Question:* What is an example of a scenario when you would need to rename a domain controller?
Answer: • When replacing computer hardware.
Question:* What group must you be a member of to configure the site link schedule?
Answer: • The Enterprise Admins group in Active Directory.
Question:* What command line tool can you use to manage Domain Trusts?
Answer: • netdom.exe
Question:* With the launch of Windows Server 2003, comes a tool to make trust configuration easier. What is it?
Answer: • The Trust Wizard.
Question:* Are the different types of trusts set automatically, or must they be set manually?
Answer: • The trusts that need manual configuration are contingent upon how Active Directory is organized, and whether different versions of Windows coexist on the network.
Question:* Your company and its partner want to share files on servers in both of their laboratories. What's the easiest way to make this happen?
Answer: • Set up a Two Way External Trust via Active Directory Domains and Trusts, then setup security groups to share directories.
Question:* You are trying to determine the name of a host but only have the IP Address, what command can you run to finds it's name?
Answer: • ping -a (IP Address)
Question:* An Active Directory Forest is ___________________
Answer: • a collection of different domains connected via two way trusts that don't share the same DNS name space, but share authentication and policy management.
Question:* What kind of trust is a parent-child trust?
Answer: • Two-way trust.
Question:* How much maintenance does the Active Directory database require on a daily basis?
Answer: • None besides backups during ordinary operations.
Question:* What does Windows Time Service use to manage time settings?
Answer: • Network Time Protocol.
Question:* What happens if the global catalog is removed?
Answer: • The domain controller immediately stops advertising in DNS as a global catalog server.
Question:* To protect the Active Directory schema, how should users be managed?
Answer: • Users should only be added when changes to the schema need to be made.
Question:* You are having difficulty with remote domain controllers not syncing. What tool would you use to investigate the problem?
Answer: • Active Directory Domains and Trusts
Question:* What database engine is used to house the Active Directory?
Answer: • JET database
Question:* What is Active Directory's global catalog used for?
Answer: • Forest-wide directory searching and facilitating domain client logons when universal groups are available.
Question:* In the following list, which methods can NOT be used to manage Active Directory tasks?
Answer: • Active Directory Web Interface
Question:* What command line tool can you use to remove and object from the Active Directory
Answer: • dsrm.exe
Question:* If you want to see a list of users from the command line or in a script you would use the ______ utility.
Answer: • dsget.exe
Question:* You are deploying a new web based application that only company personnel will use to submit their hours when out of the office. What Active Directory Service would you deploy to enable login security.
Answer: • Deploy Active Directory Federated Services (FS) via IIS to extend and integrate Windows Login within the application and make it available on the internet.
Question:* An Active Directory Forest comprised of Windows 2008 R2 domain controllers will need to incorporate a Windows 2003 R2 Domain controller. What version level will the Forest function?
Answer: • It will function at the Windows 2003 R2 level.
Question:* Should you log in to your computer as an administrator to complete administrative tasks?
Answer: • No. Use “Run as” to complete them.
Question:* What is KCC?
Answer: • It is the Knowledge Consistency Checker used to generate the replication topology in Active Directory Domains and Trusts.
Question:* What is a NetBIOS name?
Answer: • A legacy naming convention used under Lan Manager.
Question:* When you move the database file, where are registry entries that Ntdsutil.exe edits located?
Answer: • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\
Question:* What is an alternative to disabling administrative and guest accounts on domains for security purposes?
Answer: • Renaming them.
Question:* If you need to change the default file size of the staging folder, where do you change the staging space limit registry entry?
Answer: • HKEY_Local_Machine\System\CurrentControlSet\Services\NtFrs\Parameters
Question:* Which of the following is NOT an Active Directory role?
Answer: • Active Directory Network Object Services
Question:* When is it necessary to manage domain and forest trusts?
Answer: • When your organization needs to collaborate with users or resources in other domains, forest trusts, or realms.
Question:* The Active Directory database is stored in the ______ directory.
Answer: • %windir&\ntds
Question:* What is a Global Catalog?
Answer: • A database of every object in an active directory tree, containing the most frequently used object attributes.
Question:* What best practice ensures that all trust relationships are preserved within a domain?
Answer: • Performing regular backups.
Question:* What benefit is gained from using global or universal groups when specifying permissions on domain directory objects?
Answer: • Permissions are transparent across the system, leaving less opportunities for intrusion.
Question:* What is a DSRM password used for?
Answer: • It is used to log onto a domain controller that has been rebooted into DSRM mode to take its copy of Active Directory off-line.
Question:* Why is documentation one of the most critical aspects of Active Directory security administration?
Answer: • It is essential for security audits.
Question:* Which of the following is NOT a DNS Zone?
Answer: • Internal Lookup Zone
Question:* What two ways can trust relationships be defined?
Answer: • One-way, or two-way.
Question:* What version of Windows Server was the Read Only Domain Controller (RODC) introduced?
Answer: • Windows 2008
Question:* How are multiple sites connected for replication in Active Directory?
Answer: • They are connected by Site Link objects.
Question:* Which one of the following is NOT one of the 5 Operation Master (FSMO) Roles?
Answer: • NTLM Master Role
Question:* What security practice does not involve the configuration of software or hardware?
Answer: • Physical security.
Question:* Five people in Accounting have the need to print checks on a network computer. No one else should have access to this printer. What is the best way to set this up?
Answer: • Include the printer as an object in Active Directory Users and Groups, create a security group of those users who can print to that printer, then give them exclusive rights to print.
Question:* The ADSIEDIT tool is used to:
Answer: • Directly add, delete or modify components in the Active Directory.
Question:* To add a new user via Windows PowerShell you would use the following cmdlet:
Answer: • New-ADUser
Question:* When creating a domain for the first time, what must be configured properly to easily join computers to your domain?
Answer: • DNS Server and services
Question:* What two operations masters roles exist in each forest?
Answer: • The schema master, and the domain naming master.
Question:* What is SYSVOL referring to in the context of Active Directory?
Answer: • The Active Directory SYSVOL shared folder.
Question:* Fred in Marketing needs to share files with his small team on a confidential project. What should you do to help?
Answer: • Create an Active Directory Security Group and assign Fred and his team to it. Create a directory on the file server and give that group exclusive rights to the directory. Share that folder with Fred's team.
Question:* What is Windows Time Service responsible for?
Answer: • Synchronizing the time of all the computers running on the network.
Question:* What is unique about the tasks that operations masters perform?
Answer: • No other domain controllers are permitted to perform them.
Question:* Which of the following protocols are NOT needed for Replication?
Answer: • IRC
Question:* What tool is required to make any changes in Windows Time Service?
Answer: • W32tm.exe
Question:* Should all system state components be backed up together?
Answer: • Yes. It is impossible to back them up otherwise because their relationship is contingent upon each other.
Question:* If you needed to know the default number of days that a domain controller preserves knowledge of a deleted object, how would you find the answer?
Answer: • Check the value of the tombstoneLifetime attribute in the ForestRootDomain object.
Question:* A domain computer is no longer authenticating on the domain. How do you fix the problem?
Answer: • From the computer, remove from the computer from the domain reboot, and rejoin it to the domain
Question:* In relation to backup and restore procedures, what provides a default location for files that must be shared for common access throughout a domain?
Answer: • SYSVOL
Question:* What does it mean when a “trust” exists?
Answer: • The authentication coming from each domain trusts the authentications coming from the other domain.
Question:* Which of the following are NOT a logical component of Active Directory?
Answer: • Branch
Question:* How must drives containing database files, or log files, be formatted?
Answer: • NTFS
Question:* What is Kerberos?
Answer: • A security protocol used for authentication in Active Directory.
Question:* What is LDAP?
Answer: • Lightweight Directory Access Protocol.
Question:* You update a GPO and return to the users computer to see the results but they don't show up. What is the least disruptive way to see the results?
Answer: • Run the command: gpupdate /force
Question:* Which of the following is NOT an Active Directory object?
Answer: • Email Address
Question:* What is used to enable and optimize replication traffic?
Answer: • The Knowledge Consistency Checker.
Question:* You have need to check on a security property in the Systems folder in Active Directory Users and Groups but you are having a hard time finding it.
Answer: • On the View menu check Advanced Features
Question:* What is an OU?
Answer: • Organizational Unit
Question:* A user is complaining that they can't login to the domain because they have tried to login too many times with their password
Answer: • In the Active Directory Users and Computers, find and open the user object, choose the Account tab and unlock the account.
Question:* Why should default users be granted equal rights across the system?
Answer: • Default users are granted varying degrees of rights. Equality in the varied degrees of granted rights reduces the occurrence of discontinuities that may allow security breaches.
Question:* When Windows Server receives a file through replication, or prior to being replicated, where must it be stored?
Answer: • In the staging area.
Question:* A Schema Partition in Active Directory is the:
Answer: • Partition that contains all of the definitions of the objects that can be created in the Active Directory and there rules for creating and managing them.
Question:* You need to remove a large number of user accounts in the Active Directory because of an acquisition. Which utility would you use?
Answer: • LDIFDE
Question:* For which of the following reasons would you NOT deploy a Read Only Domain Controller (RODC)?
Answer: • Marketing tells you they want their own Domain Controller.
Question:* Which virus scanning software is known to cause problems when installed on an Active Directory domain controller?
Answer: • McAfee VirusScan 8.0.
Question:* What policy would you implement to rid the system of LM hashes?
Answer: • “Do Not Store LAN Manager Hash Value on Next Password Change”
Question:* To install a new Active Directory Domain Services (AD DS) Forest you need to be a:
Answer: • A local administrator on the server.
Question:* Which of the following protocols is used for communications in Active Directory Domains and Trusts?
Answer: • SMTP
Question:* What are Group Policies?
Answer: • Group Policies are ways to normalize the behavior of controllable applications and procedures on the domain.
Question:* How many operations masters roles are allocated to each domain?
Answer: • 3
Question:* An application you are installing has a service that needs to run on a server where it will interact and modify other network services and components. How do you set it up?
Answer: • Create a new user in Active Directory Users and Groups. Add the users to the Network Configuration Operators group. Use this account when installing the service on the server where the application is to run.
Question:* How many levels of readiness are allocated for the global catalog?
Answer: • 6
Question:* What do Domain Controllers do?
Answer: • Store the database, maintain the policies and provide the authentication of domain logons
Question:* One can change the Active Directory Path while creation of the Active Directory
Answer: • Yes
Question:* Command to create / run Active Directory Services
Answer: • dcpromo.exe
Question:* Five people in Accounting have the need to print checks on a network computer. No one else should have access to this printer. What is the best way to set this up?
Answer: • Include the printer as an object in Active Directory Users and Groups, create a security group of those users who can print to that printer, then give them exclusive rights to print.
Question:* Which one is NOT FSMO role?
Answer: • Flexible Master
Question:* The Active Directory database is stored in the ______ directory.
Answer: • %windir&\ntds
Question:* If you need to change the default file size of the staging folder, where do you change the staging space limit registry entry?
Answer: • HKEY_Local_Machine\System\CurrentControlSet\Services\NtFrs\Parameters
Question:* Members of which of the following groups can perform actions in multiple domains within a forest?
Answer: • Enterprise Admins
Question:* What does FSMO stand for?
Answer: • Flexible Single Master Operations
Question:* What does the ISTG do?
Answer: • The ISTG is responsible for managing connections between different domain sites.
No comments:
Post a Comment