MCTS 70-640 Introduction to MCTS 70-640 5 — Questions and Answers
Question 1: Which Windows Server 2008 R2 feature allows you to install a domain controller without local administrator intervention at the remote site?
- Staged RODC installation (Correct answer)
- Unattended dcpromo with answer file
- Server Core promotion
- BitLocker-protected promotion
Correct answer: Staged RODC installation
Staged RODC installation lets an administrator pre-create the RODC computer account in AD, then delegate installation to a non-admin local user at the branch site.
Question 2: A domain controller that holds the PDC Emulator role performs which unique function?
- It is the only DC that can replicate the schema partition
- It acts as the authoritative time source for the domain (Correct answer)
- It issues all Kerberos service tickets
- It is the only DC capable of resetting passwords
Correct answer: It acts as the authoritative time source for the domain
The PDC Emulator is the authoritative NTP time source for the domain, and all other DCs sync their clocks to it to maintain Kerberos authentication.
Question 3: What is the significance of the 'Global Catalog' in a multi-domain Active Directory forest?
- It stores a full writable copy of all objects in the forest
- It stores a partial read-only copy of all objects in the forest to speed up cross-domain searches (Correct answer)
- It is required only for single-domain forests
- It replicates only security group membership data
Correct answer: It stores a partial read-only copy of all objects in the forest to speed up cross-domain searches
The Global Catalog holds a partial, read-only replica of all objects in the forest, enabling fast searches across domains without requiring referrals to each domain's DC.
Question 4: In Windows Server 2008 R2, which replication transport protocol is used between domain controllers in the same site?
- RPC over IP (synchronous) (Correct answer)
- SMTP over port 25
- LDAP over SSL
- NetBIOS
Correct answer: RPC over IP (synchronous)
Intrasite replication uses synchronous RPC over IP, which provides fast, reliable replication between DCs within the same site.
Question 5: Which Active Directory partition stores the site topology, site links, and subnet-to-site mappings?
- Domain partition
- Schema partition
- Configuration partition (Correct answer)
- Application partition
Correct answer: Configuration partition
The configuration partition stores forest-wide topology information, including sites, subnets, site links, and bridgehead servers, and is replicated to every DC in the forest.
Question 6: What is the maximum number of objects that can exist in a single Active Directory domain?
- 1 million
- 10 million
- Over 2 billion (Correct answer)
- Unlimited, governed only by hardware
Correct answer: Over 2 billion
Active Directory supports over 2 billion objects per domain, though practical limits are determined by hardware resources and performance requirements.
Question 7: When seizing a FSMO role using ntdsutil, under what condition is this action appropriate?
- Whenever you want to move the role to a faster DC
- Only when the original role holder is permanently unavailable and cannot be recovered (Correct answer)
- After any unplanned reboot of the role holder
- When replication latency exceeds 15 minutes
Correct answer: Only when the original role holder is permanently unavailable and cannot be recovered
Seizing a FSMO role is a last resort used only when the original role holder is permanently offline and cannot be brought back, because the old holder must never be reintroduced to the domain after a seizure.
MCTS 70-640 Introduction to MCTS 70-640 5
Which Windows Server 2008 R2 feature allows you to install a domain controller without local administrator intervention at the remote site?