Question 1

Inherited permissions can't be changed or removed without ____.

Accepted Answer

A) using the "Inherited Permissions Modify" tool 
B) having to recreate the object entirely 
C) knowing the object's password 
D) disabling permission inheritance first 
A) using the "Inherited Permissions Modify" tool 
B) having to recreate the object entirely 
C) knowing the object's password 
D) disabling permission inheritance first

Question 2

A domain controller with sole responsibility for certain domain or forestwide functions

Accepted Answer

A) Forest root domain 
B) directory partition 
C) intrasite replication 
D) One-way trust 
E) LDAP
F)Operations master
G)relative identifier
H)security principals
I)user principal name (UPN) 
A) Forest root domain 
B) directory partition 
C) intrasite replication 
D) One-way trust 
E) LDAP
F)Operations master
G)relative identifier
H)security principals
I)user principal name (UPN)

Question 3

What term best fits this description:
An open-standard security protocol used to secure authentication and identification between parties in a network

Accepted Answer

The answer of What term best fits this description:
An open-standard...

Question 4

An Active Directory object that can be assigned permissions or rights to Active Directory objects and network resources

Accepted Answer

A) Forest root domain 
B) directory partition 
C) intrasite replication 
D) One-way trust 
E) LDAP
F)Operations master
G)relative identifier
H)security principals
I)user principal name (UPN) 
A) Forest root domain 
B) directory partition 
C) intrasite replication 
D) One-way trust 
E) LDAP
F)Operations master
G)relative identifier
H)security principals
I)user principal name (UPN)

Question 5

_________________________ defines how permissions are transmitted from a parent object to a child object.

Accepted Answer

permission inheritan

Question 6

A dedicated forest root domain contains only the forestwide administrative accounts and domain controllers needed to run the forestwide operations master roles.No additional OUs or server roles are installed.

Accepted Answer

A) True 
 B)False

Question 7

A user logon name that follows the format username@domain

Accepted Answer

A) Forest root domain 
B) directory partition 
C) intrasite replication 
D) One-way trust 
E) LDAP
F)Operations master
G)relative identifier
H)security principals
I)user principal name (UPN) 
A) Forest root domain 
B) directory partition 
C) intrasite replication 
D) One-way trust 
E) LDAP
F)Operations master
G)relative identifier
H)security principals
I)user principal name (UPN)

Question 8

The group "TestGroup" has been added to an objects DACL and assigned the Allow Full control permission."TestUserA" is a member of "TestGroup",which has been assigned Deny Write permission for the object.What is "TestUserA"'s effective permissions?

Accepted Answer

A) TestUserA has no permissions to the object because he has been denied write access. 
B) TestUserA can do anything that Full Control would allow him to do,except write to the object. 
C) TestUserA is part of TestGroup,therefore TestUserA has Full Control permissions regardless of the Deny Write permission. 
D) This can't happen because conflicting permissions are not allowed in an object's DACL. 
A) TestUserA has no permissions to the object because he has been denied write access. 
B) TestUserA can do anything that Full Control would allow him to do,except write to the object. 
C) TestUserA is part of TestGroup,therefore TestUserA has Full Control permissions regardless of the Deny Write permission. 
D) This can't happen because conflicting permissions are not allowed in an object's DACL.

Question 9

The Lightweight Directory Access Protocol is based on which of the following technologies?

Accepted Answer

A) X.509 
B) X.500 
C) X.405 
D) X.900 
A) X.509 
B) X.500 
C) X.405 
D) X.900

Question 10

A section of an Active Directory database stored on a domain controller's hard drive

Accepted Answer

A) Forest root domain 
B) directory partition 
C) intrasite replication 
D) One-way trust 
E) LDAP
F)Operations master
G)relative identifier
H)security principals
I)user principal name (UPN) 
A) Forest root domain 
B) directory partition 
C) intrasite replication 
D) One-way trust 
E) LDAP
F)Operations master
G)relative identifier
H)security principals
I)user principal name (UPN)

Question 11

Which operations master role is responsible for providing backwards compatibility with Windows NT servers configured as Windows NT backup domain controllers or member servers?

Accepted Answer

A) PDC emulator master 
B) RID master 
C) Domain naming master 
D) Schema master 
A) PDC emulator master 
B) RID master 
C) Domain naming master 
D) Schema master

Question 12

Each entry in the Discretionary access control list is referred to as an ACE.What does ACE stand for?

Accepted Answer

A) Acceptable Control Extension 
B) Access Control Extension 
C) Access Control Entry 
D) Applied Control Entry 
A) Acceptable Control Extension 
B) Access Control Extension 
C) Access Control Entry 
D) Applied Control Entry

Question 13

All computers assigned an address in a subnet require a router to communicate with one another.

Accepted Answer

A) True 
 B)False

Question 14

A trust relationship in which one domain trusts another,but the reverse is not true

Accepted Answer

A) Forest root domain 
B) directory partition 
C) intrasite replication 
D) One-way trust 
E) LDAP
F)Operations master
G)relative identifier
H)security principals
I)user principal name (UPN) 
A) Forest root domain 
B) directory partition 
C) intrasite replication 
D) One-way trust 
E) LDAP
F)Operations master
G)relative identifier
H)security principals
I)user principal name (UPN)

Question 15

Which of the following is not an advantage of running a dedicated forest root domain?

Accepted Answer

A) security 
B) manageability 
C) flexibility 
D) reliability 
A) security 
B) manageability 
C) flexibility 
D) reliability

Question 16

A user principal name (UPN)follows the format ____________________.

Accepted Answer

The answer of A user principal name (UPN)follows the format...

Question 17

What MMC is used to create sites?

Accepted Answer

Active Dir

Question 18

What term best fits this description:
A trust in which both domains in the relationship trust each other,so users from both domains can access resources in the other domain.

Accepted Answer

The answer of What term best fits this description:
A trust...

Question 19

What can you do to integrate user authentication between Linux and Active Directory?

Accepted Answer

Create a r

Question 20

A protocol that runs over TCP/IP and is designed to facilitate access to directory services and directory objects

Accepted Answer

A) Forest root domain 
B) directory partition 
C) intrasite replication 
D) One-way trust 
E) LDAP
F)Operations master
G)relative identifier
H)security principals
I)user principal name (UPN) 
A) Forest root domain 
B) directory partition 
C) intrasite replication 
D) One-way trust 
E) LDAP
F)Operations master
G)relative identifier
H)security principals
I)user principal name (UPN)

Inherited permissions can't be changed or removed without ____.

A domain controller with sole responsibility for certain domain or forestwide functions

What term best fits this description: An open-standard security protocol used to secure authentication and identification between parties in a network

An Active Directory object that can be assigned permissions or rights to Active Directory objects and network resources

_________________________ defines how permissions are transmitted from a parent object to a child object.

A dedicated forest root domain contains only the forestwide administrative accounts and domain controllers needed to run the forestwide operations master roles.No additional OUs or server roles are installed.

A user logon name that follows the format username@domain

The group "TestGroup" has been added to an objects DACL and assigned the Allow Full control permission."TestUserA" is a member of "TestGroup",which has been assigned Deny Write permission for the object.What is "TestUserA"'s effective permissions?

The Lightweight Directory Access Protocol is based on which of the following technologies?

A section of an Active Directory database stored on a domain controller's hard drive

Which operations master role is responsible for providing backwards compatibility with Windows NT servers configured as Windows NT backup domain controllers or member servers?

Each entry in the Discretionary access control list is referred to as an ACE.What does ACE stand for?

All computers assigned an address in a subnet require a router to communicate with one another.

A trust relationship in which one domain trusts another,but the reverse is not true

Which of the following is not an advantage of running a dedicated forest root domain?

A user principal name (UPN)follows the format ____________________.

What MMC is used to create sites?

What term best fits this description: A trust in which both domains in the relationship trust each other,so users from both domains can access resources in the other domain.

What can you do to integrate user authentication between Linux and Active Directory?

A protocol that runs over TCP/IP and is designed to facilitate access to directory services and directory objects

Introducing Windows Server 2008

Installing Windows Server 2008

Introducing Active Directory

Account Management

Windows File and Print Services

Configuring Group Policy

Introduction to Windows Networking

Configuring DNS for Active Directory

Configuring and Maintaining the Active Directory Infrastructure

Active Directory Certificate Services

Additional Active Directory Server Roles

Server Management and Monitoring

Filters

Exam 4: Active Directory Design and Security Concepts

Inherited permissions can't be changed or removed without ____.

A domain controller with sole responsibility for certain domain or forestwide functions

What term best fits this description: An open-standard security protocol used to secure authentication and identification between parties in a network

An Active Directory object that can be assigned permissions or rights to Active Directory objects and network resources

_________________________ defines how permissions are transmitted from a parent object to a child object.

A dedicated forest root domain contains only the forestwide administrative accounts and domain controllers needed to run the forestwide operations master roles.No additional OUs or server roles are installed.

A user logon name that follows the format username@domain

The group "TestGroup" has been added to an objects DACL and assigned the Allow Full control permission."TestUserA" is a member of "TestGroup",which has been assigned Deny Write permission for the object.What is "TestUserA"'s effective permissions?

The Lightweight Directory Access Protocol is based on which of the following technologies?

A section of an Active Directory database stored on a domain controller's hard drive

Which operations master role is responsible for providing backwards compatibility with Windows NT servers configured as Windows NT backup domain controllers or member servers?

Each entry in the Discretionary access control list is referred to as an ACE.What does ACE stand for?

All computers assigned an address in a subnet require a router to communicate with one another.

A trust relationship in which one domain trusts another,but the reverse is not true

Which of the following is not an advantage of running a dedicated forest root domain?

A user principal name (UPN)follows the format ____________________.

What MMC is used to create sites?

What term best fits this description: A trust in which both domains in the relationship trust each other,so users from both domains can access resources in the other domain.

What can you do to integrate user authentication between Linux and Active Directory?

A protocol that runs over TCP/IP and is designed to facilitate access to directory services and directory objects

Introducing Windows Server 2008

Installing Windows Server 2008

Introducing Active Directory

Account Management

Windows File and Print Services

Configuring Group Policy

Introduction to Windows Networking

Configuring DNS for Active Directory

Configuring and Maintaining the Active Directory Infrastructure

Active Directory Certificate Services

Additional Active Directory Server Roles

Server Management and Monitoring

Filters