Question 1

The part of the SID that's unique for each Active Directory object

Accepted Answer

A)  Forest root domain
B)  directory partition
C)  intrasite replication
D)  One-way trust
E)  LDAPF) Operations masterG) relative identifierH) security principalsI) user principal name (UPN)  G

Question 2

What directory partition contains information needed to define Active Directory objects and object attributes for all domains in the forest?

Accepted Answer

A)  Schema directory partition
B)  Global Catalog partition
C)  Application directory partition
D)  Configuration partition A

Question 3

The user "TestUserA" has been added to an objects DACL and assigned the Allow Full control permission.However,"TestUserA" has inherited the Deny Full Control permission for the object from its parent container.What is "TestUserA"'s effective permissions?

Accepted Answer

A)  TestUserA has Full Control permissions
B)  TestUserA has no permissions due to Deny Full Control
C)  TestUserA is given default permissions for the object because Full Control and Deny Full Control cancel each other out
D)  This can't be done because conflicting permissions are not allowed in an object's DACL A

Question 4

Which of the following statements about operations master roles is correct?

Accepted Answer

A)  By default,the Infrastructure master is chosen randomly per domain
B)  There can be multiple schema masters per domain
C)  The RID Master is responsible for providing backward compatibility with NT domain controllers
D)  There is only one domain naming master per forest,which must be available whenever domains are added,deleted,or renamed.

Question 5

Explicit permissions never override inherited permissions.

Accepted Answer

A) True 
 B)False

Question 6

Which of the following is not a valid operations master role?

Accepted Answer

A)  Schema master
B)  Infrastructure master
C)  User management master
D)  RID master

Question 7

To verify who has been delegated control of an OU,you must ____.

Accepted Answer

A)  use the dsview /delegated command
B)  be the owner of the OU
C)  view the OU's permissions
D)  be on the original domain controller where permission was delegated

Question 8

Which of the following is not a valid directory partition type?

Accepted Answer

A)  Domain directory partition
B)  Schema directory partition
C)  Extended directory partition
D)  Global catalog partition

Question 9

What does ISTG stand for?

Accepted Answer

The answer of What does ISTG stand for?...

Question 10

What can you do to reduce the delay caused by authentication referral?

Accepted Answer

The answer of What can you do to reduce the...

Question 11

A Discretionary access control list (DACL)____.

Accepted Answer

A)  defines the settings for auditing access to an object
B)  only applies to users accessing resources from a dialup connection
C)  is a list of security principals,with each having a set of permissions that define access to the object
D)  can only be edited by the object owner

Question 12

Match a term below to the following description
The process for replicating Active Directory objects in which changes to the database can occur on any domain controller and are propagated,or replicated,to all other domain controllers.

Accepted Answer

A)  Multimaster replication
B)  Intersite replication
C)  Intrasite replication
D)  Database replication

Question 13

A(n)____ is a one-way or two-way nontransitive trust between two domains that aren't in the same forest

Accepted Answer

A)  External trust
B)  Shortcut trust
C)  Forest Trust
D)  Outsite trust

Question 14

The first domain created in a new forest

Accepted Answer

A)  Forest root domain
B)  directory partition
C)  intrasite replication
D)  One-way trust
E)  LDAPF) Operations masterG) relative identifierH) security principalsI) user principal name (UPN)

Question 15

The _________________________ is a directory partition and contains the most commonly accessed object attributes to facilitate object searches and user logons across domains.

Accepted Answer

The answer of The _________________________ is a directory partition and...

Question 16

A schema can be changed by an administrator or an application to best suit an organization's needs.

Accepted Answer

A) True 
 B)False

Question 17

What service most commonly makes use of an application directory partition for it's database?

Accepted Answer

The answer of What service most commonly makes use of...

Question 18

Which operations master role is responsible for ensuring that changes made to object names in one domain are updated in references to these objects in other domains?

Accepted Answer

A)  Schema master
B)  Infrastructure master
C)  Domain naming master
D)  RID master

Question 19

A process called ____ runs on every domain controller to determine the replication topology which defines the domain controller path that Active Directory changes flow through.

Accepted Answer

A)  Replication
B)  AD Route
C)  Knowledge Consistency Checker (KC
C)  
D)  trust relationship

Question 20

What MMC do you use to create OUs?

Accepted Answer

The answer of What MMC do you use to create...

Exam 4: Active Directory Design and Security Concepts