MCTS 70-640 Active Directory Users, Groups & Organizational Units 2

Question 1

Which Active Directory group type can be used to assign permissions to resources such as file shares and printers?

Accepted Answer

Security group

Answer

Distribution group

Answer

Mail-enabled group

Answer

Administrative group

Question 2

In the AGDLP best-practice model for group nesting, what does the letter 'L' represent?

Accepted Answer

Domain Local group

Answer

Link

Answer

Level

Answer

Limit

Question 3

A Global group from DomainA is nested inside a Domain Local group in DomainB. What is the primary benefit of this configuration?

Accepted Answer

DomainA users gain access to DomainB resources

Answer

DomainB users gain access to DomainA resources

Answer

A two-way trust is automatically established

Answer

Permissions sync between both domains

Question 4

What must occur before you can convert a Universal security group to a Global group?

Accepted Answer

Remove all members from other domains

Answer

Convert it to a Distribution group first

Answer

Raise the domain functional level

Answer

Remove all nested Universal groups

Question 5

Which PowerShell cmdlet is used to create a new group object in Active Directory?

Accepted Answer

New-ADGroup

Answer

Add-ADGroup

Answer

Create-ADGroup

Answer

Set-ADGroup

Question 6

Which wizard in Active Directory Users and Computers allows an administrator to grant specific administrative permissions over an OU to a designated user or group?

Accepted Answer

Delegation of Control Wizard

Answer

New Object Wizard

Answer

Role Assignment Wizard

Answer

Administrative Template Wizard

Question 7

At what minimum domain functional level must a domain operate to support Password Settings Objects (PSOs) for fine-grained password policies?

Accepted Answer

Windows Server 2008

Answer

Windows Server 2003

Answer

Windows Server 2000 Native

Answer

Windows Server 2012