Question 1

The PDC emulator processes password changes for newer Windows clients (Windows XP / Vista).

Accepted Answer

False

Question 2

Which MMC is used to transfer the RID master,PDC emulator master,and infrastructure master operations master roles?
A)Active Directory Users and Computers
B)Active Directory Schema
C)Active Directory Domains and Trusts
D)Active Directory FSMO Transfer

Accepted Answer

Active Directory Users and Computers MMC is used to transfer the RID master, PDC emulator master, and infrastructure master roles. These roles are associated with domain-level operations, and the AD Users and Computers snap-in provides the necessary interface for managing these roles within a domain.

Question 3

If you're creating a shortcut trust between domains in different forests,this must exist first:
A)Realm trust
B)External trust
C)Another shortcut trust
D)Forest trust

Accepted Answer

In order to create a shortcut trust between domains in different forests, a forest trust must exist first. A forest trust allows for authentication and authorization between forests and is necessary for creating a shortcut trust.

Question 4

What is the Microsoft recommendation for placement of global catalog servers?
A)Install a global catalog server in a site once it is larger than 50 accounts and the number of DCs is greater than 2
B)Install a global catalog server in a site once it is larger than 500 accounts and the number of DCs is greater than 2
C)Install a global catalog server in a site once it is larger than 1,000 accounts and the number of DCs is greater than 4
D)Install a global catalog server in a site once it is larger than 5,000 accounts and the number of DCs is greater than 8

Accepted Answer

Microsoft recommends installing a global catalog server in a site once it is larger than 500 accounts and the number of Domain Controllers (DCs) is greater than 2 to ensure efficient directory lookup and logon processes across a distributed environment.

Question 5

The SMTP protocol is used primarily for e-mail,but can also be used for...
A)Intersite replication
B)Intrasite replication
C)Synchronous communication
D)Securing replication data as it moves between sites

Accepted Answer

SMTP can be used for intersite replication, especially in environments like Active Directory, where it serves as a method to replicate directory information between sites over a potentially less secure network.

Question 6

Which of the following answers is not a benefit that RPC over IP provides in contrast to SMTP when replicating between sites?
A)Easier to set up
B)Easier to manage
C)synchronous communication
D)asynchronous communication

Accepted Answer

RPC over IP supports synchronous communication, not asynchronous communication, which is a characteristic of SMTP. This means that RPC over IP waits for a response after sending a request, unlike SMTP which can send a message and not wait for an immediate response.

Question 7

If you're raising both the forest and the domain functional levels,you must raise the domain functional level first to at least the level you're raising the forest functional level.

Accepted Answer

This is true. The domain functional level must be raised first to match or exceed the level you want to raise the forest functional level to.

Question 8

You work at Example.com,and are in charge of a fairly large forest and multidomain structure consisting of Windows Server 2003 domain controllers running at the Windows Server 2003 functional level.One of your interns finished installing the forest's first Windows Server 2008 server,and has placed it in a branch office to act as a read only domain controller.The intern has already run the adprep /forestprep command.
Unfortunately,for some reason,the RODC Server can't be installed.What is most likely the issue,based on the information provided?
A)The forest functional level must be Windows Server 2008 or higher.
B)There must be at least one writeable DC running Windows Server 2008
C)adprep /domainprep must be run in each of the domains in the forest
D)RODCs can't be installed in multidomain structures.

Accepted Answer

An RODC requires at least one writable domain controller running Windows Server 2008 or later in the domain. Since the forest already has Windows Server 2003 domain controllers, the RODC cannot be installed until a writable domain controller running Windows Server 2008 or later is introduced in the domain. The forest functional level does not need to be raised, and adprep /domainprep is not required for RODC installation. RODCs can be installed in multidomain structures, but the domain must have at least one writable DC running the required version of Windows Server.

Question 9

Which of the following is not one of Active Directory Migration Tool's three main types of migration?
A)Innerforest migration
B)Interforest migration
C)Intraforest migration
D)Migration of an NT 4.0 domain to an Active Directory domain

Accepted Answer

The Active Directory Migration Tool (ADMT) supports three main types of migration: Interforest migration, Intraforest migration, and Migration of an NT 4.0 domain to an Active Directory domain. "Innerforest migration" is not a recognized type of migration in the context of ADMT.

Question 10

What is the only real downside to using stub zones?
A)Like conditional forwarders,if a DNS server's address changes,it must be updated manually
B)It can only hold CNAME records
C)You have to configure zone transfers
D)Additional traffic created by replicating zone information

Accepted Answer

Stub zones create additional traffic because they replicate zone information to maintain updated records.

Question 11

In the Windows Server 2008 domain functional level,FRS is used to replicate the contents of the Sysvol share.

Accepted Answer

The answer of In the Windows Server 2008 domain functional...

Question 12

What option under the General tab in the Properties dialog box of a forest trust is only available for use between two Windows Server 2008 domains?
A)Direction of trust
B)Transitivity of trust
C)The other domain supports Kerberos AES Encryption
D)Validate

Accepted Answer

The option "The other domain supports Kerberos AES Encryption" is only available for use between two Windows Server 2008 domains. This option allows the use of Advanced Encryption Standard (AES) for Kerberos authentication, which is more secure than the previous default encryption method. The other options listed (direction of trust, transitivity of trust, and validate) are available in all versions of Windows Server that support forest trusts.

Question 13

The only criteria for a site is that it's associated with one or more IP subnets and no two sites share the same subnet.

Accepted Answer

The statement is true. A site is associated with one or more IP subnets and no two sites can share the same subnet.

Question 14

Which of the following statements is true regarding RODC replication?
A)The connection between an RODC and a writeable DC is a two-way connection because changes can originate on an RODC
B)Two RODCs cannot replicate with one another under any circumstance
C)The domain directory partition can be replicated only to an RODC from a Windows Server 2008 Dc.
D)When upgrading a domain from Windows Server 2003,the first Windows Server 2008 DC can be an RODC

Accepted Answer

The answer of Which of the following statements is true...

Question 15

You can deploy Windows Server 2008 Read Only Domain Controllers (RODC)in a Windows Server 2003 forest.

Accepted Answer

Windows Server 2008 RODCs can be deployed in a Windows Server 2003 forest. However, it is important to note that some features that are available in Windows Server 2008 R2, such as the ability to cache passwords and manage credential caching, are not available when deploying an RODC in a Windows Server 2003 forest.

Question 16

Which of the following is not considered an urgent replication event (one that triggers change notifications immediately,without waiting the normal 15 seconds)
A)Account lockouts
B)Full name change under user properties
C)Changes to the account lockout policy
D)Changes to the domain password policy

Accepted Answer

Changes such as a full name modification under user properties do not trigger immediate replication; they follow the standard replication timing. Urgent replication events typically involve security-related changes, such as account lockouts or modifications to security policies, which necessitate immediate propagation across the domain to maintain security integrity.

Question 17

You are the new administrator for Example.com domain.Last week,the original Windows Server 2003 domain controller that was used to create the Example.com forest went offline permanently.This was the last Windows Server 2003 server in the entire forest,and because all servers now run Windows Server 2008,you have decided that it would be a good time to raise the forest functional level to Windows Server 2008.However,your attempt to do so fails.
What could be the issue?
A)The domain naming master for the domain is offline,preventing domain related administration
B)The PDC emulator master is down,preventing your credentials from being accepted
C)The Schema master is down,preventing any schema changes.
D)Because the functional level was set at Windows Server 2003,only a Windows Server 2003 server can raise the functional level.

Accepted Answer

The Schema master must be online for any schema changes, including raising the forest functional level, because this operation modifies the schema by enabling features available in the higher functional level.

Question 18

Which MMC is used to transfer the domain naming master operations role?
A)Active Directory Schema
B)Active Directory Domains and Trusts
C)Active Directory Users and Computers
D)Active Directory FSMO Transfer

Accepted Answer

Active Directory Domains and Trusts MMC is used to transfer the domain naming master operations role. The domain naming master is responsible for managing the addition or removal of domains in a forest. This role can be transferred to another domain controller using the Active Directory Domains and Trusts MMC.

Question 19

Which of the following features is not present in Windows Server 2003 domain functional level?
A)Domain controller renaming
B)Selective authentication
C)Logon timestamp replication
D)Fine-grained password policies

Accepted Answer

Fine-grained password policies were introduced in Windows Server 2008, not in Windows Server 2003 domain functional level.

Question 20

At what interval does the Knowledge Consistency Checker recalculate the replication topology by default?
A)Every 15 seconds
B)Every 15 minutes
C)Once in a period of 15 hours
D)Once in a period of 15 days

Accepted Answer

By default, the Knowledge Consistency Checker (KCC) recalculates the replication topology every 15 minutes.

Quiz 10: Configuring and Maintaining the Active Directory Infrastructure

The PDC emulator processes password changes for newer Windows clients (Windows XP / Vista).

Which MMC is used to transfer the RID master,PDC emulator master,and infrastructure master operations master roles?

If you're creating a shortcut trust between domains in different forests,this must exist first:

What is the Microsoft recommendation for placement of global catalog servers?

The SMTP protocol is used primarily for e-mail,but can also be used for...

Which of the following answers is not a benefit that RPC over IP provides in contrast to SMTP when replicating between sites?

If you're raising both the forest and the domain functional levels,you must raise the domain functional level first to at least the level you're raising the forest functional level.

Which of the following is not one of Active Directory Migration Tool's three main types of migration?

What is the only real downside to using stub zones?

In the Windows Server 2008 domain functional level,FRS is used to replicate the contents of the Sysvol share.

What option under the General tab in the Properties dialog box of a forest trust is only available for use between two Windows Server 2008 domains?

The only criteria for a site is that it's associated with one or more IP subnets and no two sites share the same subnet.

Which of the following statements is true regarding RODC replication?

You can deploy Windows Server 2008 Read Only Domain Controllers (RODC)in a Windows Server 2003 forest.

Which of the following is not considered an urgent replication event (one that triggers change notifications immediately,without waiting the normal 15 seconds)

Which MMC is used to transfer the domain naming master operations role?

Which of the following features is not present in Windows Server 2003 domain functional level?

At what interval does the Knowledge Consistency Checker recalculate the replication topology by default?