MCTS 70-640 Technology & Digital Applications 5 — Questions and Answers
Question 1: Which DNS record type do Windows clients use to locate domain controllers for a specific AD DS domain?
- A (Host) records
- MX (Mail Exchange) records
- SRV (Service) records (Correct answer)
- PTR (Pointer) records
Correct answer: SRV (Service) records
Active Directory relies on SRV records registered in DNS (e.g., _ldap._tcp.<domain>) so clients can dynamically discover domain controllers.
Question 2: What is the role of Active Directory Sites and Services in controlling application replication traffic?
- It controls replication only between domain controllers in the same site
- It defines site links with cost and schedule to control inter-site replication timing and bandwidth usage (Correct answer)
- It disables replication between sites to reduce WAN congestion
- It encrypts application data before replication across sites
Correct answer: It defines site links with cost and schedule to control inter-site replication timing and bandwidth usage
Site links define the cost, replication interval, and schedule for inter-site replication, allowing administrators to align AD replication with WAN constraints.
Question 3: What does the Knowledge Consistency Checker (KCC) automatically generate to ensure AD DS replication connectivity?
- Trust relationships between domains
- Connection objects between domain controllers (Correct answer)
- DNS SRV records for each domain controller
- Group Policy links for site-based OUs
Correct answer: Connection objects between domain controllers
The KCC runs on every DC and automatically creates and removes connection objects to maintain a ring topology within sites and spanning-tree topology between sites.
Question 4: Which AD DS component must be present in each domain in a forest for users in that domain to successfully log on to resources in other domains?
- RODC (Read-Only Domain Controller)
- Global Catalog server (Correct answer)
- Infrastructure Master FSMO role holder
- DNS delegated zone
Correct answer: Global Catalog server
Global Catalog servers store a partial replica of all objects in the forest, enabling universal group membership lookups required during cross-domain logon.
Question 5: An administrator enables Universal Group Membership Caching (UGMC) at a branch office site. What problem does this solve?
- It reduces DNS query traffic for SRV record lookups
- It allows branch users to log on without contacting a Global Catalog server across the WAN (Correct answer)
- It caches Group Policy objects locally so GPOs apply faster
- It stores Kerberos tickets locally to reduce KDC traffic
Correct answer: It allows branch users to log on without contacting a Global Catalog server across the WAN
UGMC caches universal group membership on a local DC so users can log on even if the WAN link to a Global Catalog server is slow or unavailable.
Question 6: What replication protocol does Active Directory use by default for intra-site replication between domain controllers?
- SMTP over TCP port 25
- RPC over IP (synchronous, compressed)
- RPC over IP (uncompressed, low-latency) (Correct answer)
- FTP over TCP port 21
Correct answer: RPC over IP (uncompressed, low-latency)
Within a site, AD replication uses RPC over IP without compression because the high-speed LAN makes compression overhead unnecessary, and replication is triggered immediately.
Question 7: Which AD DS FSMO role holder is responsible for maintaining referential integrity for group memberships that span domain boundaries in a forest?
- PDC Emulator
- RID Master
- Infrastructure Master (Correct answer)
- Schema Master
Correct answer: Infrastructure Master
The Infrastructure Master updates cross-domain object references (phantoms) so that group membership displays correctly when members reside in different domains.
Which DNS record type do Windows clients use to locate domain controllers for a specific AD DS domain?