MCTS 70-640 Quality Control & Assurance 3

Question 1

A company requires that password changes in Active Directory meet complexity requirements. Which Group Policy setting enforces this rule?

Accepted Answer

Password must meet complexity requirements

Answer

'Password must meet complexity requirements' enforces rules such as mixed case, numbers, and special characters in passwords.

Question 2

During a security audit, you need to verify which users have not logged on in the past 90 days. Which tool can query Active Directory for inactive accounts?

Accepted Answer

dsquery user -inactive 13

Answer

dsquery user -inactive accepts a number of weeks and returns user accounts that have not logged on in that period.

Question 3

What is the default tombstone lifetime in Windows Server 2008 Active Directory, and why is it significant for quality assurance?

Accepted Answer

90 days; DCs offline longer may have inconsistent data

Answer

The default tombstone lifetime in Windows Server 2008 is 180 days, but wait — for forests raised from earlier versions it is 60 days; the default for new Windows Server 2008 forests is 180 days. DCs offline longer can develop lingering objects.

Question 4

An administrator needs to test whether Group Policy is being applied immediately after a policy change. Which command forces an immediate refresh of Group Policy on a client?

Accepted Answer

gpupdate /force

Answer

gpupdate /force immediately reapplies all Group Policy settings regardless of whether they have changed.

Question 5

You are reviewing your Active Directory backup strategy. Which Windows Server 2008 feature allows you to perform a non-authoritative restore of AD DS?

Accepted Answer

Windows Server Backup with Directory Services Restore Mode

Answer

A non-authoritative restore is performed by booting into Directory Services Restore Mode (DSRM) and restoring from a Windows Server Backup system state backup.

MCTS 70-640 Exam Practice Test

MCTS 70-640 Exam Practice Test

MCTS 70-640 Quality Control & Assurance 3