MCTS 70-640 Communication & Stakeholder Relations 4

Question 1

A risk manager asks how RODCs communicate password replication status back to headquarters. Which tool reports which accounts' credentials are cached on a specific RODC?

Accepted Answer

Active Directory Users and Computers > RODC properties > Password Replication Policy tab

Answer

The Password Replication Policy tab in an RODC's properties in ADUC shows which user credentials are currently cached and which have been denied, providing the risk manager with accurate reporting.

Question 2

Management needs confirmation that DNS is functioning correctly across all sites after a configuration change. Which diagnostic command communicates DNS health across the domain to support this verification?

Accepted Answer

Dcdiag /test:DNS /v /e

Answer

Dcdiag /test:DNS with verbose and enterprise switches tests DNS health across all domain controllers in the forest, producing a comprehensive report for management confirmation.

Question 3

An IT director wants a report comparing GPO settings across two organizational units to ensure consistent policy application. Which tool facilitates this comparison for stakeholder review?

Accepted Answer

Group Policy Management Console (GPMC) with GPO comparison or Resultant Set of Policy reporting

Answer

The GPMC supports comparing GPO settings and generating Resultant Set of Policy reports for different OUs, making it ideal for communicating policy consistency to IT directors.

Question 4

After a forest trust is established, the partner organization's IT team needs confirmation the trust is functioning. Which command tests and reports trust authentication status?

Accepted Answer

Both A and C provide trust health verification

Answer

Nltest /sc_verify verifies the secure channel to the trusted domain, while Netdom query trust lists existing trusts; together they confirm trust configuration and authentication functionality.

Question 5

A department head wants to know which computers in their OU have not logged into the domain in over 90 days, for an asset review report. Which command identifies these stale computer accounts?

Accepted Answer

All of the above are valid approaches

Answer

PowerShell Get-ADComputer with a LastLogonDate filter, Dsquery with the -inactive flag (weeks), and Search-ADAccount with -AccountInactive all identify stale computer accounts for asset reporting.

MCTS 70-640 Exam Practice Test

MCTS 70-640 Exam Practice Test

MCTS 70-640 Communication & Stakeholder Relations 4