MCTS 70-640 Quality Control & Assurance 4 — Questions and Answers
Question 1: An administrator suspects that an object was accidentally deleted from Active Directory. In Windows Server 2008 R2, which feature can be enabled to simplify recovery of deleted objects without requiring a restore from backup?
- Shadow Copies
- Active Directory Recycle Bin (Correct answer)
- System State Backup
- Ntdsutil authoritative restore
Correct answer: Active Directory Recycle Bin
The Active Directory Recycle Bin, introduced in Windows Server 2008 R2, allows administrators to restore deleted objects while preserving all their attributes.
Question 2: Which dcdiag test specifically checks that the domain controller can locate the PDC emulator and other FSMO role holders?
- dcdiag /test:KnowsOfRoleHolders (Correct answer)
- dcdiag /test:Replications
- dcdiag /test:Services
- dcdiag /test:SysVolCheck
Correct answer: dcdiag /test:KnowsOfRoleHolders
dcdiag /test:KnowsOfRoleHolders verifies that all domain controllers can successfully locate each FSMO role holder.
Question 3: After making changes to the Default Domain Policy, an administrator wants to verify the effective password policy on a domain workstation. Which command displays the effective account policy?
- net accounts (Correct answer)
- secpol.msc
- gpresult /scope computer
- auditpol /get /category:*
Correct answer: net accounts
The 'net accounts' command displays the current password and account lockout policy effective on the local system or domain.
Question 4: A junior administrator accidentally deleted an OU containing 200 user accounts. No Recycle Bin is enabled. What is the correct recovery procedure?
- Run repadmin /syncall to recover from another DC
- Perform an authoritative restore from a system state backup using ntdsutil (Correct answer)
- Use dsadd to recreate the OU and users manually
- Run dcdiag /fix to restore deleted objects
Correct answer: Perform an authoritative restore from a system state backup using ntdsutil
An authoritative restore using ntdsutil marks the restored objects with a high USN so they replicate back to all other DCs, overwriting deletions.
Question 5: You are configuring Fine-Grained Password Policies (FGPP) for a group of administrators who need stricter password requirements. Where are FGPP objects stored in AD DS?
- In the Group Policy Objects container
- In the Password Settings Container (PSC) under System (Correct answer)
- In the Domain Controllers OU
- In the AdminSDHolder container
Correct answer: In the Password Settings Container (PSC) under System
Fine-Grained Password Policies are stored as Password Settings Objects (PSOs) in the Password Settings Container (PSC) located under CN=System.
Question 6: Which event ID in the Windows Security event log indicates a successful user account logon in Windows Server 2008?
- 4624 (Correct answer)
- 4625
- 4648
- 4740
Correct answer: 4624
Event ID 4624 is logged when an account successfully logs on to the system.
Question 7: An organization wants to ensure that only authorized administrators can modify Group Policy Objects. Which AD permission controls who can edit a specific GPO?
- Write permission on the OU where the GPO is linked
- Edit settings permission on the GPO in the GPMC (Correct answer)
- Full Control on the SysVol share
- Manage auditing and security log user right
Correct answer: Edit settings permission on the GPO in the GPMC
The 'Edit settings' permission on a GPO in the GPMC controls which security principals can modify that GPO's settings.
MCTS 70-640 Quality Control & Assurance 4
An administrator suspects that an object was accidentally deleted from Active Directory.
In Windows Server 2008 R2, which feature can be enabled to simplify recovery of deleted objects without requiring a restore from backup?