MCTS 70-640 Technology & Digital Applications 4 — Questions and Answers
Question 1: How does Active Directory Lightweight Directory Services (AD LDS) differ from AD DS?
- AD LDS requires a domain controller, while AD DS does not
- AD LDS provides a directory service without requiring a Windows domain or forest (Correct answer)
- AD LDS stores user credentials for domain logon, while AD DS does not
- AD LDS uses a different replication topology than AD DS but shares the same schema
Correct answer: AD LDS provides a directory service without requiring a Windows domain or forest
AD LDS is an LDAP directory service that runs as an application service without the domain, forest, or Kerberos infrastructure required by AD DS.
Question 2: A developer is building a web application that needs its own user store separate from AD DS. Which Windows Server 2008 role is best suited to provide this LDAP store?
- Active Directory Domain Services
- Active Directory Certificate Services
- Active Directory Lightweight Directory Services (Correct answer)
- Active Directory Rights Management Services
Correct answer: Active Directory Lightweight Directory Services
AD LDS allows applications to maintain their own LDAP directory without impacting the production AD DS environment.
Question 3: What tool is used to import and export data (LDIF files) into an AD LDS instance?
- dsmod.exe
- ldifde.exe (Correct answer)
- csvde.exe
- ntdsutil.exe
Correct answer: ldifde.exe
ldifde.exe imports and exports LDAP Data Interchange Format (LDIF) files, which is the standard method for populating AD LDS instances.
Question 4: When deploying software via Group Policy using Windows Installer packages, what is the difference between 'Assigned' and 'Published' deployment for computer objects?
- Assigned installs at next logon; Published appears in Add/Remove Programs
- Assigned software for computers installs at startup; Published is not available for computer objects (Correct answer)
- Published installs silently; Assigned prompts the user for confirmation
- Both Assigned and Published behave identically for computer objects
Correct answer: Assigned software for computers installs at startup; Published is not available for computer objects
Software can only be Assigned (not Published) to computer objects; it installs automatically at the next system startup without user interaction.
Question 5: What is the purpose of a Windows Installer Transform file (.mst) when deploying software via Group Policy?
- It replaces the original .msi package with a patched version
- It customizes the installation settings of an .msi package without modifying the original file (Correct answer)
- It converts the .msi package to a .zap format for non-MSI deployment
- It signs the .msi package with a digital certificate for integrity verification
Correct answer: It customizes the installation settings of an .msi package without modifying the original file
An .mst transform file modifies the properties of an MSI installation (such as features, paths, or settings) while leaving the original package unchanged.
Question 6: An administrator needs to remove a software package deployed via Group Policy from all target computers. Which removal option in GPSI also uninstalls the software from existing computers?
- Optional removal
- Immediate (forced) removal (Correct answer)
- Allow users to continue to use the software, but prevent new installations
- Archiving the package
Correct answer: Immediate (forced) removal
Forced (immediate) removal uninstalls the software from all assigned computers at the next Group Policy refresh or reboot.
Question 7: Which file format can be used in Group Policy Software Installation to deploy non-MSI applications by pointing to a setup executable?
- .mst (Transform file)
- .msp (Patch file)
- .zap (Zero Administration Package) (Correct answer)
- .cab (Cabinet file)
Correct answer: .zap (Zero Administration Package)
A .zap file is a text file that describes a non-MSI application so it can be Published (not Assigned) via Group Policy Software Installation.
How does Active Directory Lightweight Directory Services (AD LDS) differ from AD DS?