Practice Test Geeks70-413 Exam Practice Test
← All 70-413 Exam Flashcard Decks

Active Directory Infrastructure Design Flashcards

6 cards from real 70-413 Exam practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 6 Active Directory Infrastructure Design flashcards as text

  1. Which AD DS installation option allows you to deploy a new domain controller using backup media to avoid sending large amounts of replication traffic over a slow WAN link?

    Answer: Install from Media (IFM)

    Install from Media (IFM) uses ntdsutil-created backup media to pre-populate the AD database, drastically reducing initial replication over WAN links.

  2. What is the primary purpose of the tombstone lifetime setting in Active Directory?

    Answer: Ensures all DCs learn about deletions before objects are permanently purged

    The tombstone lifetime ensures every domain controller replicates a deletion marker before it is permanently removed, preventing deleted objects from reappearing.

  3. Which Active Directory feature, introduced in Windows Server 2008, allows different password complexity and lockout settings to be applied to specific users or groups within a single domain?

    Answer: Fine-Grained Password Policies

    Fine-Grained Password Policies use Password Settings Objects (PSOs) to apply different password and lockout rules to individual users or groups within the same domain.

  4. Which command-line tool is the primary utility for viewing replication status, forcing replication, and diagnosing replication failures between domain controllers?

    Answer: repadmin

    Repadmin is the command-line tool designed specifically for managing and diagnosing Active Directory replication between domain controllers.

  5. Which FSMO role must be accessible when adding a new domain to or removing a domain from an existing Active Directory forest?

    Answer: Domain Naming Master

    The Domain Naming Master FSMO role must be online and reachable when creating or removing domains because it ensures domain name uniqueness within the forest.

  6. What AD DS tool allows you to edit raw attribute values on directory objects and is commonly used for advanced configuration tasks not exposed in standard GUI tools?

    Answer: ADSI Edit

    ADSI Edit provides a low-level view of Active Directory objects and allows direct editing of any attribute, including those not exposed by standard management tools.