← All MCTS 70-640 Flashcard Decks

Case Studies & Practical Application Flashcards

7 cards from real MCTS 70-640 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Case Studies & Practical Application flashcards as text
  1. A help desk technician at Blue Yonder Airlines accidentally deleted 200 user accounts. The forest functional level is Windows Server 2008 R2 and the AD Recycle Bin is enabled. What is the fastest recovery method?

    Answer: Use Get-ADObject with -IncludeDeletedObjects and Restore-ADObject

    With the AD Recycle Bin enabled, deleted objects can be restored via PowerShell using Restore-ADObject without any backup or DC restart.

  2. Woodgrove Bank needs to delegate the ability to reset passwords in the Tellers OU to a group called HelpDesk without granting them broader administrative rights. What is the correct approach?

    Answer: Use the Delegation of Control Wizard on the Tellers OU

    The Delegation of Control Wizard allows granular permission assignment on specific OUs for specific tasks such as password reset.

  3. Contoso deploys a new DC and notices AD replication is failing between two sites. Repadmin /showrepl shows error 8453. What does this indicate?

    Answer: Replication access denied due to insufficient permissions

    Error 8453 'Replication Access Was Denied' means the DC's computer account lacks the required replication permissions in AD.

  4. An administrator at Tailspin Toys wants to ensure that Group Policy settings apply immediately to all computers in an OU without waiting for background refresh. What command should be run on each client?

    Answer: gpupdate /force

    gpupdate /force triggers an immediate reapplication of all Group Policy settings on the local machine.

  5. Fourth Coffee has multiple sites connected by slow WAN links. AD replication is generating too much traffic between Site A and Site B. What should be configured to reduce replication frequency?

    Answer: Increase the replication interval on the site link between Site A and Site B

    Increasing the site link replication interval reduces how often changes are replicated between sites, lowering WAN traffic.

  6. Humongous Insurance wants to prevent users from installing software on their workstations. A GPO with Software Restriction Policies is deployed. Users report that .msi files installed by IT are also blocked. What should be configured?

    Answer: Set the default security level to Disallowed and add path rules for IT software

    Setting the default to Disallowed and creating path rules for approved locations allows IT-deployed software while blocking user installations.

  7. A forest trust between Contoso and Fabrikam is in place. Users in Contoso report that they can access some resources in Fabrikam but not others that they are explicitly permitted to access. SID history is suspected. What should be verified?

    Answer: That SID filtering (quarantine) is disabled on the trust if SID history migration was used

    SID filtering on forest trusts strips SID history attributes from cross-forest tokens, which can block access when SID history was used during migration.