Question 1

​The Administrator account should not be re-named,but should at least used a secure password.

Accepted Answer

Renaming the Administrator account is a recommended security practice to make it less predictable to attackers, in addition to using a secure password.

Question 2

When creating a new user,the "User must change password at next logon" option is enabled by default.​

Accepted Answer

This option is enabled by default to ensure that the user creates a unique and secure password for their account.

Question 3

​After a template account has been created,what can be done to ensure that the template account does not pose a security risk?
A) ​The account should be placed in an isolated OU
B) ​A specialized GPO should be applied to the OU the template account is located in,to limit risk
C) ​The account should be disabled
D) ​The account should be removed from the "Domain Users" group

Accepted Answer

Disabling the account ensures it cannot be used to log in or perform any actions, thus minimizing security risks.

Question 4

A valid comma separated value file that can be imported using csvde must have what option below on the first line?
A) The FQDN of the target domain
B) ​The distinguished name of the first object to imported
C) ​Set variable parameters
D) ​A header record

Accepted Answer

The answer of A valid comma separated value file that...

Question 5

​An explicit "allow" permission will override an inherited "deny" permission.

Accepted Answer

An explicit "allow" permission takes precedence over any inherited permissions, including "deny" permissions. This means that even if a user has been denied access to a folder or file through inheritance, if they are granted an explicit "allow" permission at the file or folder level, they will gain access.

Question 6

Information within an OU can be hidden using permissions,and administration of an OU can be delegated to a non-administrative account.​

Accepted Answer

This statement is true. Within an OU, permissions can be set to restrict access to certain information, and administrative tasks can be delegated to non-administrative accounts.

Question 7

Permission inheritance can be configured such that permissions are only inherited by specific types of child object types.​

Accepted Answer

This is correct. Inheritance can be limited to specific types of child objects in order to provide more granular control over permissions.

Question 8

What special identity group is used when a user accesses an FTP server that doesn't require user account logon?​
A) ​IIS_IUSR
B) ​Anonymous logon
C) ​Everyone
D) ​Domain Users

Accepted Answer

When a user accesses an FTP server that does not require user account logon, they are typically authenticated as an anonymous user. Therefore, the special identity group used in this scenario is known as the Anonymous logon.

Question 9

Which statement is true regarding the use of the Logon Hours option under a user's account?
A) ​The Logon Hours forces a user to log off during "Logon denied" periods
B) ​Logon Hours can't be changed during weekends
C) ​The Logon Hours can't be used to disconnect a user that has already logged in
D) ​Logon hours can be set for specific days of the month,as well as holidays

Accepted Answer

The Logon Hours feature in Windows environments allows administrators to specify the times that a user account can log on to the network. However, if a user is already logged in when their allowed logon hours end, the system does not automatically force them to log off. This means that while Logon Hours can prevent a user from starting a new session during restricted times, it does not disconnect users who are already logged in when their permitted hours expire.

Question 10

​Select below the built-in group that facilitates anonymous access to web resources by Internet Information Services
A) ​IIS_ANON
B) ​Users
C) ​IIS_IUSRS
D) ​Anonymous logon

Accepted Answer

IIS_IUSRS is the built-in group in Windows that facilitates anonymous access to web resources by Internet Information Services (IIS). This group contains the user accounts that are used by IIS worker processes to access and serve web content, allowing for anonymous web access.

Question 11

Which special identity group specifically includes any user account (except the Guest)logged into a computer or domain with a valid username and password?
A) ​Anonymous Logon
B) ​Authenticated Users
C) ​Everyone
D) ​System

Accepted Answer

Authenticated Users includes any user account that has logged into a computer or domain with a valid username and password, except for the Guest account. The other options are not as specific to logged-in users.

Question 12

How can the output of a command be redirected to a file instead of being displayed on screen?​
A) Type the > character followed by the file name at the end of the command
B) Use the -out option
C) ​Place the output file in { } brackets.
D) ​Add "echo file" at the end of the command.

Accepted Answer

To redirect the output of a command to a file, we can use the > character followed by the desired file name. This will send the output to the specified file instead of displaying it on screen.

Question 13

Select the special character below that can't be used within a username:​
A) ​!
B) ​#
C) ​.
D) ​?

Accepted Answer

Special characters like "!" (A), "#" (B), and "." (C) are often allowed in usernames across various platforms. However, "?" (D) is typically not permitted because it is a reserved character in many programming and query languages, potentially causing issues in URLs, command lines, or scripts where usernames might be used.

Question 14

By default,the Windows password policy requires a minimum password of what length?​
A) ​4 characters
B) ​6 characters
C) ​7 characters
D) ​9 characters

Accepted Answer

The default minimum password length in Windows is 7 characters. This setting is part of the security policies to ensure a basic level of password complexity and security.

Question 15

What is a downlevel user logon name used for?​
A) ​Logging into older Windows OSs or using older Windows applications
B) ​Assigning access to lower security shared folders
C) ​Logging into servers further down in the domain structure
D) ​Logging into servers that are marked as "Down" in Server Manager

Accepted Answer

A downlevel user logon name is used for logging into older Windows operating systems or using older Windows applications. It allows users to log in to systems that may not support newer authentication methods.

Question 16

The default location for computer accounts that are created automatically after joining the domain can be changed using which command?​
A) ​netdom computer account location
B) ​redircmp
C) ​Add-Computer -OU
D) ​djoin OU

Accepted Answer

The "redircmp" command can be used to redirect the default location for newly created computer accounts to a specified organizational unit (OU). The other options either do not exist or do not accomplish this specific task.

Question 17

Which of the following statements is true regarding the built-in Guest account?
A) ​After Windows installation,the Guest account is enabled by default
B) ​The Guest account requires a password
C) ​The Guest account should be renamed if it will be used
D) ​The Guest account is not included in the Everyone group

Accepted Answer

The Guest account, by default, is disabled and does not require a password. It is recommended to rename it if it will be used for better security. It is indeed included in the Everyone group, making statement D incorrect.

Question 18

When creating a new user,the "User cannot change password" option can't be used in conjunction with what other option?​
A) ​Password never expires
B) ​Account is disabled
C) ​User logon name (Pre-Windows 2000)
D) ​User must change password at next logon

Accepted Answer

The "User cannot change password" option cannot be used in conjunction with "User must change password at next logon". If the user account is set to "User must change password at next logon", the user is required to change their password and therefore the option to prevent them from changing it is not compatible.

Question 19

Select the true statement regarding the conversion of group scope:​
A) ​Universal groups that are members of other universal groups can be converted to domain local groups
B) ​Universal groups can be members of global groups
C) ​Domain local groups can be converted to universal,as long as the domain local group does not contain other domain local groups
D) ​Global groups can't be converted to universal groups

Accepted Answer

Domain local groups can be converted to universal groups as long as the domain local group does not contain other domain local groups. Option A is incorrect because universal groups cannot be members of other universal groups. Option B is incorrect because global groups cannot be members of other global groups. Option D is incorrect because global groups can be converted to universal groups.

Question 20

A user's profile is stored in what directory on a local computer by default?​
A) ​C:/Documents and Settings
B) ​C:/System32/Users
C) ​C:/System32/Profiles
D) ​C:/Users

Accepted Answer

User profiles are stored in the C:/Users directory by default in Windows operating systems. The other options listed are not the default directory for user profiles.

Quiz 7: Managing Ous and Active Directory Accounts

The Administrator account should not be re-named,but should at least used a secure password.

When creating a new user,the "User must change password at next logon" option is enabled by default.

After a template account has been created,what can be done to ensure that the template account does not pose a security risk?

A valid comma separated value file that can be imported using csvde must have what option below on the first line?

An explicit "allow" permission will override an inherited "deny" permission.

Information within an OU can be hidden using permissions,and administration of an OU can be delegated to a non-administrative account.

Permission inheritance can be configured such that permissions are only inherited by specific types of child object types.

What special identity group is used when a user accesses an FTP server that doesn't require user account logon?

Which statement is true regarding the use of the Logon Hours option under a user's account?

Select below the built-in group that facilitates anonymous access to web resources by Internet Information Services

Which special identity group specifically includes any user account (except the Guest) logged into a computer or domain with a valid username and password?

How can the output of a command be redirected to a file instead of being displayed on screen?

Select the special character below that can't be used within a username:

By default,the Windows password policy requires a minimum password of what length?

What is a downlevel user logon name used for?

The default location for computer accounts that are created automatically after joining the domain can be changed using which command?

Which of the following statements is true regarding the built-in Guest account?

When creating a new user,the "User cannot change password" option can't be used in conjunction with what other option?

Select the true statement regarding the conversion of group scope:

A user's profile is stored in what directory on a local computer by default?