Incorrect: Nltest.exe can run on any Windows 7 workstation.

Incorrect: DNSLint.exe can run on any Windows computer.

Correct: Dcdiag.exe tests domain controller functions and therefore must run on a domain controller.

Incorrect: Kerbtray.exe can run on any AD DS domain member.

Incorrect: The workstation’s clock time must be within 5 minutes of the domain controller’s clock time, not 5 seconds.

Correct: The workstation’s clock time must be within 5 minutes of the domain controller’s clock time.

Incorrect: The workstation’s clock time must be within 5 minutes of the domain controller’s clock time, not 15 minutes.