MCTS 70-640 MCQ 3

Question 1

Which Group Policy setting prevents local administrators on member computers from overriding domain GPO settings?

Accepted Answer

Enforced (No Override)

Answer

Setting a GPO to Enforced prevents child OUs from blocking the policy using Block Inheritance.

Question 2

A company needs to allow users in a child domain to access resources in a parent domain. Which trust type is created automatically?

Accepted Answer

Parent-child trust

Answer

Parent-child trusts are created automatically when a child domain is added to an existing domain tree.

Question 3

What is the purpose of the Infrastructure Master FSMO role?

Accepted Answer

Updates cross-domain group-to-user references

Answer

The Infrastructure Master updates references to objects in other domains, such as group memberships.

Question 4

Which Windows Server 2008 feature provides web-based enrollment for digital certificates?

Accepted Answer

AD CS Web Enrollment

Answer

Active Directory Certificate Services includes a Web Enrollment role service for browser-based certificate requests.

Question 5

GPO processing order from lowest to highest priority is:

Accepted Answer

Local, Site, Domain, OU

Answer

GPOs are applied in the order Local → Site → Domain → OU, with later policies winning conflicts.

MCTS 70-640 Exam Practice Test