MCTS 70-640 Quality Control & Assurance 2 — Questions and Answers
Question 1: A domain administrator wants to verify that all domain controllers are replicating correctly. Which command-line tool should be used to display replication status and any errors?
- repadmin /showrepl (Correct answer)
- dcdiag /test:replications
- netdom query fsmo
- nltest /dsgetdc
Correct answer: repadmin /showrepl
repadmin /showrepl displays the replication partners and any replication failures for each domain controller.
Question 2: Which tool in Windows Server 2008 provides a centralized view of Active Directory health, including replication, DNS, and FSMO role status?
- Active Directory Users and Computers
- dcdiag (Correct answer)
- Active Directory Sites and Services
- netsh
Correct answer: dcdiag
dcdiag performs diagnostic tests on domain controllers and reports on health, replication, DNS, and FSMO roles.
Question 3: An administrator needs to ensure that the Active Directory database is not corrupted. Which tool should be run offline to check and repair the Ntds.dit file?
- esentutl /g
- ntdsutil files integrity (Correct answer)
- repadmin /replsummary
- dcdiag /test:MachineAccount
Correct answer: ntdsutil files integrity
The ntdsutil 'files integrity' command performs an integrity check on the Ntds.dit database file.
Question 4: You want to audit all successful and failed logon attempts in your domain. Where in Group Policy should you configure this setting?
- Computer Configuration > Windows Settings > Security Settings > Local Policies > Audit Policy (Correct answer)
- User Configuration > Administrative Templates > System > Audit
- Computer Configuration > Administrative Templates > Windows Components > Logon
- User Configuration > Windows Settings > Security Settings > Audit Policy
Correct answer: Computer Configuration > Windows Settings > Security Settings > Local Policies > Audit Policy
Audit Policy under Computer Configuration > Windows Settings > Security Settings > Local Policies controls logon auditing.
Question 5: After a domain controller was offline for several weeks, it returns to the network. What replication issue may occur if the domain controller has been offline longer than the tombstone lifetime?
- The DC will request a full replication automatically
- The DC will have a USN rollback error
- The DC may contain lingering objects (Correct answer)
- The DC will be demoted automatically
Correct answer: The DC may contain lingering objects
A domain controller offline longer than the tombstone lifetime may retain deleted objects (lingering objects) that no longer exist on other DCs.
Question 6: Which repadmin command provides a summary of replication success and failure counts for all domain controllers in the forest?
- repadmin /showrepl
- repadmin /replsummary (Correct answer)
- repadmin /syncall
- repadmin /showchanges
Correct answer: repadmin /replsummary
repadmin /replsummary shows a concise table of replication success and failure statistics across all domain controllers.
Question 7: An organization wants to ensure that Group Policy is being applied correctly to workstations. Which tool generates a detailed report showing the resultant set of policies applied to a user or computer?
- gpupdate /force
- gpresult /h report.html (Correct answer)
- secedit /analyze
- rsop.msc
Correct answer: gpresult /h report.html
gpresult /h generates an HTML report showing the Resultant Set of Policy (RSoP) applied to the specified user or computer.
MCTS 70-640 Quality Control & Assurance 2
A domain administrator wants to verify that all domain controllers are replicating correctly.
Which command-line tool should be used to display replication status and any errors?