MCM Active Directory 2 — Questions and Answers
Question 1: Which Active Directory partition is replicated to all domain controllers in the entire forest?
- Domain partition
- Schema partition (Correct answer)
- Application partition
- Configuration partition
Correct answer: Schema partition
The Schema partition is forest-wide and replicated to every DC in the forest, unlike the Domain partition which is replicated only within its domain.
Question 2: What is the maximum number of trusts a single domain can have in Active Directory?
- No hard limit (Correct answer)
- 255
- 100
- 1024
Correct answer: No hard limit
Active Directory does not impose a hard limit on the number of trusts a domain can have, though practical limits apply based on hardware and network resources.
Question 3: In AD DS, which command-line tool is used to seize FSMO roles if the current role holder is permanently offline?
- ntdsutil (Correct answer)
- netdom
- dcpromo
- repadmin
Correct answer: ntdsutil
Ntdsutil is used to seize FSMO roles forcibly when the current role holder cannot be brought back online.
Question 4: Which Active Directory feature allows you to restore accidentally deleted objects without restoring from backup?
- Shadow Copies
- Active Directory Recycle Bin (Correct answer)
- System State Restore
- Tombstone reactivation
Correct answer: Active Directory Recycle Bin
The Active Directory Recycle Bin, introduced in Windows Server 2008 R2, allows full restoration of deleted objects with all attributes intact.
Question 5: What does the Global Catalog store in addition to a full replica of its host domain's objects?
- Full replicas of all domains in the forest
- Partial replicas of all other domains in the forest (Correct answer)
- Only universal group memberships
- Schema partition only
Correct answer: Partial replicas of all other domains in the forest
The Global Catalog stores a full replica of its host domain and a partial replica (subset of attributes) of all other domains in the forest.
Question 6: Which authentication protocol does Active Directory use by default in Windows Server 2008 and later environments?
- NTLM v2
- Kerberos v5 (Correct answer)
- LDAP over SSL
- Digest authentication
Correct answer: Kerberos v5
Kerberos v5 is the default authentication protocol in Active Directory environments running Windows Server 2008 and later.
Question 7: What is the default tombstone lifetime in Active Directory on Windows Server 2003 SP1 and later?
- 30 days
- 60 days
- 180 days (Correct answer)
- 90 days
Correct answer: 180 days
Starting with Windows Server 2003 SP1, the default tombstone lifetime was increased from 60 to 180 days to allow longer DC offline periods.
MCM Active Directory 2
Which Active Directory partition is replicated to all domain controllers in the entire forest?