MCTS 70-640 Professional Standards & Competencies 4

Question 1

An organization's IT policy requires regular disaster recovery testing for Active Directory. What must be validated during a DR test for AD DS?

Accepted Answer

The ability to perform an authoritative restore, verify replication convergence, and confirm FSMO role availability post-recovery

Answer

A complete AD DR test must verify authoritative restores, replication health post-recovery, and FSMO role seizure or transfer to confirm full directory service continuity.

Question 2

According to Microsoft's Active Directory tiered administration model, where should highly privileged accounts such as Schema Admins be used?

Accepted Answer

Only when performing specific privileged tasks, and never used for email or browsing

Answer

Highly privileged accounts should exist solely for specific administrative tasks and never be exposed to routine workstation use, reducing attack surface.

Question 3

When planning a Certificate Authority hierarchy for an enterprise PKI integrated with AD DS, what is the recommended two-tier design?

Accepted Answer

An offline root CA with one or more online subordinate issuing CAs

Answer

Keeping the root CA offline protects the trust anchor while subordinate issuing CAs handle day-to-day certificate operations, limiting exposure of the root key.

Question 4

A company needs to raise the forest functional level to Windows Server 2008. What is the professional pre-requisite to validate before doing so?

Accepted Answer

Confirm all domain controllers in all domains in the forest are running Windows Server 2008 or later

Answer

Raising the forest functional level requires every domain controller in every domain of the forest to be running the target OS version or higher.

Question 5

What professional standard applies when transferring FSMO roles during planned domain controller decommissioning?

Accepted Answer

Transfer FSMO roles gracefully while the source DC is online, then verify role ownership before decommissioning

Answer

Graceful transfer while the source is online ensures role consistency; seizure should only be used when the original role holder is unavailable.

MCTS 70-640 Exam Practice Test

MCTS 70-640 Exam Practice Test

MCTS 70-640 Professional Standards & Competencies 4