MCTS 70-640 Communication & Stakeholder Relations 4 — Questions and Answers
Question 1: A risk manager asks how RODCs communicate password replication status back to headquarters. Which tool reports which accounts' credentials are cached on a specific RODC?
- Netdom query rodc
- Active Directory Users and Computers > RODC properties > Password Replication Policy tab (Correct answer)
- Repadmin /rodcpwdrepl
- Dcdiag /test:rodc
Correct answer: Active Directory Users and Computers > RODC properties > Password Replication Policy tab
The Password Replication Policy tab in an RODC's properties in ADUC shows which user credentials are currently cached and which have been denied, providing the risk manager with accurate reporting.
Question 2: Management needs confirmation that DNS is functioning correctly across all sites after a configuration change. Which diagnostic command communicates DNS health across the domain to support this verification?
- Ipconfig /flushdns
- Dcdiag /test:DNS /v /e (Correct answer)
- Nslookup /debug
- Dnscmd /statistics
Correct answer: Dcdiag /test:DNS /v /e
Dcdiag /test:DNS with verbose and enterprise switches tests DNS health across all domain controllers in the forest, producing a comprehensive report for management confirmation.
Question 3: An IT director wants a report comparing GPO settings across two organizational units to ensure consistent policy application. Which tool facilitates this comparison for stakeholder review?
- Secedit /analyze
- Group Policy Management Console (GPMC) with GPO comparison or Resultant Set of Policy reporting (Correct answer)
- Netdom query workstation
- Auditpol /get /category:*
Correct answer: Group Policy Management Console (GPMC) with GPO comparison or Resultant Set of Policy reporting
The GPMC supports comparing GPO settings and generating Resultant Set of Policy reports for different OUs, making it ideal for communicating policy consistency to IT directors.
Question 4: After a forest trust is established, the partner organization's IT team needs confirmation the trust is functioning. Which command tests and reports trust authentication status?
- Nltest /sc_verify:<domain>
- Ping <trusted domain>
- Netdom query trust
- Both A and C provide trust health verification (Correct answer)
Correct answer: Both A and C provide trust health verification
Nltest /sc_verify verifies the secure channel to the trusted domain, while Netdom query trust lists existing trusts; together they confirm trust configuration and authentication functionality.
Question 5: A department head wants to know which computers in their OU have not logged into the domain in over 90 days, for an asset review report. Which command identifies these stale computer accounts?
- Get-ADComputer -Filter {LastLogonDate -lt (Get-Date).AddDays(-90)}
- Dsquery computer -inactive 13
- Search-ADAccount -ComputersOnly -AccountInactive -TimeSpan 90.00:00:00
- All of the above are valid approaches (Correct answer)
Correct answer: All of the above are valid approaches
PowerShell Get-ADComputer with a LastLogonDate filter, Dsquery with the -inactive flag (weeks), and Search-ADAccount with -AccountInactive all identify stale computer accounts for asset reporting.
Question 6: The network operations team needs to understand which AD sites are using which site link bridges for replication path calculations. Where is this configuration visible for documentation purposes?
- Active Directory Users and Computers > Sites container
- Active Directory Sites and Services > Inter-Site Transports > IP or SMTP (Correct answer)
- Repadmin /showsitecosts
- Netdom query site
Correct answer: Active Directory Sites and Services > Inter-Site Transports > IP or SMTP
Active Directory Sites and Services under Inter-Site Transports shows IP and SMTP site links and site link bridges, providing the topology documentation needed by the network operations team.
Question 7: A compliance team requires evidence that the AD database is replicated to a secondary location for disaster recovery. Which Windows Server feature facilitates this replication and provides status reporting?
- Shadow copies of the SYSVOL
- Active Directory replication with monitoring via Repadmin /replsummary across sites (Correct answer)
- DFS-R conflict and health reports
- Windows Server Backup schedule reports
Correct answer: Active Directory replication with monitoring via Repadmin /replsummary across sites
AD's native multi-master replication ensures the database is replicated across all DCs including remote sites; Repadmin /replsummary provides the status evidence required by compliance teams.
MCTS 70-640 Communication & Stakeholder Relations 4
A risk manager asks how RODCs communicate password replication status back to headquarters.
Which tool reports which accounts' credentials are cached on a specific RODC?