MCTS 70-640 Communication & Stakeholder Relations 3 — Questions and Answers
Question 1: Your security team needs to receive email alerts whenever a privileged group membership changes in Active Directory. Which solution best automates this notification?
- Scheduled Netdom queries
- Configuring audit policies and using Windows Event Log subscriptions with a SMTP-capable alerting tool (Correct answer)
- Manually reviewing ADUC weekly
- Enabling SNMP on all domain controllers
Correct answer: Configuring audit policies and using Windows Event Log subscriptions with a SMTP-capable alerting tool
Combining audit policies for group membership changes with event log forwarding and an SMTP alerting tool provides automated, real-time notification to the security team.
Question 2: An executive stakeholder wants a high-level view of Active Directory site topology to understand inter-office communication paths. Which tool visualizes AD site links and replication topology?
- Active Directory Users and Computers
- Active Directory Sites and Services (Correct answer)
- Netdom Query
- Repadmin /showrepl
Correct answer: Active Directory Sites and Services
Active Directory Sites and Services provides a graphical representation of site topology, site links, and replication connections that can be used in stakeholder presentations.
Question 3: After deploying a new fine-grained password policy, management wants confirmation that the policy applies correctly to the target group. Which command verifies and reports the resultant PSO for a specific user?
- Get-ADUser -Properties PasswordPolicy
- Get-ADUserResultantPasswordPolicy in PowerShell (Correct answer)
- Netdom computername /query
- Secedit /analyze
Correct answer: Get-ADUserResultantPasswordPolicy in PowerShell
The Get-ADUserResultantPasswordPolicy PowerShell cmdlet returns the effective fine-grained password policy applied to a specific user, providing clear confirmation for management.
Question 4: A compliance officer requires documentation proving that Active Directory backups are current. Which Windows Server Backup feature provides a verifiable backup status report?
- Backup log in Event Viewer under Windows Logs > Application with source Microsoft-Windows-Backup (Correct answer)
- ADUC account properties
- Repadmin /showbackup
- Netlogon.log
Correct answer: Backup log in Event Viewer under Windows Logs > Application with source Microsoft-Windows-Backup
Windows Server Backup writes detailed success and failure events to the Application event log under the Microsoft-Windows-Backup source, providing auditable backup status records.
Question 5: The helpdesk manager wants a report showing all disabled user accounts in the domain for quarterly review. Which PowerShell command produces this list most efficiently?
- Get-ADUser -Filter {Enabled -eq $false} -Properties DisplayName
- Get-ADComputer -Filter * | Where Enabled -eq $false
- Search-ADAccount -AccountDisabled
- Both A and C are correct (Correct answer)
Correct answer: Both A and C are correct
Both Get-ADUser with a filter for disabled accounts and Search-ADAccount -AccountDisabled return lists of disabled user accounts, giving administrators flexibility in reporting.
Question 6: During an AD audit, the auditor asks how inter-site replication latency is monitored. Which tool provides replication lag statistics between specific domain controllers?
- Active Directory Sites and Services GUI only
- Repadmin /showrepl and Repadmin /replsummary (Correct answer)
- Netlogon debug logging
- Performance Monitor with AD counters
Correct answer: Repadmin /showrepl and Repadmin /replsummary
Repadmin /showrepl displays replication status per DC pair, while /replsummary provides an aggregate view of replication health including failure counts and latency across the domain.
Question 7: A branch office manager requests to be notified when their site's domain controller goes offline. Which Windows feature enables proactive DC availability monitoring and notification?
- Active Directory-integrated DNS scavenging alerts
- System Center Operations Manager (SCOM) or configuring Windows event forwarding with availability monitors (Correct answer)
- DHCP failover notifications
- DFS replication conflict reporting
Correct answer: System Center Operations Manager (SCOM) or configuring Windows event forwarding with availability monitors
SCOM or Windows event forwarding with custom availability monitors provides automated alerting when a domain controller stops responding, enabling proactive communication with branch managers.
MCTS 70-640 Communication & Stakeholder Relations 3
Your security team needs to receive email alerts whenever a privileged group membership changes in Active Directory.
Which solution best automates this notification?