Question 1

When selective authentication is implemented on a forest trust, you need to grant the ____ permission on each server or computer where access is granted.

Accepted Answer

A)   Allowed to Authenticate
B)   Replace Token
C)   Run as Service
D)   Act as Part of the Operating System A

Question 2

Forest trusts are possible once the forest functional level has been raised to ____.

Accepted Answer

A)   Windows NT
B)   Windows Server 2000 Native
C)   Windows Server 2003
D)   Windows Server 2008 C

Question 3

How is the migration of objects handled between domains?

Accepted Answer

Migration of objects is handled a little differently depending on whether the objects are being migrated between domains in separate forests or migrated between domains in the same forest. These two types of migrations are referred to as interforest and intraforest migrations.
Interforest migration. Objects are migrated between domains in separate forests.
Intraforest migration. Objects are migrated between domains in the same forest.

Question 4

You can easily determine what servers hold all the roles by opening a command prompt and entering the following command: ____

Accepted Answer

A)   netdom query trust
B)   netdom query fsmo
C)   netdom query pdc
D)   netdom query dc

Question 5

For most applications, a single-domain, single-forest design will work.

Accepted Answer

A) True 
 B)False

Question 6

A(n) _________________________ is used within a domain to organize objects.

Accepted Answer

The answer of A(n) _________________________ is used within a domain...

Question 7

A ____ trust creates an explicit trust relationship between two domains and is not transferred to any other domains.

Accepted Answer

A)   non-transitive
B)   transitive
C)   one-way
D)   foreign

Question 8

The ____ for Active Directory defines the objects that can be created in Active Directory.

Accepted Answer

A)   schema
B)   directory
C)   database
D)   template

Question 9

When you see the forest functional level is Windows Server 2008, you also know that every domain and domain controller in the forest must be running at least ____.

Accepted Answer

A)   Windows NT
B)   Windows Server 2000 Native
C)   Windows Server 2003
D)   Windows Server 2008

Question 10

If you want users or groups to be able to access a resource using SID history, you must enable SID filtering.

Accepted Answer

A) True 
 B)False

Question 11

Explain the difference between autonomy and isolation.

Accepted Answer

The answer of Explain the difference between autonomy and isolation....

Question 12

Fine-grained password and account ____ policies are a significant addition to Windows Server 2008.

Accepted Answer

A)   lockout
B)   length
C)   timeout
D)   login

Question 13

Match between columns
                        Premises: Provides independent and exclusive control of a resource
Is an administrative boundary and holds a database of objects
Is used to uniquely identify an object in a domain
Can be used to migrate objects from one domain to another within the same forest or between different forests
Is a listing of all the objects in the entire forest
Provides independence, allowing a department or group to make decisions based on their own needs within the organization
Allows a user to log on with an account that looks like an e-mail address
Includes one or more domains with a common namespace
Is the tool used to automate the management and administration of users and computers in the domain

Accepted Answer

The Answer of Active Directory domain and ADMT and global is...

Question 14

Beyond autonomy, what are two other reasons to create separate domains?

Accepted Answer

The answer of Beyond autonomy, what are two other reasons...

Question 15

ADMT v3.1 should be installed and run on a Windows Server 2008 domain controller in the ____________________ domain.

Accepted Answer

The answer of ADMT v3.1 should be installed and run...

Question 16

____ prevents the risk of an attacker obtaining SID history data by blocking the use of any SIDs that did not originate in the same domain.

Accepted Answer

A)   SID blocking
B)   SID selecting
C)   SID masking
D)   SID filtering

Question 17

Discuss what happens when SID filtering is disabled.

Accepted Answer

The answer of Discuss what happens when SID filtering is...

Question 18

The ____ authentication option allows Windows to automatically authenticate any users in another forest to access resources in the local forest.

Accepted Answer

A)   domain-wide
B)   tree-wide
C)   schema-wide
D)   forest-wide

Question 19

____ is an Active Directory preparation tool that can modify the schema by adding objects and properties needed to support Windows Server 2008 domain controllers.

Accepted Answer

A)   ADSIEdit
B)   ADPrep
C)   DCPromo
D)   GPUpdate

Question 20

A domain functional level or forest functional level can be raised and then undone (or lowered) as necessary.

Accepted Answer

A) True 
 B)False

Exam 1: Designing Active Directory Domain Services

When selective authentication is implemented on a forest trust, you need to grant the ____ permission on each server or computer where access is granted.

Forest trusts are possible once the forest functional level has been raised to ____.

How is the migration of objects handled between domains?

You can easily determine what servers hold all the roles by opening a command prompt and entering the following command: ____

For most applications, a single-domain, single-forest design will work.

A(n) _________________________ is used within a domain to organize objects.

A ____ trust creates an explicit trust relationship between two domains and is not transferred to any other domains.

The ____ for Active Directory defines the objects that can be created in Active Directory.

When you see the forest functional level is Windows Server 2008, you also know that every domain and domain controller in the forest must be running at least ____.

If you want users or groups to be able to access a resource using SID history, you must enable SID filtering.

Explain the difference between autonomy and isolation.

Fine-grained password and account ____ policies are a significant addition to Windows Server 2008.

Match each statement with the correct term below.

Beyond autonomy, what are two other reasons to create separate domains?

ADMT v3.1 should be installed and run on a Windows Server 2008 domain controller in the ____________________ domain.

____ prevents the risk of an attacker obtaining SID history data by blocking the use of any SIDs that did not originate in the same domain.

Discuss what happens when SID filtering is disabled.

The ____ authentication option allows Windows to automatically authenticate any users in another forest to access resources in the local forest.

____ is an Active Directory preparation tool that can modify the schema by adding objects and properties needed to support Windows Server 2008 domain controllers.

A domain functional level or forest functional level can be raised and then undone (or lowered) as necessary.