Question 1

The part of the SID that's unique for each Active Directory object

Accepted Answer

A) Forest root domain 
B) directory partition 
C) intrasite replication 
D) One-way trust 
E) LDAP
F)Operations master
G)relative identifier
H)security principals
I)user principal name (UPN) 
A) Forest root domain 
B) directory partition 
C) intrasite replication 
D) One-way trust 
E) LDAP
F)Operations master
G)relative identifier
H)security principals
I)user principal name (UPN) G

Question 2

What directory partition contains information needed to define Active Directory objects and object attributes for all domains in the forest?

Accepted Answer

A) Schema directory partition 
B) Global Catalog partition 
C) Application directory partition 
D) Configuration partition 
A) Schema directory partition 
B) Global Catalog partition 
C) Application directory partition 
D) Configuration partition A

Question 3

The user "TestUserA" has been added to an objects DACL and assigned the Allow Full control permission.However,"TestUserA" has inherited the Deny Full Control permission for the object from its parent container.What is "TestUserA"'s effective permissions?

Accepted Answer

A) TestUserA has Full Control permissions 
B) TestUserA has no permissions due to Deny Full Control 
C) TestUserA is given default permissions for the object because Full Control and Deny Full Control cancel each other out 
D) This can't be done because conflicting permissions are not allowed in an object's DACL 
A) TestUserA has Full Control permissions 
B) TestUserA has no permissions due to Deny Full Control 
C) TestUserA is given default permissions for the object because Full Control and Deny Full Control cancel each other out 
D) This can't be done because conflicting permissions are not allowed in an object's DACL A

Question 4

Which of the following statements about operations master roles is correct?

Accepted Answer

A) By default,the Infrastructure master is chosen randomly per domain 
B) There can be multiple schema masters per domain 
C) The RID Master is responsible for providing backward compatibility with NT domain controllers 
D) There is only one domain naming master per forest,which must be available whenever domains are added,deleted,or renamed. 
A) By default,the Infrastructure master is chosen randomly per domain 
B) There can be multiple schema masters per domain 
C) The RID Master is responsible for providing backward compatibility with NT domain controllers 
D) There is only one domain naming master per forest,which must be available whenever domains are added,deleted,or renamed.

Question 5

Explicit permissions never override inherited permissions.

Accepted Answer

A) True 
 B)False

Question 6

Which of the following is not a valid operations master role?

Accepted Answer

A) Schema master 
B) Infrastructure master 
C) User management master 
D) RID master 
A) Schema master 
B) Infrastructure master 
C) User management master 
D) RID master

Question 7

To verify who has been delegated control of an OU,you must ____.

Accepted Answer

A) use the dsview /delegated command 
B) be the owner of the OU 
C) view the OU's permissions 
D) be on the original domain controller where permission was delegated 
A) use the dsview /delegated command 
B) be the owner of the OU 
C) view the OU's permissions 
D) be on the original domain controller where permission was delegated

Question 8

Which of the following is not a valid directory partition type?

Accepted Answer

A) Domain directory partition 
B) Schema directory partition 
C) Extended directory partition 
D) Global catalog partition 
A) Domain directory partition 
B) Schema directory partition 
C) Extended directory partition 
D) Global catalog partition

Question 9

What does ISTG stand for?

Accepted Answer

Inter-Site

Question 10

What can you do to reduce the delay caused by authentication referral?

Accepted Answer

Create a s

Question 11

A Discretionary access control list (DACL)____.

Accepted Answer

A) defines the settings for auditing access to an object 
B) only applies to users accessing resources from a dialup connection 
C) is a list of security principals,with each having a set of permissions that define access to the object 
D) can only be edited by the object owner 
A) defines the settings for auditing access to an object 
B) only applies to users accessing resources from a dialup connection 
C) is a list of security principals,with each having a set of permissions that define access to the object 
D) can only be edited by the object owner

Question 12

Match a term below to the following description
The process for replicating Active Directory objects in which changes to the database can occur on any domain controller and are propagated,or replicated,to all other domain controllers.

Accepted Answer

A) Multimaster replication 
B) Intersite replication 
C) Intrasite replication 
D) Database replication 
A) Multimaster replication 
B) Intersite replication 
C) Intrasite replication 
D) Database replication

Question 13

A(n)____ is a one-way or two-way nontransitive trust between two domains that aren't in the same forest

Accepted Answer

A) External trust 
B) Shortcut trust 
C) Forest Trust 
D) Outsite trust 
A) External trust 
B) Shortcut trust 
C) Forest Trust 
D) Outsite trust

Question 14

The first domain created in a new forest

Accepted Answer

A) Forest root domain 
B) directory partition 
C) intrasite replication 
D) One-way trust 
E) LDAP
F)Operations master
G)relative identifier
H)security principals
I)user principal name (UPN) 
A) Forest root domain 
B) directory partition 
C) intrasite replication 
D) One-way trust 
E) LDAP
F)Operations master
G)relative identifier
H)security principals
I)user principal name (UPN)

Question 15

The _________________________ is a directory partition and contains the most commonly accessed object attributes to facilitate object searches and user logons across domains.

Accepted Answer

global cat

Question 16

A schema can be changed by an administrator or an application to best suit an organization's needs.

Accepted Answer

A) True 
 B)False

Question 17

What service most commonly makes use of an application directory partition for it's database?

Accepted Answer

The answer of What service most commonly makes use of...

Question 18

Which operations master role is responsible for ensuring that changes made to object names in one domain are updated in references to these objects in other domains?

Accepted Answer

A) Schema master 
B) Infrastructure master 
C) Domain naming master 
D) RID master 
A) Schema master 
B) Infrastructure master 
C) Domain naming master 
D) RID master

Question 19

A process called ____ runs on every domain controller to determine the replication topology which defines the domain controller path that Active Directory changes flow through.

Accepted Answer

A) Replication 
B) AD Route 
C) Knowledge Consistency Checker (KC
C)  
D) trust relationship 
A) Replication 
B) AD Route 
C) Knowledge Consistency Checker (KC
C)  
D) trust relationship

Question 20

What MMC do you use to create OUs?

Accepted Answer

Active Dir

The part of the SID that's unique for each Active Directory object

What directory partition contains information needed to define Active Directory objects and object attributes for all domains in the forest?

The user "TestUserA" has been added to an objects DACL and assigned the Allow Full control permission.However,"TestUserA" has inherited the Deny Full Control permission for the object from its parent container.What is "TestUserA"'s effective permissions?

Which of the following statements about operations master roles is correct?

Explicit permissions never override inherited permissions.

Which of the following is not a valid operations master role?

To verify who has been delegated control of an OU,you must ____.

Which of the following is not a valid directory partition type?

What does ISTG stand for?

What can you do to reduce the delay caused by authentication referral?

A Discretionary access control list (DACL)____.

Match a term below to the following description The process for replicating Active Directory objects in which changes to the database can occur on any domain controller and are propagated,or replicated,to all other domain controllers.

A(n)____ is a one-way or two-way nontransitive trust between two domains that aren't in the same forest

The first domain created in a new forest

The _________________________ is a directory partition and contains the most commonly accessed object attributes to facilitate object searches and user logons across domains.

A schema can be changed by an administrator or an application to best suit an organization's needs.

What service most commonly makes use of an application directory partition for it's database?

Which operations master role is responsible for ensuring that changes made to object names in one domain are updated in references to these objects in other domains?

A process called ____ runs on every domain controller to determine the replication topology which defines the domain controller path that Active Directory changes flow through.

What MMC do you use to create OUs?

Introducing Windows Server 2008

Installing Windows Server 2008

Introducing Active Directory

Account Management

Windows File and Print Services

Configuring Group Policy

Introduction to Windows Networking

Configuring DNS for Active Directory

Configuring and Maintaining the Active Directory Infrastructure

Active Directory Certificate Services

Additional Active Directory Server Roles

Server Management and Monitoring

Filters

Exam 4: Active Directory Design and Security Concepts

The part of the SID that's unique for each Active Directory object

What directory partition contains information needed to define Active Directory objects and object attributes for all domains in the forest?

The user "TestUserA" has been added to an objects DACL and assigned the Allow Full control permission.However,"TestUserA" has inherited the Deny Full Control permission for the object from its parent container.What is "TestUserA"'s effective permissions?

Which of the following statements about operations master roles is correct?

Explicit permissions never override inherited permissions.

Which of the following is not a valid operations master role?

To verify who has been delegated control of an OU,you must ____.

Which of the following is not a valid directory partition type?

What does ISTG stand for?

What can you do to reduce the delay caused by authentication referral?

A Discretionary access control list (DACL)____.

Match a term below to the following description The process for replicating Active Directory objects in which changes to the database can occur on any domain controller and are propagated,or replicated,to all other domain controllers.

A(n)____ is a one-way or two-way nontransitive trust between two domains that aren't in the same forest

The first domain created in a new forest

The _________________________ is a directory partition and contains the most commonly accessed object attributes to facilitate object searches and user logons across domains.

A schema can be changed by an administrator or an application to best suit an organization's needs.

What service most commonly makes use of an application directory partition for it's database?

Which operations master role is responsible for ensuring that changes made to object names in one domain are updated in references to these objects in other domains?

A process called ____ runs on every domain controller to determine the replication topology which defines the domain controller path that Active Directory changes flow through.

What MMC do you use to create OUs?

Introducing Windows Server 2008

Installing Windows Server 2008

Introducing Active Directory

Account Management

Windows File and Print Services

Configuring Group Policy

Introduction to Windows Networking

Configuring DNS for Active Directory

Configuring and Maintaining the Active Directory Infrastructure

Active Directory Certificate Services

Additional Active Directory Server Roles

Server Management and Monitoring

Filters