MCTS 70-640 AD Sites, Replication & Forest Trusts 2 — Questions and Answers
Question 1: What is the purpose of the Intersite Topology Generator (ISTG)?
- To synchronize SYSVOL between sites
- To calculate and create inter-site connection objects for replication between sites (Correct answer)
- To assign IP subnets to sites
- To manage FSMO role transfers between sites
Correct answer: To calculate and create inter-site connection objects for replication between sites
The ISTG is one DC per site responsible for calculating the inter-site replication topology and creating bridgehead server connection objects.
Question 2: What is a forest trust in Active Directory?
- A trust between two domains in the same forest
- A two-way transitive trust between two separate AD forests (Correct answer)
- A one-way trust from a child to parent domain
- A shortcut trust between distant domains
Correct answer: A two-way transitive trust between two separate AD forests
A forest trust creates a two-way transitive trust between the root domains of two separate AD forests, enabling cross-forest resource access.
Question 3: Which type of trust shortens the authentication path between two domains in the same forest that are separated by multiple hops?
- External trust
- Shortcut trust (Correct answer)
- Forest trust
- Realm trust
Correct answer: Shortcut trust
A shortcut trust directly connects two domains within the same forest to speed up authentication that would otherwise traverse multiple parent-child domain links.
Question 4: What AD command-line tool is used to check replication status between domain controllers?
- repadmin /replsummary (Correct answer)
- dcdiag /test:replications
- ntdsutil /replication
- adrepl /check
Correct answer: repadmin /replsummary
repadmin /replsummary provides a summary of replication status across all DCs, showing failures and lag times.
Question 5: What does the 'repadmin /syncall' command do?
- Forces all domain controllers to synchronize immediately with all replication partners (Correct answer)
- Rebuilds the replication topology
- Tests network connectivity between DCs
- Transfers all FSMO roles to the current DC
Correct answer: Forces all domain controllers to synchronize immediately with all replication partners
repadmin /syncall triggers immediate replication between a DC and all its partners, useful for pushing urgent changes across the environment.
Question 6: Which attribute on a user object is used as the unique identifier that survives renames and moves across the AD forest?
- objectGUID (Correct answer)
- objectSid
- sAMAccountName
- distinguishedName
Correct answer: objectGUID
objectGUID is assigned at object creation and never changes regardless of renames, moves, or domain migrations, making it the most stable unique identifier.
MCTS 70-640 AD Sites, Replication & Forest Trusts 2
What is the purpose of the Intersite Topology Generator (ISTG)?