MCTS 70-640 Case Studies & Practical Application 5

Question 1

Coho Winery's Active Directory schema needs to be extended for a new application. The administrator runs the extension tool and receives 'Access Denied'. What is the minimum group membership required?

Accepted Answer

Schema Admins

Answer

Schema Admins is the only group with permission to modify the Active Directory schema.

Question 2

Lucerne Publishing runs a Windows Server 2008 R2 forest. An admin must transfer the Infrastructure Master FSMO role because the current holder is being decommissioned. What tool should be used?

Accepted Answer

Active Directory Users and Computers (ADUC)

Answer

The Infrastructure Master can be transferred using ADUC by right-clicking the domain and selecting 'Operations Masters'.

Question 3

A Contoso branch office loses its WAN connection. Local users cannot log on because there is no local DC. Which solution would have prevented this outcome?

Accepted Answer

Deploying an RODC in the branch office

Answer

An RODC provides local authentication services, eliminating dependency on WAN connectivity for logon.

Question 4

Fabrikam wants to block a specific GPO setting from applying to one computer in an OU without moving the computer or using a new OU. What is the correct approach?

Accepted Answer

Apply a security filter denying Apply Group Policy to that computer's account

Answer

Denying Apply Group Policy permission to a specific computer account via security filtering prevents the GPO from applying to that computer.

Question 5

Southridge Video needs to ensure that a GPO applying desktop wallpaper cannot be overridden by GPOs linked at lower levels. What setting should be configured on that GPO link?

Accepted Answer

Enforced (No Override)

Answer

Setting a GPO link to Enforced (formerly No Override) prevents child OU GPOs or Block Inheritance from overriding it.

MCTS 70-640 Exam Practice Test

MCTS 70-640 Exam Practice Test

MCTS 70-640 Case Studies & Practical Application 5