Deck 5: Account Management

Question 1

User account names in Active Directory need only be unique inside their container.

Answer 1

False

Question 2

The ability to force a user to be disconnected after logon hours expire is a group policy setting.

Answer 2

True

Question 3

Which group matches the following description?
This universal group is found only on DCs in the forest root domain.Members have full control over forestwide operations.This group is a member of the Administrators group on all DCs.

A)Enterprise Admins
B)Domain Admins
C)DnsAdmins
D)Domain Users

Answer 3

A

Question 4

By default,a user's profile is created....

A)When the user is created
B)When the user first logs on
C)After the user first logs off
D)After the user creates his profile folder

Question 5

Which of the following is not a benefit of using roaming profiles?

A)Consistent environment
B)Easy backup of profile settings
C)Easy management
D)Bandwidth usage

Question 6

Which statement is false?

A)Domain local groups can have universal groups from any domain in the forest as members
B)Universal groups can have universal groups from any domain in the forest as members
C)Global groups can be members of any global group in the forest
D)Domain local groups can be members of local groups on domain member computers

Question 7

If the Unlock Account checkbox is selected under a user account's Properties dialog box,what does this mean?

A)The user was disabled by administrator
B)The user has locked their screensaver password
C)The user has too many failed logon attempts and is locked out
D)The account's properties have been locked to prevent modification

Question 8

Select below a character that can be used in a user account name:

A)!
B)@
C):
D)?

Question 9

Members of the Backup Operators group can log on locally to and shut down domain controllers.

Question 10

By default,user account names are case sensitive

Question 11

The administrator account can be renamed or disabled but can't be deleted

Question 12

A seasoned intern,Sally,has been given a new assignment.She must be able to log on locally to DCs,manage some services,manage shared resources,back up and restore files,shutdown DCs,format hard drives,and change the system time.In order to give her only the rights and permissions necessary to complete these tasks,what domain local group will you add her to?

A)Backup operators
B)Administrators
C)Server Operators
D)Network Configuration Operators

Question 13

What is a super mandatory profile?

A)A profile that requires a user's mandatory profile be available,or they will not be able to log on
B)A profile that has no access to control panel
C)A profile that has Ntuser.dat renamed to Ntuser.sman
D)A profile that does not allow changes to be made even on a temporary basis

Question 14

You have received a call from an employee about permissions on a shared folder,having found he can no longer access the resource.After checking the folder,you find that the group the employee is in is part of the resource's DACL,but seems to have no effect on the group's permissions.The group's permission entry is the only entry in the DACL.What is wrong?

A)The shared resource no longer exists
B)The group has been converted from a security group to a distribution group
C)The group has been added to "Deny access to shared resources" policy on the
D)The group has been converted from a distribution group to a security group

Question 15

Where are user profiles stored by default in Windows Server 2008?

A)%SYSTEMDRIVE%\Users
B)%SYSTEMDRIVE%\Documents and Settings
C)%SYSTEMDRIVE%\LocalUsers
D)%SYSTEMPARTITION%\LocalUsers

Question 16

What is Microsoft's best practices recommendation for the structure of group scope nesting?

A)AGDLP
B)ADLGP
C)AGPDL
D)ADLPG

Question 17

How do you change a profile into a mandatory profile?

A)Delete Ntuser.dat from the profile
B)Rename Ntuser.dat to Ntuser.manual
C)Rename Ntuser.dat to Ntuser.man
D)Delete the AppData folder inside the profile

Question 18

Employees in your office have recently been changing desktop wallpapers against company policy.You want to be able to lock down this ability,while preventing other profile changes as well.What is your best option?

A)You could add the offending users to the "User is unable to modify profile settings" group policy
B)Disable access to control panel
C)Set up a virtual environment on each computer so that users can change whatever they want,without affecting the host
D)Set up a mandatory profile

Question 19

In order to ensure no one uses public computer terminals after 5 pm,you've set the log on hours for the guest user accounts to deny log on after 5.However,you've noticed that users are still using the terminals after 5 pm,while other users are denied the ability to log in.
Why are some users denied to log on,while other users are still using the terminals?

A)Logon hours can only be set on stand-alone computers
B)The users were logged on prior to 5pm
C)You highlighted 8 am to 5 pm,but selected "Logon denied"
D)The machines the other users are on have pending update installs that are preventing the log off sequence from taking place

Question 20

Where are local groups stored?

A)On a domain controller
B)On the local computer,under c : \ Documents and Settings
C)On stand-alone servers only
D)In the local SAM database

Question 21

A domain local group can be converted to a universal,provided no ____________________ is a member.

Question 22

MATCHING
a.contact
f.piping
b.roaming profile
g.distribution list
c.security groups
h.super mandatory profile
d.user template
i.distribution group
e.group scope
A property of a group that determines the reach of a group's application in a domain or a forest

Question 23

Which command line tool removes,or deletes,objects from Active Directory?

A)DSADD
B)DSGET
C)DSMOD
D)DSRM

Question 24

MATCHING
a.contact
f.piping
b.roaming profile
g.distribution list
c.security groups
h.super mandatory profile
d.user template
i.distribution group
e.group scope
A user account that's copied to create users with common attributes

Question 25

MATCHING
a.contact
f.piping
b.roaming profile
g.distribution list
c.security groups
h.super mandatory profile
d.user template
i.distribution group
e.group scope
A user profile that follows the user no matter which computer he or she logs on to

Question 26

MATCHING
a.contact
f.piping
b.roaming profile
g.distribution list
c.security groups
h.super mandatory profile
d.user template
i.distribution group
e.group scope
A group type that's the main Active Directory object administrators use to manage network resource access and grant rights to users

Question 27

At about what interval does a computer change its computer account password?

A)30 minutes
B)30 hours
C)30 days
D)30 weeks

Question 28

MATCHING
a.contact
f.piping
b.roaming profile
g.distribution list
c.security groups
h.super mandatory profile
d.user template
i.distribution group
e.group scope
A group type used when you want to group users together,mainly for sending e-mails to several people at once

Question 29

Which of the below utilities uses comma-separated values to bulk import or export Active Directory data?

A)CVSDE
B)LDAP
C)CSVDE
D)LDFIDE

Question 30

The ____________________ group is a built-in default group and has no default rights or permissions.

Question 31

A ____________________ is a group created in the local SAM database on a member server or workstation or a stand-alone computer.

Question 32

MATCHING
a.contact
f.piping
b.roaming profile
g.distribution list
c.security groups
h.super mandatory profile
d.user template
i.distribution group
e.group scope
An Active Directory object that usually represents a person for information purposes only,much like an address book entry

Question 33

MATCHING
a.contact
f.piping
b.roaming profile
g.distribution list
c.security groups
h.super mandatory profile
d.user template
i.distribution group
e.group scope
Sending the output of one command as input to another command

Question 34

Which command line tool displays an object's properties onscreen by default,but can redirect output to a file?

A)DSADD
B)DSGET
C)DSMOD
D)DSMOVE

Question 35

The ____________________ command displays an object's properties onscreen by default,but the output can be redirected to a file.

Question 36

MATCHING
a.contact
f.piping
b.roaming profile
g.distribution list
c.security groups
h.super mandatory profile
d.user template
i.distribution group
e.group scope
A user profile type that prevents a user from logging on to the domain when the mandatory profile is unavailable

Question 37

Which command line tool finds and displays objects in Active Directory that meet specified criteria?

A)DSGET
B)DSQUERY
C)DSADD
D)DSRM

Question 38

A universal group can be converted to a domain local group,provided it's not a member of a ____________________.

Question 39

This command line tool modifies existing Active Directory objects

A)DSGET
B)DSMOVE
C)DSRM
D)DSMOD

Question 40

MATCHING
a.contact
f.piping
b.roaming profile
g.distribution list
c.security groups
h.super mandatory profile
d.user template
i.distribution group
e.group scope
An active Directory object consisting of a list of users in a distribution group,used for sending an e-mail to multiple people simultaneously

Question 41

MATCHING
a.contact
f.piping
b.roaming profile
g.distribution list
c.security groups
h.super mandatory profile
d.user template
i.distribution group
e.group scope
This functional level is supported by Windows 2000 Server and Windows Server 2003,but not Windows Server 2008.It allows NT DCs to participate in the domain.

Question 42

When membership changes involving this group scope take place,replication is required to all global catalog servers.

Question 43

One of the most significant disadvantages of using roaming profiles,bandwidth usage,can be reduced by configuring this.

Question 44

What term best matches this description?
A collection of a user's personal files and settings that define his or her working environment

Question 45

Type the command you would use to display all users in the TestOU on the example.com domain.

Question 46

Type the command to add the user account TestUserA to the TestOU,in the example.com domain.

Question 47

This extension at the end of a user's roaming profile folder distinguishes a roaming profile from a pre-Vista roaming profile.

Question 48

What must the format of the text file used to import users with the CSVDE tool be?

Question 49

What term best matches this description?
A user profile that can be changed during a user's logon session,but the next time the user logs on,the changes aren't saved,and the profile reverts to its original state

Question 50

This is simply a user account that's copied to create users with common attributes.