MCTS 70-640 MCTS 70 640: Active Directory, Configuring 3

Question 1

You need to verify which domain controller holds the RID Master FSMO role in your domain. Which command-line tool provides this information?

Accepted Answer

netdom query fsmo

Answer

The command 'netdom query fsmo' displays all five FSMO role holders for the current domain and forest.

Question 2

A domain controller is being shut down permanently and it holds the PDC Emulator role. Before taking it offline, you must transfer the role. Which tool allows you to transfer FSMO roles interactively?

Accepted Answer

Ntdsutil

Answer

Ntdsutil is used to transfer or seize FSMO roles and is the standard tool for role management in AD DS.

Question 3

Your organization uses fine-grained password policies. You create a Password Settings Object (PSO) with a minimum password length of 12. To which object types can a PSO be directly applied?

Accepted Answer

Global security groups and users

Answer

PSOs can only be applied directly to global security groups and individual user accounts, not to OUs or other group types.

Question 4

You need to raise the domain functional level from Windows Server 2003 to Windows Server 2008 R2. What is the prerequisite for this change?

Accepted Answer

All domain controllers must run Windows Server 2008 R2 or later

Answer

Every domain controller in the domain must be running at least Windows Server 2008 R2 before the domain functional level can be raised to that level.

Question 5

Which AD DS feature enables administrators to recover accidentally deleted objects without performing a full authoritative restore from backup?

Accepted Answer

Active Directory Recycle Bin

Answer

The Active Directory Recycle Bin, available at Windows Server 2008 R2 forest functional level, allows recovery of deleted objects while preserving all attributes.

MCTS 70-640 Exam Practice Test

MCTS 70-640 Exam Practice Test

MCTS 70-640 MCTS 70 640: Active Directory, Configuring 3