MCTS 70-640 Introduction to MCTS 70-640 3 — Questions and Answers
Question 1: Which command-line tool can transfer all five FSMO roles to a specified domain controller?
- netdom
- ntdsutil (Correct answer)
- repadmin
- dsmod
Correct answer: ntdsutil
Ntdsutil is the command-line utility used to transfer or seize FSMO roles from one domain controller to another.
Question 2: What happens to the Global Catalog when you raise the forest functional level to Windows Server 2003?
- The GC is no longer needed for logon in native-mode domains
- Universal Group Membership Caching becomes available (Correct answer)
- Linked-value replication compresses GC replication
- The GC automatically caches all schema attributes
Correct answer: Universal Group Membership Caching becomes available
At Windows Server 2003 forest functional level, Universal Group Membership Caching (UGMC) can be enabled on site-level DCs to avoid GC dependency for logon.
Question 3: Which Windows Server 2008 R2 feature allows administrators to manage multiple domains from a single pane using ADUC?
- Trust relationship
- Domain connection (Connect to Domain) (Correct answer)
- Forest trust
- Selective authentication
Correct answer: Domain connection (Connect to Domain)
In ADUC, you can use 'Connect to Domain' or 'Change Domain' to switch between domains and manage objects across multiple domains.
Question 4: A company has three domains in a single forest. Which partition is shared across all DCs in every domain in the forest?
- Domain partition
- Application partition
- Configuration partition (Correct answer)
- Read-only partition
Correct answer: Configuration partition
The configuration partition stores forest-wide data such as site topology and replicates to all DCs in the entire forest.
Question 5: What is the minimum number of domain controllers recommended in a domain to provide fault tolerance for FSMO roles?
- 1
- 2 (Correct answer)
- 3
- 5
Correct answer: 2
At minimum, two DCs are recommended so that if one fails, the other can have FSMO roles seized without service interruption.
Question 6: Which utility generates the ntds.dit file used with Install from Media (IFM) in Windows Server 2008 R2?
- wbadmin
- ntdsutil with the 'create full' command (Correct answer)
- repadmin /exportchanges
- dcpromo /exportcopy
Correct answer: ntdsutil with the 'create full' command
The 'ntdsutil activate instance ntds' followed by 'ifm create full <path>' command generates the IFM media including ntds.dit.
Question 7: In Active Directory, what does the term 'tombstone lifetime' refer to?
- How long deleted objects are retained before permanent removal (Correct answer)
- The lifetime of a domain controller certificate
- The expiry period for group policy objects
- The duration a disabled account stays in the directory
Correct answer: How long deleted objects are retained before permanent removal
The tombstone lifetime defines how long a deleted AD object remains as a tombstone (typically 180 days in 2008 R2) to ensure all DCs replicate the deletion.
MCTS 70-640 Introduction to MCTS 70-640 3
Which command-line tool can transfer all five FSMO roles to a specified domain controller?