MCTS 70-640 Professional Standards & Competencies 2

Question 1

When delegating control in Active Directory, what is the recommended best practice for applying permissions to OUs?

Accepted Answer

Use the Delegation of Control Wizard and assign permissions at the appropriate OU level

Answer

The Delegation of Control Wizard provides a structured, least-privilege approach to assigning granular AD permissions at the OU level without granting full admin rights.

Question 2

A company's security policy requires that all Group Policy changes be tested before production deployment. What is the professional standard approach?

Accepted Answer

Use a test OU with representative user and computer accounts before linking GPOs to production OUs

Answer

Testing GPOs in a representative test OU mirrors production conditions while isolating any unintended policy effects before broad deployment.

Question 3

According to AD DS best practices, how frequently should you back up Active Directory?

Accepted Answer

At least once per day, ensuring backups are retained beyond the tombstone lifetime

Answer

Daily backups retained beyond the tombstone lifetime (default 60–180 days) ensure you can recover from both recent failures and lingering replication issues.

Question 4

Which audit policy category should be enabled to track changes to Active Directory objects, per Microsoft security baseline recommendations?

Accepted Answer

Audit Directory Service Access and Directory Service Changes

Answer

Enabling Audit Directory Service Access and Directory Service Changes captures who modified AD objects and what was changed, satisfying compliance and forensic requirements.

Question 5

What documentation is considered a professional standard when designing an Active Directory OU structure for a large enterprise?

Accepted Answer

A written OU design document detailing delegation boundaries, GPO links, and administrative scope

Answer

Formal OU design documentation ensures consistent administration, eases troubleshooting, and provides an authoritative reference for future changes and audits.

MCTS 70-640 Exam Practice Test

MCTS 70-640 Exam Practice Test

MCTS 70-640 Professional Standards & Competencies 2