MCTS 70-640 Research & Evidence-Based Practice 2

Question 1

When troubleshooting AD replication failures, which command-line tool provides the most comprehensive diagnostic report including replication status, connectivity, and DNS health?

Accepted Answer

dcdiag.exe

Answer

dcdiag.exe runs a comprehensive suite of tests covering DNS, replication, connectivity, and domain controller health.

Question 2

An administrator needs evidence of all changes made to AD objects over the past week. Which audit subcategory must be enabled to capture this data?

Accepted Answer

Audit Directory Service Changes

Answer

The 'Audit Directory Service Changes' subcategory logs old and new values whenever an AD object attribute is modified.

Question 3

After deploying a new GPO, users report it is not applying. Which tool produces a detailed HTML report documenting exactly which policies are applying and which are being blocked?

Accepted Answer

gpresult /H report.html

Answer

gpresult /H generates an HTML-formatted Resultant Set of Policy report showing applied, denied, and filtered GPOs for a specific user/computer.

Question 4

Which event ID in the Security log on a Windows Server 2008 domain controller indicates a successful account logon authenticated via Kerberos?

Accepted Answer

4768

Answer

Event ID 4768 is generated when a Kerberos Authentication Service (AS) ticket is requested, indicating Kerberos-based authentication.

Question 5

A researcher wants to gather baseline data on AD replication latency across sites. Which repadmin command shows the last replication attempt and result for all domain controllers?

Accepted Answer

repadmin /replsummary

Answer

repadmin /replsummary provides a concise summary of the largest delta and failure counts per domain controller, ideal for baseline analysis.

MCTS 70-640 Exam Practice Test

MCTS 70-640 Exam Practice Test

MCTS 70-640 Research & Evidence-Based Practice 2