Microsoft Certified Technology Specialist (MCTS) Exam — Questions and Answers

Question 1: A company wants to deploy a domain controller in a branch office with low physical security. The administrator is concerned about the potential theft of the server and the compromise of all domain credentials. Which Windows Server 2008 feature should be implemented to mitigate this risk?

Read-Only Domain Controller (RODC) (Correct answer)
BitLocker Drive Encryption on a standard Domain Controller
Active Directory Federation Services (AD FS)
A Backup Domain Controller (BDC)

Correct answer: Read-Only Domain Controller (RODC)

A Read-Only Domain Controller (RODC) is designed for scenarios like branch offices where physical security is a concern. By default, an RODC does not cache user passwords, minimizing the security risk if the server is compromised. It hosts a read-only copy of the Active Directory database.

Question 2: What does the Windows Firewall help protect against?

Overheating
Slow internet speeds
Expired licenses
Unauthorized network access (Correct answer)

Correct answer: Unauthorized network access

The Windows Firewall is a security component that monitors and controls incoming and outgoing network traffic based on predefined security rules. Its primary purpose is to protect the computer from unauthorized network access, preventing malicious software or external threats from compromising the system. It acts as a barrier between the computer and the network.

Question 3: What is the correct way to dispose of an SPWeb object obtained via SPSite.OpenWeb() in SharePoint 2010?

Set the variable to null
Use a using statement or call SPWeb.Dispose() (Correct answer)
Call SPWeb.Close()
Call SPSite.Close()

Correct answer: Use a using statement or call SPWeb.Dispose()

SPWeb implements IDisposable, so it must be disposed via a using block or explicit Dispose() call to prevent memory leaks.

Question 4: Which type of group scope in Active Directory can contain members from any domain in the forest and be assigned permissions in any domain?

Global
Domain Local
Distribution
Universal (Correct answer)

Correct answer: Universal

Universal groups can contain members from any domain in the forest and can be granted permissions in any domain in the forest.

Question 5: A user reports that their Windows 7 Aero glass effects have stopped working after installing a new application. Which tool should the technician check first?

Windows Update history
Event Viewer Application log
Device Manager for display adapter issues (Correct answer)
System Restore

Correct answer: Device Manager for display adapter issues

Aero requires a WDDM-compatible driver; Device Manager reveals whether the display adapter driver has errors or was replaced.

Question 6: Which Windows 7 edition is required to join a computer to a Windows Server domain?

Home Basic
Starter
Professional (Correct answer)
Home Premium

Correct answer: Professional

Windows 7 Professional (and Ultimate/Enterprise) supports joining Active Directory domains; Home editions do not.

Question 7: Which design pattern does the .NET event model implement?

Decorator
Observer (Correct answer)
Factory
Strategy

Correct answer: Observer

The Observer pattern defines a one-to-many dependency, and .NET events/delegates implement this pattern directly.

Question 8: Which execution plan operator indicates that SQL Server is performing a row-by-row lookup from a non-clustered index back to the clustered index?

Hash Match
Key Lookup (Correct answer)
Table Scan
Nested Loops

Correct answer: Key Lookup

A Key Lookup (formerly Bookmark Lookup) occurs when a non-clustered index doesn't cover all needed columns, requiring SQL Server to fetch remaining columns from the clustered index.

Question 9: Which Windows logging facility records application crashes, security audit events, and system component messages separately?

Event Viewer with Application, Security, and System logs (Correct answer)
Resource Monitor
Windows Error Reporting
Windows Reliability Monitor

Correct answer: Event Viewer with Application, Security, and System logs

Event Viewer organizes events into Application, Security, and System channels, each capturing events from different subsystem categories.

Question 10: Which SQL Server feature automatically creates indexes based on workload analysis to improve query performance?

Database Engine Tuning Advisor (Correct answer)
Query Store
Plan Forcing
SQL Server Profiler

Correct answer: Database Engine Tuning Advisor

The Database Engine Tuning Advisor analyzes workloads and recommends or automatically creates indexes, indexed views, and partitions to improve performance.

Question 11: Which Exchange 2010 cmdlet would you use to test whether a specific email address can successfully receive messages through your Exchange organization?

Send-MailMessage
Test-MailFlow (Correct answer)
Test-Mailbox
Test-SmtpConnectivity

Correct answer: Test-MailFlow

Test-MailFlow sends a test message through the Exchange transport pipeline and reports whether delivery succeeded.

Question 12: Which PowerShell cmdlet retrieves a list of all installed Windows features on a server?

Get-Service
Get-Module
Get-Package
Get-WindowsFeature (Correct answer)

Correct answer: Get-WindowsFeature

Get-WindowsFeature returns all available and installed roles, role services, and features on Windows Server.

Question 13: A user's Windows 7 system is slow after several months of use. Which built-in tool analyzes the causes of degraded performance over time and displays a stability index?

Event Viewer
System Information
Performance Monitor
Reliability Monitor (Correct answer)

Correct answer: Reliability Monitor

Reliability Monitor tracks system stability over time and correlates events like crashes and installations with the stability index.

Question 14: A user reports that their Windows 7 computer is performing very slowly, with the hard drive activity light constantly on. You suspect a single application is causing excessive disk I/O. Which built-in Windows utility provides the most detailed real-time view of disk activity, including which specific files are being read and written to by each process?

Performance Monitor
Event Viewer
Task Manager
Resource Monitor (Correct answer)

Correct answer: Resource Monitor

Resource Monitor provides a detailed real-time view of system resources. Its 'Disk' tab specifically shows processes with disk activity, the rate of reads/writes in B/sec, and the exact file paths being accessed by each process. While Task Manager can show basic disk usage, it does not provide the file-level detail that Resource Monitor does. Performance Monitor is used for collecting performance counter data over time, and Event Viewer is for logs, neither of which is ideal for this real-time, file-specific investigation.

Question 15: Which utility allows configuration of system boot options in Windows?

services.msc
regedit
msconfig (Correct answer)
Task Manager

Correct answer: msconfig

The `msconfig` utility, also known as System Configuration, is a Windows tool that allows users to configure various system boot options. It enables managing startup programs, services, boot parameters (like safe mode), and system tools. This utility is essential for troubleshooting startup issues and optimizing system performance.

Question 16: When using SQL Server with ADO.NET, what is the main advantage of using stored procedures over inline SQL?

They automatically handle transactions
Stored procedures always return faster results
They eliminate the need for connection pooling
They prevent SQL injection and benefit from execution plan caching (Correct answer)

Correct answer: They prevent SQL injection and benefit from execution plan caching

Stored procedures use parameterized inputs (preventing SQL injection) and their execution plans are cached by SQL Server for reuse.

Question 17: Which SharePoint 2010 class should you use to send an email from server-side code without configuring SMTP settings manually?

Microsoft.SharePoint.Utilities.SPUtility.SendEmail (Correct answer)
SPAdmin.SendNotification
System.Net.Mail.SmtpClient
SPEmailMessage.Send

Correct answer: Microsoft.SharePoint.Utilities.SPUtility.SendEmail

SPUtility.SendEmail uses the outbound email settings configured in SharePoint Central Administration to send emails.

Question 18: In IIS 7 and later, which feature replaces the older ISAPI filters for processing HTTP requests and responses?

ISAPI Extensions
Managed Modules (Correct answer)
HTTP Modules Pipeline
ASP.NET Handlers

Correct answer: Managed Modules

IIS 7 introduced a unified pipeline where managed modules (replacing ISAPI filters) can process all request types, not just ASP.NET requests.

Question 19: What does the DISM /Online /Cleanup-Image /RestoreHealth command do?

Repairs the Windows component store using Windows Update as source (Correct answer)
Resets all NTFS permissions to defaults
Removes Windows updates to free disk space
Converts a WIM image to a VHD format

Correct answer: Repairs the Windows component store using Windows Update as source

DISM /RestoreHealth scans the component store for corruption and repairs it by downloading correct files from Windows Update or a specified source.

Question 20: When constructing a Collaborative Application Markup Language (CAML) query in SharePoint 2010 to filter list items, which element must be used to combine two separate conditions with a logical AND?

<And> (Correct answer)
<Where>
<Combine>
<Both>

Correct answer: <And>

In CAML, the `<And>` element is used to perform a logical AND operation between two conditions. Both conditions must be nested inside the `<And>` tags. The `<Where>` element is the main container for the entire query filter, but it does not perform the logical combination itself. `<Combine>` and `<Both>` are not valid CAML elements for this purpose.

Question 21: What SharePoint 2010 API namespace contains classes for working with lists, sites, and users programmatically?

Microsoft.SharePoint.Publishing
Microsoft.SharePoint.Administration
Microsoft.SharePoint.Client
Microsoft.SharePoint (Correct answer)

Correct answer: Microsoft.SharePoint

The Microsoft.SharePoint namespace contains the core server-side classes such as SPSite, SPWeb, SPList, and SPUser.

Question 22: In Exchange 2010, which type of connector should be created to relay outbound internet email through a third-party smarthost?

Receive Connector with relay permission
Foreign connector
Delivery Agent connector
Send Connector with smarthost configuration (Correct answer)

Correct answer: Send Connector with smarthost configuration

A Send Connector configured with a smarthost routes outbound messages through a specified relay server instead of direct DNS delivery.

Question 23: An administrator needs to restrict which software can run on Windows 7 computers based on file path, publisher certificate, or hash. Which feature provides this capability?

Software Restriction Policies
Windows Defender
AppLocker (Correct answer)
BitLocker

Correct answer: AppLocker

AppLocker (available in Ultimate/Enterprise) provides granular application control using path, publisher, and hash rules.

Question 24: In SQL Server 2008 database mirroring, what is the role of the WITNESS server?

It load-balances connections between principal and mirror
It stores a read-only copy of the mirrored database
It acts as a backup target for transaction logs
It monitors the principal and mirror and enables automatic failover (Correct answer)

Correct answer: It monitors the principal and mirror and enables automatic failover

The witness server participates in quorum voting and enables automatic failover by detecting when the principal is unavailable and promoting the mirror.

Question 25: Which Windows Server role service provides centralized management of network access policies for VPN, dial-up, and 802.1X connections?

Network Policy Server (Correct answer)
Routing and Remote Access
Connection Manager Administration Kit
DirectAccess

Correct answer: Network Policy Server

Network Policy Server (NPS) is the Microsoft implementation of RADIUS and provides centralized authentication, authorization, and accounting for network access.

Question 26: A company needs to ensure that all email sent to external recipients includes a legal disclaimer. Which Exchange 2010 feature should be configured?

Transport rules with disclaimers (Correct answer)
Ethical walls
Journaling
Message classifications

Correct answer: Transport rules with disclaimers

Transport rules in Exchange 2010 can be configured to append disclaimers to messages matching specified conditions.

Question 27: Which Windows Server 2008 R2 feature allows administrators to publish applications to users through a web browser without requiring full remote desktop access?

Web Application Proxy
RemoteApp (Correct answer)
Remote Web Workplace
Workplace Join

Correct answer: RemoteApp

RemoteApp allows specific applications to be streamed to users via Remote Desktop Services and appears as if running locally, accessible through a web browser or shortcut.

Question 28: In ASP.NET Web Forms, what is the role of the IsPostBack property?

Verifies that cross-site request forgery protection is active
Indicates whether the page is being loaded in response to a client postback (Correct answer)
Determines if the current request came from an authenticated user
Checks if ViewState is enabled for the current page

Correct answer: Indicates whether the page is being loaded in response to a client postback

IsPostBack returns true when the page is loaded because a user action triggered a form submission back to the server, helping you avoid re-initializing data on postbacks.

Question 29: Which Windows 7 security feature encrypts the entire operating system volume, including the Windows directory, to protect data at rest?

EFS (Encrypting File System)
AppLocker
BitLocker Drive Encryption (Correct answer)
Windows Defender

Correct answer: BitLocker Drive Encryption

BitLocker encrypts the entire volume at the hardware level, protecting even the OS files from offline attacks.

Question 30: An administrator is configuring AppLocker on a Windows 7 Enterprise computer to create a highly restrictive environment. The goal is to allow only a specific set of approved applications to run. Which of the following rule collections must be configured, at a minimum, to ensure that core operating system files can still function correctly?

Executable Rules (Correct answer)
Windows Installer Rules
Packaged app Rules
Script Rules

Correct answer: Executable Rules

AppLocker operates on a principle of whitelisting; if any rules exist in a collection, only files matching those rules are allowed to run. The core components of the Windows operating system consist of executable files (.exe, .com). Therefore, to prevent Windows from becoming non-functional, an administrator must create rules in the 'Executable Rules' collection that allow system files to run, typically by creating the default rules which permit execution from the Program Files and Windows folders. While other rule collections are important, the Executable Rules are fundamental for basic OS operation.

Question 31: Which GridView event should you handle to perform custom logic when a row is being deleted?

RowEditing
RowDataBound
RowDeleting (Correct answer)
RowCommand

Correct answer: RowDeleting

The RowDeleting event fires before the delete operation executes, allowing you to cancel or customize the deletion logic.

Question 32: What does the 'ReadyBoost' feature in Windows 7 use to improve system performance?

Additional RAM modules
An SSD as a secondary page file
CPU cache optimization
A USB flash drive as supplemental cache (Correct answer)

Correct answer: A USB flash drive as supplemental cache

ReadyBoost uses flash memory on a USB drive or SD card as a disk cache to speed up data access.

Question 33: Which attribute is applied to an ASP.NET Web API action method to restrict it to HTTP PUT requests only?

[RoutePrefix("PUT")]
[HttpPut] (Correct answer)
[WebPut]
[AcceptVerbs("PUT")]

Correct answer: [HttpPut]

[HttpPut] is the standard attribute in ASP.NET Web API and MVC to constrain an action method to respond only to HTTP PUT requests.

Question 34: Which WCF binding is best suited for REST/JSON services consumed by web browsers or mobile clients?

NetTcpBinding
WebHttpBinding (Correct answer)
BasicHttpBinding
WSHttpBinding

Correct answer: WebHttpBinding

WebHttpBinding configures WCF for RESTful services using HTTP GET/POST with JSON or XML, without SOAP envelopes, suitable for browser and mobile clients.

Question 35: What is the purpose of the [DataContract] and [DataMember] attributes in WCF?

To mark a class and its fields/properties for serialization across service boundaries (Correct answer)
To configure service throttling limits
To define service operations
To specify which binding a service uses

Correct answer: To mark a class and its fields/properties for serialization across service boundaries

[DataContract] marks a type as serializable by the DataContractSerializer, and [DataMember] marks the specific fields or properties to include in serialization.

Question 36: Which command-line tool is used to view network configuration?

tracert
ipconfig (Correct answer)
netstat
ping

Correct answer: ipconfig

The `ipconfig` command-line tool is used to display the current TCP/IP network configuration of all network adapters on a Windows machine. It provides essential information such as IP addresses, subnet masks, default gateways, and DNS server addresses. This tool is fundamental for troubleshooting network connectivity issues and verifying network settings.

Question 37: A database administrator is managing a critical OLTP database in SQL Server 2008 that requires the ability to restore to a specific point in time to minimize data loss. Transaction log backups must be performed. Which recovery model should be configured for this database?

Snapshot
Bulk-Logged
Simple
Full (Correct answer)

Correct answer: Full

The Full recovery model logs all transactions and supports point-in-time restores. This model is required when the potential for data loss must be minimized and transaction log backups are necessary. The Simple recovery model does not allow for transaction log backups, and the Bulk-Logged model, while similar to Full, minimally logs certain bulk operations, which can complicate point-in-time recovery.

Question 38: What is SQL injection, and which approach BEST prevents it in SQL Server stored procedures?

A security attack prevented by using parameterized queries or sp_executesql with parameters instead of string concatenation (Correct answer)
A performance issue solved by adding more indexes
A deadlock scenario resolved by SET DEADLOCK_PRIORITY
A replication error fixed by rebuilding the distribution database

Correct answer: A security attack prevented by using parameterized queries or sp_executesql with parameters instead of string concatenation

SQL injection occurs when user input is concatenated into dynamic SQL; using parameterized queries or sp_executesql with typed parameters prevents the attack.

Question 39: Which administrative tool is used to convert a basic disk to a dynamic disk in Windows Server without data loss?

DiskShadow
diskpart with the convert dynamic command (Correct answer)
fsutil
chkdsk /f

Correct answer: diskpart with the convert dynamic command

The diskpart utility's 'convert dynamic' command converts a basic disk to a dynamic disk, enabling spanned, striped, mirrored, and RAID-5 volumes.

Question 40: What SharePoint 2010 mechanism allows you to respond to events such as item additions or deletions in a list?

Timer Jobs
Feature Receivers
Workflows
Event Receivers (Correct answer)

Correct answer: Event Receivers

Event Receivers allow developers to handle synchronous and asynchronous events on SharePoint objects like lists and libraries.

Question 41: What is the main difference between a DataSet and a DataReader in ADO.NET?

DataSet is faster for single-row reads; DataReader is for multi-row
DataSet is a disconnected, in-memory cache; DataReader is a forward-only, connected stream (Correct answer)
DataReader supports XML serialization; DataSet does not
DataSet supports only stored procedures; DataReader supports inline SQL

Correct answer: DataSet is a disconnected, in-memory cache; DataReader is a forward-only, connected stream

DataSet holds data in memory after closing the connection (disconnected), while DataReader streams rows one at a time with an open connection (connected, forward-only).

Question 42: What is the primary function of the .NET Framework in Windows development?

Manages hardware drivers.
Provides a development and runtime environment for Windows apps. (Correct answer)
Compiles Java programs.
Handles Linux server installations.

Correct answer: Provides a development and runtime environment for Windows apps.

The .NET Framework is a software framework by Microsoft that provides a comprehensive development and runtime environment for Windows applications. It includes a vast class library and the Common Language Runtime (CLR), enabling developers to build various types of applications across different programming languages.

Question 43: What is the purpose of the 'suspect_pages' table in the msdb database?

To store orphaned page allocations
To track database pages that encountered 823 or 824 errors during reads (Correct answer)
To identify pages locked by long-running transactions
To list pages that need defragmentation

Correct answer: To track database pages that encountered 823 or 824 errors during reads

The msdb.dbo.suspect_pages table records pages that failed with I/O errors (error 823/824/829), helping DBAs identify potential disk or corruption issues.

Question 44: An administrator needs to find all user accounts in Active Directory that have not logged on in the past 90 days. Which tool provides a built-in query interface for this task?

Group Policy Management Console
Saved Queries in Active Directory Users and Computers (Correct answer)
Active Directory Sites and Services
Active Directory Domains and Trusts

Correct answer: Saved Queries in Active Directory Users and Computers

Active Directory Users and Computers supports Saved Queries using LDAP filter syntax, allowing administrators to find accounts based on lastLogonTimestamp and other attributes.

Question 45: You are developing a Windows Presentation Foundation (WPF) application and need to define a custom property for a UserControl that supports data binding, styling, and animation. Which type of property should you implement?

A dependency property. (Correct answer)
A standard CLR property with a backing field.
A static property on the control class.
An attached property.

Correct answer: A dependency property.

Dependency properties are a specific type of property system provided by WPF. They are required for a property to support features like data binding, styling, animation, and property value inheritance. Standard CLR properties do not have this built-in infrastructure.

Question 46: In .NET, which garbage collection generation typically contains long-lived objects like static data and large objects?

Generation 2 (Correct answer)
Generation 1
Generation 0
Large Object Heap

Correct answer: Generation 2

Generation 2 in .NET's garbage collector contains long-lived objects that have survived multiple collections; it's collected least frequently.

Question 47: A user needs to encrypt the entire contents of a removable USB flash drive to protect sensitive data. The user must be able to access the data on other Windows 7 computers, and also have read-only access on computers running Windows XP. Which Windows 7 feature should be used to accomplish this?

BitLocker To Go (Correct answer)
Encrypting File System (EFS)
Rights Management Services (RMS)
NTFS permissions

Correct answer: BitLocker To Go

BitLocker To Go is a feature introduced in Windows 7 designed specifically for encrypting removable data drives like USB flash drives. It provides full data protection and includes a 'BitLocker To Go Reader' for older operating systems like Windows XP and Vista, which allows for read-only access to the encrypted data after providing the correct password. EFS encrypts individual files/folders, not entire drives. NTFS permissions control access but do not encrypt the data at rest on the drive. RMS is for protecting information within documents, not for full drive encryption.

Question 48: You are building a secure section of a website. After a user successfully logs in, you need to determine if they have the permission to access a specific administrative page. What is this process of determining permissions called?

Impersonation
Authorization (Correct answer)
Validation
Authentication

Correct answer: Authorization

Authorization is the process of determining whether an authenticated user has the necessary permissions to access a specific resource or perform an action. Authentication is the process of verifying the user's identity (e.g., checking their username and password). Authentication always happens before authorization.

Question 49: What SQL Server constraint ensures that a column value exists as a primary key value in another table?

DEFAULT constraint
UNIQUE constraint
CHECK constraint
FOREIGN KEY constraint (Correct answer)

Correct answer: FOREIGN KEY constraint

A FOREIGN KEY constraint enforces referential integrity by requiring that values in a child column match existing values in the referenced parent table's primary or unique key.

Question 50: Which Windows 7 feature lets users roll back their personal files to a previous state without restoring the entire system?

Previous Versions (Correct answer)
System Restore
Shadow Copy
Windows Backup

Correct answer: Previous Versions

Previous Versions (accessible by right-clicking a file or folder) lets users restore individual files from shadow copy snapshots.

Question 51: Which SQL Server windowing function returns the rank of each row within a partition, with no gaps in ranking values?

RANK()
NTILE()
ROW_NUMBER()
DENSE_RANK() (Correct answer)

Correct answer: DENSE_RANK()

DENSE_RANK() assigns consecutive rank values with no gaps when there are ties, whereas RANK() skips rank values after ties.

Microsoft Certified Technology Specialist (MCTS) Exam

MCTS certifications validate expertise in specific Microsoft technologies, demonstrating proficiency in implementing, troubleshooting, and debugging a particular Microsoft product or technology.

Questions

120 min

Time Limit

70%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds