Mixed Deck — All MCTS 70-640 Topics Flashcards

What is the importance of data security in MCTS 70-640 digital applications?

Answer: Protecting sensitive information from unauthorized access, breaches, and loss is essential

This is fundamental to MCTS 70-640 Exam practice. Protecting sensitive information from unauthorized access, breaches, and loss is essential represents the professional standard for technology in the MCTS 70-640 certification framework.

Which DNS record type is required for domain controllers to be located by clients?

Answer: SRV record

SRV (Service Location) records allow clients to discover domain controllers and other AD services.

You need to configure an audit policy so that all successful and failed logon attempts are recorded in the Security event log on domain controllers. Which audit policy category should you enable?

Answer: Audit Account Logon Events

Audit Account Logon Events records authentication events (Kerberos ticket requests) on domain controllers where the accounts are validated.

When you run dcpromo with the /adv switch, what additional capability does it provide?

Answer: Allows installing from media (IFM) to reduce replication traffic

The /adv (advanced) switch enables the Install from Media (IFM) option, letting you use a backup to seed AD DS and minimize replication during promotion.

AD Federation Services (AD FS) is used primarily to enable which scenario?

Answer: Single sign-on across organizational boundaries using claims

AD FS provides web-based SSO and identity federation using standards like SAML to share identity claims across organizations.

Which AD DS feature allows you to prove to auditors that no unauthorized changes were made to the AD schema by comparing against a known-good state?

Answer: AD Snapshot (ntdsutil snapshot)

AD snapshots created with ntdsutil allow you to mount and compare a point-in-time copy of the AD database against the current state without impacting production.

What is a conditional forwarder in DNS?

Answer: A DNS server that forwards queries for a specific domain to designated servers

A conditional forwarder directs queries for a specific DNS namespace to particular DNS servers instead of using the standard forwarder.

Research into AD DS upgrade paths shows that when raising the domain functional level to Windows Server 2008, what new feature becomes available that was not present at the 2003 level?

Answer: Distributed File System Replication (DFSR) for SYSVOL

At Windows Server 2008 domain functional level, SYSVOL replication can be migrated from FRS to the more reliable DFSR mechanism.

Which Windows Server 2008 feature provides web-based enrollment for digital certificates?

Answer: AD CS Web Enrollment

Active Directory Certificate Services includes a Web Enrollment role service for browser-based certificate requests.

How do MCTS 70-640 professionals build trust with clients or stakeholders?

Answer: Through consistent competence, transparency, reliability, and ethical behavior

This is fundamental to MCTS 70-640 Exam practice. Through consistent competence, transparency, reliability, and ethical behavior represents the professional standard for communication in the MCTS 70-640 certification framework.

A security assessment identifies that Group Policy is being applied to sensitive domain controller OUs without change control. Which AD feature provides a detective control for unauthorized GPO changes?

Answer: Enabling Advanced Audit Policy for DS Access — Audit Directory Service Changes

Enabling 'Audit Directory Service Changes' generates event 5136 whenever a Group Policy object is modified, providing a detective control for unauthorized changes.

Fabrikam wants to block a specific GPO setting from applying to one computer in an OU without moving the computer or using a new OU. What is the correct approach?

Answer: Apply a security filter denying Apply Group Policy to that computer's account

Denying Apply Group Policy permission to a specific computer account via security filtering prevents the GPO from applying to that computer.

What is a corrective action in MCTS 70-640 Exam quality systems?

Answer: A systematic response to eliminate the cause of a detected nonconformity and prevent recurrence

This is fundamental to MCTS 70-640 Exam practice. A systematic response to eliminate the cause of a detected nonconformity and prevent recurrence represents the professional standard for quality in the MCTS 70-640 certification framework.

How do MCTS 70-640 professionals contribute to advancing their field?

Answer: By conducting research, sharing outcomes, mentoring others, and participating in professional forums

This is fundamental to MCTS 70-640 Exam practice. By conducting research, sharing outcomes, mentoring others, and participating in professional forums represents the professional standard for research in the MCTS 70-640 certification framework.

What technology does the Online Responder role service in AD CS implement to provide real-time certificate status without downloading a full CRL?

Answer: Online Certificate Status Protocol (OCSP)

The Online Responder implements OCSP, allowing clients to query the revocation status of a single certificate in real time.

Consolidated Messenger is migrating from Windows Server 2003 to Windows Server 2008 R2. After raising the domain functional level, administrators notice that fine-grained password policies still cannot be configured. What is the likely cause?

Answer: The domain functional level must be Windows Server 2008 or higher

Fine-Grained Password Policies require a minimum domain functional level of Windows Server 2008.

What is an Active Directory site in Windows Server 2008?

Answer: A logical representation of a well-connected IP network segment used to control replication and service location

An AD site represents a set of well-connected subnets, enabling AD to optimize replication traffic and guide clients to nearby domain controllers.

Which protocol can be used for inter-site replication over slower or unreliable WAN links as an alternative to RPC?

Answer: SMTP

SMTP-based inter-site replication can be used for non-domain-naming-context partitions (like schema and configuration) over unreliable links where RPC is not feasible.

How does continuous improvement apply to MCTS 70-640 quality management?

Answer: It involves ongoing incremental enhancements to processes based on data and feedback

This is fundamental to MCTS 70-640 Exam practice. It involves ongoing incremental enhancements to processes based on data and feedback represents the professional standard for quality in the MCTS 70-640 certification framework.

What is the effect of disabling a user account in Active Directory?

Answer: The user cannot log on but the account and memberships remain intact

Disabling an account prevents authentication while preserving all account attributes, group memberships, and permissions, allowing easy re-enablement when needed.