MCTS 70-640 MCTS 70 640: Active Directory, Configuring 4

Question 1

You are configuring a new AD DS forest. Which server holds the Schema Master FSMO role by default?

Accepted Answer

The first DC installed in the forest root domain

Answer

The Schema Master role is automatically assigned to the first domain controller installed in the forest root domain.

Question 2

A user reports they cannot log on from a branch office. The branch office has an RODC. The user's credentials are NOT in the Allowed RODC Password Replication Group. What happens when the user attempts to authenticate?

Accepted Answer

The RODC forwards the authentication request to a writable DC over the WAN

Answer

When a user's credentials are not cached on an RODC, the RODC proxies the authentication request to a writable DC; if the WAN is down, logon fails.

Question 3

Which DNS record type must be present for AD DS to function correctly, as it allows clients to locate domain controllers?

Accepted Answer

SRV records

Answer

Active Directory relies on SRV records in DNS for clients to discover domain controllers, Kerberos services, and other AD DS services.

Question 4

You want to ensure that when a user object is deleted from one domain controller, that deletion replicates to all other DCs before any other changes to the same object. Which AD DS concept governs this?

Accepted Answer

Change notification with urgent replication

Answer

Certain changes, such as account lockouts and password changes, trigger urgent replication via change notification to ensure rapid propagation.

Question 5

An administrator needs to extend the AD schema to support a custom application. Which group membership is required to perform schema extensions?

Accepted Answer

Schema Admins

Answer

Only members of the Schema Admins group have permission to modify the Active Directory schema.

MCTS 70-640 Exam Practice Test

MCTS 70-640 Exam Practice Test

MCTS 70-640 MCTS 70 640: Active Directory, Configuring 4