MCTS 70-640 MCQ 5

Question 1

Which tool allows an administrator to perform an authoritative restore of accidentally deleted AD objects?

Accepted Answer

ntdsutil with authoritative restore

Answer

Ntdsutil is used in Directory Services Restore Mode to mark objects as authoritative so they replicate back to other DCs.

Question 2

AD Federation Services (AD FS) is used primarily to enable which scenario?

Accepted Answer

Single sign-on across organizational boundaries using claims

Answer

AD FS provides web-based SSO and identity federation using standards like SAML to share identity claims across organizations.

Question 3

What is the default tombstone lifetime in Windows Server 2008 Active Directory?

Accepted Answer

180 days

Answer

Windows Server 2008 raises the default tombstone lifetime to 180 days, up from 60 days in older versions.

Question 4

Which group scope should be used to assign permissions to a resource, following Microsoft's AGDLP best practice?

Accepted Answer

Domain Local group

Answer

AGDLP: Accounts → Global groups → Domain Local groups → Permissions; Domain Local groups are assigned to resources.

Question 5

A forest trust between two separate AD forests requires which minimum functional level?

Accepted Answer

Windows Server 2003

Answer

Forest trusts require both forests to be at Windows Server 2003 forest functional level or higher.

MCTS 70-640 Exam Practice Test