MCTS 70-640 Communication & Stakeholder Relations 5 — Questions and Answers
Question 1: A project sponsor asks how changes to the Active Directory schema are communicated and tracked for rollback planning. Which best practice supports this change communication requirement?
- Email announcements only
- Using the AD schema change log in Event Viewer (Directory Service log) and maintaining a change management record (Correct answer)
- Disabling schema modifications until rollback is ready
- Backing up only the schema partition
Correct answer: Using the AD schema change log in Event Viewer (Directory Service log) and maintaining a change management record
Schema changes are recorded in the Directory Service event log; combining this with formal change management records provides the audit trail and rollback documentation required by project sponsors.
Question 2: Management requests a report on which service accounts have passwords that never expire, for a security review. Which PowerShell command retrieves this information?
- Get-ADUser -Filter {PasswordNeverExpires -eq $true} -Properties PasswordNeverExpires, ServicePrincipalName
- Netuser /domain | findstr /i service
- Dsquery user -pwdneverexpires
- Both A and C return the correct results (Correct answer)
Correct answer: Both A and C return the correct results
Both the PowerShell Get-ADUser filter for PasswordNeverExpires and Dsquery with -pwdneverexpires return user accounts with non-expiring passwords, supporting security review reporting.
Question 3: After enabling AD Recycle Bin, an IT manager wants to communicate its capabilities to the helpdesk team. Which statement accurately describes the AD Recycle Bin's restoration capability?
- It only restores user objects, not groups or OUs
- It restores deleted objects with all attributes intact, including group memberships, without requiring a restart or authoritative restore (Correct answer)
- It requires a forest functional level of Windows Server 2003
- Restored objects are placed in the Lost and Found container by default
Correct answer: It restores deleted objects with all attributes intact, including group memberships, without requiring a restart or authoritative restore
The AD Recycle Bin, available at Windows Server 2008 R2 forest functional level, restores deleted objects with all linked attributes intact and does not require domain controller restarts.
Question 4: An auditor needs to verify that only authorized administrators have rights to link GPOs to the domain root. Where are these delegation settings reviewed and documented?
- Active Directory Users and Computers > Domain Properties > Security tab
- Group Policy Management Console > Domain > Delegation tab (Correct answer)
- Secedit /export /cfg report.txt
- Auditpol /get /subcategory:'Policy Change'
Correct answer: Group Policy Management Console > Domain > Delegation tab
The Delegation tab on the domain object in GPMC shows which users and groups have permission to link GPOs, providing the auditor with the authorization documentation they require.
Question 5: A branch office stakeholder wants to know how Bridgehead Servers are selected and whether they can influence the selection for communication reliability. Which statement is accurate?
- Bridgehead servers are always manually designated by administrators
- The KCC automatically selects bridgehead servers, but administrators can manually designate preferred bridgehead servers in Active Directory Sites and Services (Correct answer)
- Bridgehead servers are selected by the PDC Emulator using a priority algorithm
- Only RODCs can serve as bridgehead servers at branch offices
Correct answer: The KCC automatically selects bridgehead servers, but administrators can manually designate preferred bridgehead servers in Active Directory Sites and Services
While the KCC automatically elects bridgehead servers, administrators can manually designate preferred bridgehead servers in Active Directory Sites and Services to control inter-site replication reliability.
Question 6: The helpdesk needs to communicate estimated AD replication convergence time to users after a password reset. Which factor most directly affects replication convergence speed in a multi-site environment?
- The number of user accounts in the domain
- The site link replication schedule and cost configured in Active Directory Sites and Services (Correct answer)
- The version of the domain functional level
- The number of GPOs linked to the domain
Correct answer: The site link replication schedule and cost configured in Active Directory Sites and Services
Site link replication schedules (when replication is allowed) and costs (which paths are preferred) are the primary factors determining how quickly a password change propagates across sites.
Question 7: A CIO wants to understand the communication impact if the PDC Emulator FSMO role holder goes offline. Which critical AD function would be most immediately affected?
- Kerberos ticket granting for all domain users would fail immediately
- Password changes, account lockouts, and time synchronization for the domain would be disrupted (Correct answer)
- DNS name resolution for all domain resources would stop
- All AD replication across sites would halt until the PDC Emulator is restored
Correct answer: Password changes, account lockouts, and time synchronization for the domain would be disrupted
The PDC Emulator processes password changes, manages account lockout policy, and acts as the authoritative time source; its loss disrupts these functions most immediately and visibly.
MCTS 70-640 Communication & Stakeholder Relations 5
A project sponsor asks how changes to the Active Directory schema are communicated and tracked for rollback planning.
Which best practice supports this change communication requirement?