MCTS - Microsoft Certified Technology Specialist Windows Server 2008 Active Directory Questions and Answers

Question 1

An administrator needs to implement different password policies for executives and standard users within the same Active-Directory domain. The current domain functional level is Windows Server 2003. What is the minimum domain functional level required to implement this feature?

Accepted Answer

Windows Server 2008

Answer

To use Fine-Grained Password Policies (FGPP), which allow for multiple password and account lockout policies within a single domain, the domain functional level must be at least Windows Server 2008.

Question 2

A company wants to deploy a domain controller in a branch office with low physical security. The administrator is concerned about the potential theft of the server and the compromise of all domain credentials. Which Windows Server 2008 feature should be implemented to mitigate this risk?

Accepted Answer

Read-Only Domain Controller (RODC)

Answer

A Read-Only Domain Controller (RODC) is designed for scenarios like branch offices where physical security is a concern. By default, an RODC does not cache user passwords, minimizing the security risk if the server is compromised. It hosts a read-only copy of the Active Directory database.

Question 3

An administrator accidentally deleted an entire Organizational Unit (OU) containing several user accounts. They want to restore the objects with all their attributes and group memberships intact. Which of the following features, first available in Windows Server 2008 R2, must be enabled BEFORE the deletion occurs to allow for this type of recovery?

Accepted Answer

Active Directory Recycle Bin

Answer

The Active Directory Recycle Bin, when enabled, preserves all attributes of deleted objects, allowing for a complete restoration. To enable this feature, the forest functional level must be at least Windows Server 2008 R2. Standard tombstone reanimation does not preserve all attributes like group memberships.

Question 4

You are performing maintenance on a Windows Server 2008 domain controller that also runs other critical services. You need to perform an offline defragmentation of the Active Directory database (Ntds.dit). Which feature allows you to take Active Directory offline without rebooting the entire server?

Accepted Answer

Restartable Active Directory Domain Services

Answer

Restartable Active Directory Domain Services (AD DS) is a feature new to Windows Server 2008 that allows an administrator to stop and start the AD DS service without rebooting the domain controller. This is useful for performing offline maintenance tasks like defragmentation while other services on the server remain available. While DSRM also takes AD DS offline, it requires a full server reboot into a special safe mode.

Question 5

To which of the following can a Fine-Grained Password Policy (FGPP) be directly applied in a Windows Server 2008 environment?

Accepted Answer

Global Security Groups and User Objects

Answer

Fine-Grained Password Policies can only be applied directly to user objects and global security groups. They cannot be applied directly to Organizational Units (OUs).

(MCTS) Microsoft Certified Technology Specialist Practice Test

(MCTS) Microsoft Certified Technology Specialist Practice Test

MCTS - Microsoft Certified Technology Specialist Windows Server 2008 Active Directory Questions and Answers