MCSA Chapter 07 – Flashcards

T/F - Information within an OU can be hidden using permissions, and administration of an OU can be delegated to a non-administrative account.​

Which of the following statements is not true regarding the built-in Administrator account?​ a. ​The domain Administrator account in the forest root domain has full access to all aspects of the forest. b. ​The Administrator account can be disabled. c. The Administrator account can't be renamed, but it can be deleted. d. The local Administrator has full access to a local computer, a domain Administrator has full access to a domain

Select the special character below that can't be used within a username:​

By default, the Windows password policy requires a minimum password of what length?​

How can an administrator enable or disable accounts using the command line?​

Which statement is true regarding the use of the Logon Hours option under a user's account? a. ​Logon hours can be set for specific days of the month, as well as holidays b. The Logon Hours forces a user to log off during "Logon denied" periods c. Logon Hours can't be changed during weekends d. The Logon Hours can't be used to disconnect a user that has already logged in

User's profile is stored in what directory on a local computer by default?​

Which special identity group specifically includes any user account (except the Guest) logged into a computer or domain with a valid username and password?

The default location for computer accounts that are created automatically after joining the domain can be changed using which command?​

How can the output of a command be redirected to a file instead of being displayed on screen?​ a. Type the > character followed by the file name at the end of the command b. Use the -out option c. Add "echo file" at the end of the command. d. Place the output file in { } brackets.

A valid comma separated value file that can be imported using csvde must have what option below on the first line? a. The distinguished name of the first object to imported b. The FQDN of the target domain c. Set variable parameters d. A header record

Select the true statement regarding the conversion of group scope:​ a. ​Universal groups that are members of other universal groups can be converted to domain local groups b. ​Global groups can't be converted to universal groups c. Domain local groups can be converted to universal, as long as the domain local group does not contain other domain local groups d. Universal groups can be members of global groups

Which of the following statements is true regarding the built-in Guest account? a. ​The Guest account is not included in the Everyone group b. After Windows installation, the Guest account is enabled by default c. The Guest account should be renamed if it will be used d. The Guest account requires a password

What is a downlevel user logon name used for?​ a. Assigning access to lower security shared folders b. ​Logging into servers that are marked as "Down" in Server Manager c. ​Logging into servers further down in the domain structure d. ​Logging into older Windows OSs or using older Windows applications

When creating a new user, the "User cannot change password" option can't be used in conjunction with what other option?​

After a template account has been created, what can be done to ensure that the template account does not pose a security risk? a. The account should be removed from the "Domain Users" group b. A specialized GPO should be applied to the OU the template account is located in, to limit risk c. The account should be placed in an isolated OU d. ​The account should be disabled

What is the most typically used group type conversion?

Select below the built-in group that facilitates anonymous access to web resources by Internet Information Services

What special identity group is used when a user accesses an FTP server that doesn't require user account logon?​

How often is the password for a computer account changed by Active Directory?​

An authenticated user can add up to how many computer accounts to the domain, by default?​

T/F - The Administrator account should not be re-named, but should at least used a secure password.

T/F - When creating a new user, the "User must change password at next logon" option is enabled by default.

T/F - An explicit "allow" permission will override an inherited "deny" permission.

T/F - Permission inheritance can be configured such that permissions are only inherited by specific types of child object types.​