MCTS 70-640 MCQ 4 — Questions and Answers
Question 1: Which AD DS partition is replicated to every domain controller in the entire forest?
- Domain partition
- Application partition
- Schema partition (Correct answer)
- Configuration partition
Correct answer: Schema partition
The Schema partition is replicated forest-wide to every domain controller, as is the Configuration partition.
Question 2: A new Windows Server 2008 domain controller must be added to an existing site. What must be configured for the DC to be placed in the correct site?
- A site link object
- A subnet object associated with the site (Correct answer)
- A bridgehead server designation
- An ISTG for the new site
Correct answer: A subnet object associated with the site
Subnet objects in AD Sites and Services map IP subnets to sites, determining where DCs are automatically placed.
Question 3: What does the 'gpresult /r' command display?
- A list of all GPOs in the domain
- The RSoP (Resultant Set of Policy) summary for the current user and computer (Correct answer)
- All GPO links on a specific OU
- The replication status of GPO SYSVOL data
Correct answer: The RSoP (Resultant Set of Policy) summary for the current user and computer
Gpresult /r shows a summary of applied GPOs and their details for the logged-on user and computer.
Question 4: Which service replicates SYSVOL content between domain controllers in Windows Server 2008 domains at the Windows Server 2008 functional level?
- FRS (File Replication Service)
- DFS-R (Distributed File System Replication) (Correct answer)
- DFSR only on RODCs
- BranchCache
Correct answer: DFS-R (Distributed File System Replication)
Windows Server 2008 domain functional level uses DFS-R instead of the older FRS to replicate SYSVOL.
Question 5: An administrator wants to prevent a specific GPO from applying to one security group in an OU while still applying to others. What should be used?
- Block Inheritance on the OU
- Deny Apply Group Policy permission for that security group (Correct answer)
- Set the GPO to Enforced
- Move users to a separate OU
Correct answer: Deny Apply Group Policy permission for that security group
Denying the 'Apply Group Policy' permission for a security group prevents that GPO from affecting group members.
Question 6: Which Active Directory role service issues and manages digital certificates for an organization?
- AD FS (Federation Services)
- AD LDS (Lightweight Directory Services)
- AD CS (Certificate Services) — Certification Authority (Correct answer)
- AD RMS (Rights Management Services)
Correct answer: AD CS (Certificate Services) — Certification Authority
The Certification Authority role service within AD CS issues, revokes, and manages digital certificates.
Question 7: What is the primary purpose of Universal groups in Active Directory?
- To assign permissions to resources within a single domain
- To organize users for email distribution lists only
- To consolidate group memberships across multiple domains in a forest (Correct answer)
- To replace Global groups in single-domain environments
Correct answer: To consolidate group memberships across multiple domains in a forest
Universal groups are used to aggregate members from multiple domains and are stored in the Global Catalog.
MCTS 70-640 MCQ 4
Which AD DS partition is replicated to every domain controller in the entire forest?