MCSE 70-294: Active Directory Infrastructure 2 — Questions and Answers
Question 1: Which Active Directory object is used to apply Group Policy to a collection of users or computers?
- Organizational Unit (OU) (Correct answer)
- Security Group
- Distribution Group
- Site
Correct answer: Organizational Unit (OU)
Group Policy Objects (GPOs) are linked to Organizational Units, sites, or domains, but OUs provide the most granular control over policy application.
Question 2: What is the order of Group Policy application from lowest to highest priority?
- Local, Site, Domain, OU (Correct answer)
- OU, Domain, Site, Local
- Domain, Site, Local, OU
- Site, Local, Domain, OU
Correct answer: Local, Site, Domain, OU
Group Policy is applied in LSDOU order: Local, Site, Domain, OU — with later policies overwriting earlier ones by default.
Question 3: Which feature prevents a GPO linked to a parent container from applying to a child OU?
- Block Policy Inheritance (Correct answer)
- No Override
- Enforced
- Loopback Processing
Correct answer: Block Policy Inheritance
Block Policy Inheritance prevents GPOs linked to parent containers (site or domain) from flowing down to child OUs.
Question 4: What is the function of the Infrastructure Master FSMO role?
- Updates cross-domain group-to-user references (Correct answer)
- Manages RID pools for all DCs
- Handles schema modifications
- Authenticates users from other domains
Correct answer: Updates cross-domain group-to-user references
The Infrastructure Master updates references from objects in its domain to objects in other domains, ensuring cross-domain group membership is current.
Question 5: Which tool is used to view and modify Active Directory replication topology?
- Active Directory Sites and Services (Correct answer)
- Active Directory Users and Computers
- Group Policy Management Console
- Active Directory Domains and Trusts
Correct answer: Active Directory Sites and Services
Active Directory Sites and Services is the snap-in used to manage replication topology, site links, and subnets.
Question 6: What type of trust is automatically created between domains in the same forest in Windows Server 2003?
- Two-way transitive trust (Correct answer)
- One-way non-transitive trust
- External trust
- Shortcut trust
Correct answer: Two-way transitive trust
Windows Server 2003 forests automatically create two-way transitive trusts between all parent and child domains within the same forest.
MCSE 70-294: Active Directory Infrastructure 2
Which Active Directory object is used to apply Group Policy to a collection of users or computers?