same name in two different domain controllers simultaneously?
- Schema Master
- Domain Naming Master
- RID Master (Correct answer)
- Infrastructure Master
Correct answer: RID Master
The RID Master allocates pools of relative identifiers (RIDs) to domain controllers to ensure uniquely numbered security principals.
MCTS Windows Server 2008 Active Directory 2
Which tool is used to raise the domain functional level in Windows Server 2008 Active Directory?