Introduction to MCTS 70-640 Flashcards

There are a few recommended practices that you ought to adhere to while finalizing the FLZ configuration for a production environment. If your network has Windows 2000 Servers, pick one from the list to utilize.

Answer: Use the All Domain Controllers In This Domain For Windows 2000 Compatibility option.

When configuring the functional level for an Active Directory forest, compatibility with older operating systems like Windows 2000 Servers is crucial. The 'All Domain Controllers In This Domain For Windows 2000 Compatibility' option ensures that Windows 2000 domain controllers can coexist and function correctly within the forest. Selecting this option prevents operational issues and maintains directory service functionality across the network.

By establishing numerous entries with various IP addresses for the same resource, DNS servers can be set up to offer high availability. The name of this is?

Answer: Round robin

Round robin is a DNS load balancing technique that provides high availability by distributing client requests among multiple servers. When a DNS server receives a query for a resource configured with multiple IP addresses, it cycles through these addresses in a rotating fashion. This method ensures that traffic is spread across different servers, preventing any single server from becoming a bottleneck and improving overall service availability.

The functional level chosen affects the functions that are offered in an Active Directory domain. What number of functional levels is offered by Windows Server 2008?

Answer: 3

Windows Server 2008 offers three distinct domain functional levels: Windows 2000 native, Windows Server 2003, and Windows Server 2008. Each functional level determines the specific set of Active Directory features that are available within the domain. Upgrading to a higher functional level unlocks more advanced capabilities but requires all domain controllers in that domain to be running at least the corresponding Windows Server version.

By making features that aren't available on older server operating systems available, upgrading your functional domain level delivers benefits. Which of the following features is exclusive to the domain functional level of Windows Server 2008?

Answer: Last interactive logon information

The 'Last interactive logon information' feature is a specific enhancement introduced with the Windows Server 2008 domain functional level. This capability allows administrators to view details about a user's last successful interactive logon, including the time and the workstation used. This information is invaluable for security auditing, troubleshooting user logon issues, and monitoring user activity within the domain.

Which of the following would NOT be a justification for starting a new website?

Answer: Remote users need access to a centrally located data center.

Starting a new Active Directory site is typically justified by factors that impact network performance and replication efficiency, such as slow network links, a large number of users in a remote location, or excessive replication traffic. Simply needing remote users to access a centrally located data center does not, by itself, necessitate a new AD site. The primary goal of creating a new site is to optimize authentication and replication for geographically dispersed networks.

Which of the following must be used by a RODC if it is caching user credentials, authenticating users, and processing service tickets?

Answer: Password Replication Policy

A Read-Only Domain Controller (RODC) uses the Password Replication Policy (PRP) to control which user credentials it is allowed to cache locally. For a RODC to authenticate users and process service tickets, it must have the relevant user passwords stored. The PRP explicitly defines which user and computer account passwords can be replicated to and stored on the RODC, enhancing security by limiting the exposure of sensitive credentials.

What statement regarding Active Directory Lightweight Directory Services is accurate?

Answer: AD LDS is an application

Active Directory Lightweight Directory Services (AD LDS) is an application-specific directory service that runs as a standalone service on Windows Server. Unlike full Active Directory Domain Services (AD DS), AD LDS does not require a domain controller or domain membership. It provides directory services to applications without the overhead and infrastructure requirements of a complete Active Directory deployment.