70-413 Exam Active Directory Infrastructure Design 2 — Questions and Answers
Question 1: Which FSMO role updates cross-domain object references (phantom objects) to keep them consistent across domains in the forest?
- PDC Emulator
- RID Master
- Infrastructure Master (Correct answer)
- Schema Master
Correct answer: Infrastructure Master
The Infrastructure Master is responsible for updating references to objects in other domains so that cross-domain group memberships remain accurate.
Question 2: When designing a Read-Only Domain Controller (RODC) deployment, which policy controls which account passwords are allowed to be cached on the RODC?
- Fine-Grained Password Policy
- Password Replication Policy (Correct answer)
- Credential Roaming Policy
- Selective Authentication Policy
Correct answer: Password Replication Policy
The Password Replication Policy on each RODC defines the Allowed and Denied lists of accounts whose credentials may be cached locally.
Question 3: What is the recommended placement for the PDC Emulator FSMO role in a multi-site Active Directory environment?
- At the site with the fewest users
- At the site with the most domain controllers
- At the site with the best connectivity to all other sites (Correct answer)
- At any site containing a global catalog server
Correct answer: At the site with the best connectivity to all other sites
The PDC Emulator should be at the best-connected site because it receives urgent replication notifications from all DCs and handles time synchronization.
Question 4: Which AD DS component stores information about the physical network topology and is used by the KCC to generate an optimal replication topology?
- Domain
- Site (Correct answer)
- Subnet
- Site Link Bridge
Correct answer: Site
AD DS Sites represent well-connected IP subnets and are used by the Knowledge Consistency Checker (KCC) to build the inter-site replication topology.
Question 5: Which replication protocol is preferred for inter-site Active Directory replication because it supports synchronous replication of all directory partitions?
- RPC over IP (Correct answer)
- SMTP
- FTP
- HTTP
Correct answer: RPC over IP
RPC over IP is preferred for inter-site replication because it replicates all naming contexts synchronously, whereas SMTP only works for non-domain partitions.
Question 6: What Windows Server 2012 feature exposed to virtual machines prevents USN rollback when a Hyper-V snapshot of a domain controller is restored?
- Dynamic Memory
- VM-GenerationID (Correct answer)
- Hyper-V Replica
- Virtual Fibre Channel
Correct answer: VM-GenerationID
VM-GenerationID notifies the domain controller when a VM snapshot has been applied, triggering automatic USN rollback protection and safe virtualization handling.
70-413 Exam Active Directory Infrastructure Design 2
Which FSMO role updates cross-domain object references (phantom objects) to keep them consistent across domains in the forest?