Exam 12: Additional Active Directory Server Roles

A ____________________ trust is inherently a one-way trust,but a two-way trust could be formed simply by creating a trust in both directions.

Which of the following is true of AD LDS?

What type of DNS record is used to access the AD RMS service?

AD LDS instances containing replicas of directory partitions are referred to as this term.

MATCHING -A trust between two networks using AD FS

MATCHING -Web servers that host an AD FS Web Agent

A new employee,Alice,has been hired to work at a branch office configured with a RODC.This RODC connects to a DC over a WAN link back at the head office.Just as Alice is about to log onto her machine for the first time,she finds that she is unable to authenticate despite using the correct user name and password given to her. Other users in the branch office can log in fine,but Alice cannot.What is most likely the issue?

You work for the Example.com organization.Last week,a domain member server was installed at a brand new branch office.However,this server was meant to become an RODC for the branch office.In order to ease the installation,you have delegated installation to the user smantha1. You have received an e-mail from smantha1 stating that she has been unable to install the RODC role.You find that you have correctly configured the computer account and smantha1 is the user designated as being able to join the computer account to the domain.What is most likely the issue?

When using the Web SSO design,a user first attempts to access an application on an AD FS-enabled web server.He or she is then redirected to the AD LDS logon page.

MATCHING -An RODC installation method that doesn't require domain administrator credentials

If the forest functional level is not set at Windows Server 2008,you must run this command before installing the RODC.

This is an AD FS Web agent that handles security tokens using claims.

MATCHING -A collection of attribute data used to specify domain objects that aren't replicated to RODCs,thereby increasing the security of sensitive information

Which AD RMS administrator role exists for the purpose of viewing RMS-related logs and reports?

You can configure administrator role separation from this command-line utility.

Certificates are required by federation servers,federation server proxies,and ADFS enabled Web servers.

Publication of an AD RMS-protected document requires the user authoring the document to acquire a rights account certificate (RAC)and a ....

This AD FS design involves a network with two Active Directory forests.One forest,located in the perimeter network,is considered the resource partner.The second forest,located in the internal network is the account partner.

A web server that can host the claims-aware agent or the Windows token-based agent role service is called a…

Installing DNS on an RODC creates a…