Question 1

How often is the password for a computer account changed by Active Directory?​

Accepted Answer

A)   ​10 days
B)   ​15 days
C)   ​30 days
D)   ​60 days C

Question 2

What different types of objects can be members of a distribution group?

Accepted Answer

User accounts,contacts,other distribution groups,security groups,and computers can be members of distribution groups.

Question 3

​The Administrator account should not be re-named,but should at least used a secure password.

Accepted Answer

A) True 
 B)False  False

Question 4

What special identity group is used when a user accesses an FTP server that doesn't require user account logon?​

Accepted Answer

A)   ​IIS_IUSR
B)   ​Anonymous logon
C)   ​Everyone
D)   ​Domain Users

Question 5

​An explicit "allow" permission will override an inherited "deny" permission.

Accepted Answer

A) True 
 B)False

Question 6

Which statement is true regarding the use of the Logon Hours option under a user's account?

Accepted Answer

A)   ​The Logon Hours forces a user to log off during "Logon denied" periods
B)   ​Logon Hours can't be changed during weekends
C)   ​The Logon Hours can't be used to disconnect a user that has already logged in
D)   ​Logon hours can be set for specific days of the month,as well as holidays

Question 7

What is a downlevel user logon name used for?​

Accepted Answer

A)   ​Logging into older Windows OSs or using older Windows applications
B)   ​Assigning access to lower security shared folders
C)   ​Logging into servers further down in the domain structure
D)   ​Logging into servers that are marked as "Down" in Server Manager

Question 8

​What is the most typically used group type conversion?

Accepted Answer

A)   ​Distribution group -> security group
B)   ​Security group -> distribution group
C)   ​Universal group -> domain local group
D)   ​Domain local group -> global group

Question 9

How can an administrator enable or disable accounts using the command line?​

Accepted Answer

A)   ​Use the Enable-ADAccount cmdlet
B)   ​Use the Disable-ADAccount cmdlet
C)   ​Use the dsmod user command
D)   ​Use the chmod user command

Question 10

Select the true statement regarding the conversion of group scope:​

Accepted Answer

A)   ​Universal groups that are members of other universal groups can be converted to domain local groups
B)   ​Universal groups can be members of global groups
C)   ​Domain local groups can be converted to universal,as long as the domain local group does not contain other domain local groups
D)   ​Global groups can't be converted to universal groups

Question 11

​The _____________ determines the reach of a group's application in a domain or forest: which security principals in a forest can be group members and to which forest resources a group can be assigned rights or permissions.

Accepted Answer

The answer of ​The _____________ determines the reach of a...

Question 12

Select the special character below that can't be used within a username:​

Accepted Answer

A)   ​!
B)   ​#
C)   ​.
D)   ​?

Question 13

The _____________ cmdlet within PowerShell can be used to rename an object in Active Directory.​

Accepted Answer

The answer of The _____________ cmdlet within PowerShell can be...

Question 14

​Select below the built-in group that facilitates anonymous access to web resources by Internet Information Services

Accepted Answer

A)   ​IIS_ANON
B)   ​Users
C)   ​IIS_IUSRS
D)   ​Anonymous logon

Question 15

In a single domain environment,what is the Microsoft recommended best practice for assigning access to resources?

Accepted Answer

The answer of In a single domain environment,what is the...

Question 16

How can the output of a command be redirected to a file instead of being displayed on screen?​

Accepted Answer

A)   Type the > character followed by the file name at the end of the command
B)   Use the -out option
C)   ​Place the output file in { } brackets.
D)   ​Add "echo file" at the end of the command.

Question 17

​After a template account has been created,what can be done to ensure that the template account does not pose a security risk?

Accepted Answer

A)   ​The account should be placed in an isolated OU
B)   ​A specialized GPO should be applied to the OU the template account is located in,to limit risk
C)   ​The account should be disabled
D)   ​The account should be removed from the "Domain Users" group

Question 18

Permission inheritance can be configured such that permissions are only inherited by specific types of child object types.​

Accepted Answer

A) True 
 B)False

Question 19

When a user leaves a company,why is it preferable to disable the user rather than delete the user?

Accepted Answer

The answer of When a user leaves a company,why is...

Question 20

How does piping work on the command line?

Accepted Answer

The answer of How does piping work on the command...

Exam 7: Managing Ous and Active Directory Accounts

How often is the password for a computer account changed by Active Directory?​

What different types of objects can be members of a distribution group?

​The Administrator account should not be re-named,but should at least used a secure password.

What special identity group is used when a user accesses an FTP server that doesn't require user account logon?​

​An explicit "allow" permission will override an inherited "deny" permission.

Which statement is true regarding the use of the Logon Hours option under a user's account?

What is a downlevel user logon name used for?​

​What is the most typically used group type conversion?

How can an administrator enable or disable accounts using the command line?​

Select the true statement regarding the conversion of group scope:​

​The _____________ determines the reach of a group's application in a domain or forest: which security principals in a forest can be group members and to which forest resources a group can be assigned rights or permissions.

Select the special character below that can't be used within a username:​

The _____________ cmdlet within PowerShell can be used to rename an object in Active Directory.​

​Select below the built-in group that facilitates anonymous access to web resources by Internet Information Services

In a single domain environment,what is the Microsoft recommended best practice for assigning access to resources?

How can the output of a command be redirected to a file instead of being displayed on screen?​

​After a template account has been created,what can be done to ensure that the template account does not pose a security risk?

Permission inheritance can be configured such that permissions are only inherited by specific types of child object types.​

When a user leaves a company,why is it preferable to disable the user rather than delete the user?

How does piping work on the command line?

How often is the password for a computer account changed by Active Directory?

The Administrator account should not be re-named,but should at least used a secure password.

What special identity group is used when a user accesses an FTP server that doesn't require user account logon?

An explicit "allow" permission will override an inherited "deny" permission.

What is a downlevel user logon name used for?

What is the most typically used group type conversion?

How can an administrator enable or disable accounts using the command line?

Select the true statement regarding the conversion of group scope:

The _____________ determines the reach of a group's application in a domain or forest: which security principals in a forest can be group members and to which forest resources a group can be assigned rights or permissions.

Select the special character below that can't be used within a username:

The _____________ cmdlet within PowerShell can be used to rename an object in Active Directory.

Select below the built-in group that facilitates anonymous access to web resources by Internet Information Services

How can the output of a command be redirected to a file instead of being displayed on screen?

After a template account has been created,what can be done to ensure that the template account does not pose a security risk?

Permission inheritance can be configured such that permissions are only inherited by specific types of child object types.