MCTS 70-640 MCQ 3 — Questions and Answers
Question 1: Which Group Policy setting prevents local administrators on member computers from overriding domain GPO settings?
- Block Inheritance
- Enforced (No Override) (Correct answer)
- Loopback Processing
- Restricted Groups
Correct answer: Enforced (No Override)
Setting a GPO to Enforced prevents child OUs from blocking the policy using Block Inheritance.
Question 2: A company needs to allow users in a child domain to access resources in a parent domain. Which trust type is created automatically?
- External trust
- Forest trust
- Parent-child trust (Correct answer)
- Shortcut trust
Correct answer: Parent-child trust
Parent-child trusts are created automatically when a child domain is added to an existing domain tree.
Question 3: What is the purpose of the Infrastructure Master FSMO role?
- Assigns RIDs to domain controllers
- Updates cross-domain group-to-user references (Correct answer)
- Manages the AD schema
- Handles password changes for pre-Windows 2000 clients
Correct answer: Updates cross-domain group-to-user references
The Infrastructure Master updates references to objects in other domains, such as group memberships.
Question 4: Which Windows Server 2008 feature provides web-based enrollment for digital certificates?
- AD RMS
- AD FS
- AD CS Web Enrollment (Correct answer)
- Network Policy Server
Correct answer: AD CS Web Enrollment
Active Directory Certificate Services includes a Web Enrollment role service for browser-based certificate requests.
Question 5: GPO processing order from lowest to highest priority is:
- Local, Site, Domain, OU (Correct answer)
- OU, Domain, Site, Local
- Domain, Site, OU, Local
- Local, OU, Domain, Site
Correct answer: Local, Site, Domain, OU
GPOs are applied in the order Local → Site → Domain → OU, with later policies winning conflicts.
Question 6: Which replication topology generator automatically creates connection objects between domain controllers?
- KCC (Knowledge Consistency Checker) (Correct answer)
- ISTG (Inter-Site Topology Generator)
- FRS (File Replication Service)
- DFS-R (Distributed File System Replication)
Correct answer: KCC (Knowledge Consistency Checker)
The KCC automatically builds and maintains the intra-site replication topology by creating connection objects.
Question 7: What minimum functional level is required to enable the Recycle Bin feature in Active Directory?
- Windows Server 2003 forest functional level
- Windows Server 2008 forest functional level
- Windows Server 2008 R2 forest functional level (Correct answer)
- Windows Server 2012 forest functional level
Correct answer: Windows Server 2008 R2 forest functional level
The AD Recycle Bin requires the forest functional level to be raised to Windows Server 2008 R2.
MCTS 70-640 MCQ 3
Which Group Policy setting prevents local administrators on member computers from overriding domain GPO settings?