AD Chapter 13-16 test questions – Flashcards
Unlock all answers in this set
Unlock answersquestion
Active Directory keeps a naming convention for the domain that mirrors ______.
answer
DNS
question
An Active Directory _____ consists of one or more separate domain trees.
answer
forest
question
An administrator needs to grant an e-mail distribution group of 100 members access to a database, how would the administrator proceed? The e-mail group is obsolete and can be dissolved.
answer
Convert the distribution group to a security group and then assign the group access permissions.
question
Can a domain user, who does not possess explicit object creation permissions, create computer objects?
answer
Yes, authenticated users can create workstation, but not server objects
question
Can an administrator launch the Group Policy Management console from a workstation?
answer
Yes, if the workstation is running the Remote Server Administration Tools package
question
Configuring a Central Store of ADMX files help solve the problem of ________.
answer
"SYSVOL bloat"
question
For Server Core installations, how does Windows Server 2012 differ from Windows Server 2008 when installing the AD DS role and promoting the system to a domain controller?
answer
Windows Server 2012 now allows administrators to use PowerShell.
question
Group Policies applied to parent containers are inherited by all child containers and objects. What are the ways you can alter inheritance?
answer
Using the Enforce, Block Policy Inheritance, or Loopback settings
question
Group Policy settings are divided into two subcategories: User Configuration and Computer Configuration. Each of those two are further organized into three subnodes. What are the three?
answer
Software settings, Windows settings, and Administrative Templates
question
How do groups differ from OUs?
answer
Groups are security principals, meaning you assign access permissions to a resource based on membership in a group. OUs are for organization and for assigning Group Policy settings.
question
How does CSVDE.exe differ from LDIFDE.exe?
answer
Both utilities can import users, but only LDIFDE can modify or delete objects later
question
If an administrator creates a domain tree in an Active Directory forest, and then creates a separate and different domain tree, what is the relationship between the two domain trees?
answer
Same security entity as one Active Directory forest, bidirectional trust between domain trees
question
If creating a Local Group Policy Object, then a secondary GPO, then a tertiary GPO, what policy settings are included in each GPO?
answer
The first GPO contains both Computer Configuration and User Configuration settings, while the secondary and tertiary GPOs contain only User Configuration settings.
question
In Windows Server 2012, after a user logs on to Active Directory, a(an) ________ is created that identifies the user and all the user's group memberships.
answer
access token
question
Installing Windows Server 2012 Active Directory Domain Services installs two default policies: Default Domain Policy and Default Domain Controller Policy. The administrator needs different policy settings. How best to proceed?
answer
Create new Group Policy Objects to augment or override the existing default settings.
question
Local GPOs contain fewer options than domain GPOs. Local GPOs do not support ______.
answer
Folder redirection or Group Policy software installation
question
Members of a universal group can come ______.
answer
from trusted forests
question
Of the default groups created when Active Directory is installed, what are the types of those groups?
answer
Security groups
question
Of the key reasons for creating organizational units, which of the following is NOT one of them?
answer
Assigning permissions to network resources
question
Regarding Group Policy in Windows Server 2008 and Windows Vista, Microsoft used the token-based administrative template (ADM) files. What did Microsoft replace ADM files with in Windows Server 2012?
answer
ADMX files (XML-based file format)
question
Resource access for individuals takes place through their ______.
answer
user accounts
question
Some of the following groups might grant or deny permissions to any resource located in any domain in the forest. Of them, which one's membership is replicated only in the domain controllers of the same domain?
answer
Global groups
question
The Delegation of Control Wizard is capable of ________ permissions.
answer
granting
question
The LDIFDE.exe utility is most similar to what other utility?
answer
CSVDE.exe
question
The command-line utility can create new user accounts by importing information from a comma-separated value file?
answer
CSVDE.exe
question
The three types of Group Policy Objects (GPOs) include local, domain and _____.
answer
starter
question
To perform an offline domain join, how many times would an administrator run the Djoin.exe command?
answer
twice
question
What administrative division in Active Directory is defined as a collection of subnets that have good connectivity between them to facilitate the replication process?
answer
Sites
question
What allows administrators to grant users in one domain access to resources of another domain within the same domain tree?
answer
Bidirectional trust relationship between domains
question
What application or interface allows you to configure security filtering?
answer
Group Policy Management console
question
What are the different kinds of groups?
answer
There are two types: security and distribution; and there are three group scopes: domain local, global, and universal.
question
What are the two basic classes of Active Directory objects?
answer
Container and leaf objects
question
What are the two built-in user accounts are created on a computer running Windows Server 2012?
answer
administrator and guest
question
What are the two types of user accounts in Windows Server 2012?
answer
local and domain
question
What capability allows you to create specific GPO settings for one or more local users configured on a workstation?
answer
multiple local GPOs
question
What command-line utility allows administrators to modify a group's type and scope as well as add or remove members?
answer
Dsmod.exe
question
What command-line utility requires you know the SAM account name as well as the user login ID before creating user accounts?
answer
Dsadd.exe
question
What defines what objects exist as well as what attributes are associated with any object in the Active Directory?
answer
Active Directory schema
question
What determines the functional level of an Active Directory forest?
answer
The lowest version of Windows Server on a domain controller
question
What do you call the process that after you link a GPO to a site with multiple domains, the Group Policy settings are applied to all the domains and the child objects beneath them?
answer
inheritance
question
What graphical tool can create user and computer accounts and was redesigned for Windows Server 2012?
answer
Active Directory Administrative Center
question
What is a container object that functions in a subordinate capacity to a domain, and still inherits policies and permissions from its parent objects?
answer
Organizational unit
question
What is a key difference between a domain tree hierarchy and the organizational unit (OU) hierarchy within a domain?
answer
Inheritance
question
What is an important difference between groups and OUs?
answer
Group memberships are independent of the domain's tree structure.
question
What is not a container, nor full-fledged security division and cannot have Group Policy settings applied directly to them?
answer
Group
question
What is the Microsoft Management Console (MMC) snap-in that you use to create GPOs and manage their deployment to AD DS objects?
answer
Group Policy Management console
question
What is the PowerShell cmdlet for installing a domain controller to the domain "adatum.com"?
answer
Install-AddsForest -DomainName "adatum.com"
question
What is the PowerShell cmdlet used to create user objects?
answer
New-ADUser
question
What is the fundamental component of the Active Directory architecture, functioning as the boundary for virtually all directory functions, including administration, access control, database management, and replication?
answer
Domain
question
What is the global catalog?
answer
An index of all AD DS objects in a forest
question
What is the group scope for Domain Admins, Domain Controllers, and Domain Users default groups?
answer
Global
question
What is the method for removing a domain controller in Windows Server 2012?
answer
Using the Remove Roles and Features Wizard
question
What is the next level of Active Directory container object within a domain?
answer
Organizational unit
question
What is the only OU created by default after installing Active Directory?
answer
Domain Controllers OU
question
What is the order in which Windows systems receiving and process multiple GPOs.
answer
LSDOU (local, site, domain, then OU)
question
What is the primary difference between universal groups and global groups in Windows Server 2012?
answer
Global groups use less data in the global catalog. So, in considering replication traffic, universal groups should be within a site.
question
What is the primary means by which people access resources on an AD DS network?
answer
By having a user account
question
What is the primary reason for creating different sites on an Active Directory network?
answer
To control the traffic passing over relatively slow and expensive WAN links between locations
question
What is the process of granting the user access only to the resources he or she is permitted to use?
answer
Authorization
question
What is the proper term for associating a Group Policy to a set of AD DS objects?
answer
Linking
question
What is the simplest way for administrators to upgrade their AD DS infrastructure to Windows Server 2012?
answer
Add a new Windows Server 2012 DC to your existing Directory Services installation.
question
What is the technique called that you can modify the default permission assignments so that only certain users and computers receive the permissions and, consequently, the settings in the GPO?
answer
security filtering
question
What kind of GPO serves as a template for the creation of domain GPOs based on a standard collection of settings?
answer
starter GPO
question
What kind of GPO stores its settings on the local computer in the %systemroot%/System32/GroupPolicy folder?
answer
local GPO
question
What nonlocal GPO has its properties stored in the Active Directory object Group Policy container (GPC), as well as a Group Policy template located in the SYSVOL share?
answer
domain GPO
question
What special DNS resource record enables clients to locate domain controllers and other vital AD DS services?
answer
SRV
question
What two common tools help create both User and Computer objects?
answer
Active Directory Administrative Center and Active Directory Users and Computer
question
What user creation tool was redesigned in Windows Server 2012 to incorporate new features such as the Active Directory Recycle Bin and fine-grained password policies?
answer
Active Directory Administrative Center (ADAC)
question
What versions of Windows began support of multiple local GPOs?
answer
Windows Server 2008 R2 and Windows Vista
question
What would be a sufficient user account to provide temporary access to the network for a user such as a vendor representative or a temporary employee?
answer
Guest
question
What would be the distinguished name (DN) for a user named Ella Parker, whose user account resides in the Marketing OU of the adatum.com domain?
answer
cn=Ella Parker,ou=Marketing,dc=adatum,dc=com
question
What you call the process of confirming a user's identity by using a known value such as a password, a smart card, or a fingerprint?
answer
authentication
question
What you call the process of confirming that a user has the correct permissions to access one or more network resources?
answer
Authorization
question
When is an Active Directory site topology created?
answer
Site topology is manually configured dependent on WAN bandwidth and transmission speed.
question
When multiple GPOs are linked to a container, which GPO in the list has the highest priority?
answer
the first
question
When would administrators choose to use a User Template?
answer
When an administrator wants to save time while creating single users with many attributes
question
Where is the path to the default GPT structure for a domain?
answer
%systemroot%SYSVOLsysvolPolicies
question
Which of the following default groups is a universal group?
answer
Enterprise Admins
question
Which of the following guidelines are NOT best practice for securing the Administrator account?
answer
Renaming the Administrator account name so as not to distinguish it from non-administrative accounts
question
Which of the following is NOT a group scope?
answer
Security groups
question
Which of the following is NOT an example of a special identity?
answer
Dialup Service
question
Which of the following is a PowerShell cmdlet for creating user objects?
answer
New-ADUser
question
Which of these groups is not related to security and cannot have permissions assigned to it?
answer
Distribution groups
question
Which of these groups would an administrator use to assign permissions to resources in the same domain?
answer
Domain local groups
question
Which of these groups' membership is stored in the global catalog?
answer
Universal groups
question
Within a domain, the primary hierarchical building block is the _________.
answer
organizational unit
question
What is the SAM account name and the User Principal Name for the account [email protected]?
answer
SAM account name is ella, and the User Principal Name is [email protected]
