Deck 4: Introduction to Active Directory and Account Management

Question 1

Every resource in a domain is called a(n)____.

A) object
B) entity
C) entry
D) article

Answer 1

A

Question 2

The ____ stores information about every object within a forest.

A) global catalog
B) global master
C) schema master
D) master catalog

Answer 2

A

Question 3

One reason for having an RODC is for better security at branch locations,where physical security measures might not be as strong as at a central office.

Answer 3

True

Question 4

A(n)____ is a grouping of related objects within a domain,similar to the idea of having subfolders within a folder,and can be used to reflect the structure of the organization without having to completely restructure the domain(s)when that structure changes.

A) container
B) branch
C) tree
D) OU

Question 5

The Windows Server 2008 option to stop Active Directory Domain Services can involve considerable downtime.

Question 6

Each kind of object in Active Directory is defined through the ____,which is like a small database of information associated with that object,including the object class and its attributes.

A) forest
B) template
C) schema
D) dimension

Question 7

A ____ is intended to contain user accounts from a single domain and can also be set up as a member of a domain local group in the same or another domain.

A) domain security group
B) global security group
C) universal security group
D) domain local group

Question 8

A ____ is typically used to enable one- or two-way access between a Windows Server domain within a forest and a realm of UNIX/Linux computers.

A) realm trust
B) transitive trust
C) shortcut trust
D) linear trust

Question 9

AD LDS is installed as a server role via Server Manager.

Question 10

A ____ contains one or more domains that are in a common relationship.

A) forest
B) root
C) tree
D) branch

Question 11

If information on one DC changes,such as the creation of an account,it is replicated to all other DCs in a process called ____.

A) single-master replication
B) shared-master replication
C) master-slave replication
D) multimaster replication

Question 12

A ____ is a TCP/IP-based concept (container)within Active Directory that is linked to IP subnets.

A) forest
B) domain
C) site
D) tree

Question 13

Active Directory is a ____ that houses information about all network resources such as servers,printers,user accounts,groups of user accounts,security policies,and other information.

A) file service
B) domain
C) directory service
D) module

Question 14

The forest ____ refers to the Active Directory functions supported forest-wide.

A) functional level
B) operational level
C) functional master
D) operational master

Question 15

A ____ is one in which every child object contains the name of the parent object.

A) disjointed namespace
B) logical namespace
C) contained namespace
D) contiguous namespace

Question 16

A(n)____ means that if A and B have a trust and B and C have a trust,A and C automatically have a trust as well.

A) one-way trust
B) transitive trust
C) linear trust
D) implied trust

Question 17

Active Directory coordinates servers,client computers,printers,shared files,and other resources in a Windows Server 2008 network.

Question 18

A ____ usually is a higher-level representation of how a business,government,or school is organized,for example reflecting a geographical location or major division of that organization.

A) forest
B) domain
C) tree
D) member server

Question 19

Microsoft recommends that at least four DCs should be present in any organization using Active Directory.

Question 20

DNS is a TCP/IP-based name service that converts computer and domain host names to dotted decimal addresses and vice versa,through a process called ____.

A) address resolution
B) name resolution
C) domain resolution
D) host resolution

Question 21

Match each term with the correct statement below.
a.forest
b.member servers
c.namespace
d.mandatory user profile
e.schema
f.roaming profile
g.domain controllers
h.globally unique identifier
i.AD LDS
Servers that have the AD DS server role installed

Question 22

Match each term with the correct statement below.
a.forest
b.member servers
c.namespace
d.mandatory user profile
e.schema
f.roaming profile
g.domain controllers
h.globally unique identifier
i.AD LDS
A logical area on a network that contains directory services and named objects,and that has the ability to perform name resolution

Question 23

____ password policies mean that you can now create more than one set of account policies within a domain.

A) Fine-grained
B) Global
C) Unrestricted
D) Multiple

Question 24

Match each term with the correct statement below.
a.forest
b.member servers
c.namespace
d.mandatory user profile
e.schema
f.roaming profile
g.domain controllers
h.globally unique identifier
i.AD LDS
Servers on a network managed by Active Directory that do not have Active Directory installed

Question 25

Match each term with the correct statement below.
a.forest
b.member servers
c.namespace
d.mandatory user profile
e.schema
f.roaming profile
g.domain controllers
h.globally unique identifier
i.AD LDS
Enables a user to start off with the same desktop setup,no matter which computer she or he uses

Question 26

A(n)____________________ consists of one or more Active Directory trees that are in a common relationship.

Question 27

Match each term with the correct statement below.
a.forest
b.member servers
c.namespace
d.mandatory user profile
e.schema
f.roaming profile
g.domain controllers
h.globally unique identifier
i.AD LDS
Defines the objects and the information pertaining to those objects that can be stored in Active Directory

Question 28

The ____________________ server enables forest-wide searches of data.

Question 29

A ____ is different from normal DCs in that you cannot use it to update information in Active Directory and it does not replicate to regular DCs.

A) Restricted Domain Controller
B) Limited Access Domain Controller
C) Read-Only Domain Controller
D) Replication-Limited Domain Controller

Question 30

Match each term with the correct statement below.
a.forest
b.member servers
c.namespace
d.mandatory user profile
e.schema
f.roaming profile
g.domain controllers
h.globally unique identifier
i.AD LDS
The highest level in an Active Directory design

Question 31

A(n)____________________ profile is automatically created at the local computer when you log on with an account for the first time.

Question 32

In Active Directory,a(n)____________________ is a fundamental component or container that holds information about all network resources that are grouped within it-servers,printers,and other physical resources,users,and user groups.

Question 33

Match each term with the correct statement below.
a.forest
b.member servers
c.namespace
d.mandatory user profile
e.schema
f.roaming profile
g.domain controllers
h.globally unique identifier
i.AD LDS
A unique number associated with the object name

Question 34

A PSO can be created by using the ____________________ command from the Command Prompt window in Windows Server 2008.

Question 35

In a ____,the user does not have permission to update the folder containing his profile.

A) read-only user profile
B) mandatory user profile
C) limited user profile
D) restricted user profile

Question 36

In an Active Directory context in which there are multiple hierarchies of domains,trees,and forests,____ provide a means to span domains and trees.

A) domain security groups
B) domain local groups
C) global security groups
D) universal security groups

Question 37

Match each term with the correct statement below.
a.forest
b.member servers
c.namespace
d.mandatory user profile
e.schema
f.roaming profile
g.domain controllers
h.globally unique identifier
i.AD LDS
A skeleton version of Active Directory Domain Services,housing only those elements needed for central configuration and data management required by applications,including directory replication and security services

Question 38

____ are used in Microsoft operating systems to provide a consistent working environment for one or more users.

A) Environments
B) Settings
C) Templates
D) Profiles

Question 39

Match each term with the correct statement below.
a.forest
b.member servers
c.namespace
d.mandatory user profile
e.schema
f.roaming profile
g.domain controllers
h.globally unique identifier
i.AD LDS
Overrides the user's locally stored profile if it has been changed from the version stored on the server

Question 40

____ and user accounts enable an organization to delegate authority over objects,such as Active Directory containers,user accounts,groups,and applications.

A) Tiered groups
B) Security groups
C) Organizational units
D) Administrative units

Question 41

Explain the purpose of a local security group.

Question 42

What are the two places that you must set up Active Directory auditing?

Question 43

List three key new features of Windows Server 2008 Active Directory.

Question 44

Discuss the advantages and reasons for creating more than one password and lockout policy based on security group or user.

Question 45

List two advantages of using profiles.

Question 46

Discuss the policy sets that an organization might consider when planning fine-grained password policies.

Question 47

List two types of changes that can now be tracked using auditing capabilities introduced in Active Directory in Windows Server 2008 R2.

Question 48

What are the three general concepts that are important as a starting place for understanding Active Directory?

Question 49

Discuss how to take Active Directory snapshots and why it is important to do so.

Question 50

List two characteristics of a tree.