Deck 3: Introducing Active Directory

Question 1

The Computer Configuration node in the Group Policy Management MMC is used to set policies that apply to all users within the GPOs scope.

Answer 1

False

Question 2

When is the installation of the Global Catalog server option mandatory?

A)When a domain controller is being added to a domain with other domain controllers that do not have Global Catalog installed
B)It is required when adding the first domain controller in a forest
C)When Active Directory detects you have installed the DNS Server role
D)Only when the server is going to support older versions of Windows OSs,such as Windows 95

Answer 2

B

Question 3

The dsadd command can only create new user objects in Active Directory.

Answer 3

False

Question 4

When configuring GPOs,which node contains the majority of account policies?

A)Computer Configuration node,Windows Settings folder,Security Settings node
B)Computer Configuration node,Administrative Templates folder,Windows Components node
C)The User Configuration node,Administrative Templates folder
D)The User Configuration node,Windows Settings folder,Security Settings node

Question 5

Which of the terms below fits the following description?
The core structural unit of Active Directory;contains OUs and represents administrative,security,and policy boundaries

A)domain
B)object
C)forest
D)schema

Question 6

GPOs are updated on workstations every 5 minutes,even if the computers don't restart.

Question 7

If installing the first domain controller in a network,you are required to install the DNS Server role if DNS isn't already installed on the network.

Question 8

Which of the following defines the types of information stored in an Active Directory object?

A)Attribute values
B)Schema classes
C)Schema attributes
D)GPOs

Question 9

After receiving several support calls,you have decided to prevent users of the DomA-Group from being able to access the Control Panel regardless of what machine they log into.Where would you configure this setting?

A)The User Configuration node,Windows Settings folder
B)The Computer Configuration node,Administrative templates folder
C)The Computer Configuration node,Windows Settings folder
D)The User Configuration node,Administrative Templates folder

Question 10

Under what circumstances are the built-in user accounts no longer local user accounts?

A)When accessing a network resource in a workgroup environment
B)After installing Active Directory
C)This is impossible;built-in user accounts cannot be converted
D)When using dsadd on the built-in accounts

Question 11

You are in charge of a domain that contains several office rooms and one large computer commons area.In order to secure accounts in the domain,you want to apply separate account policies for the computers in the commons area,while maintaining the policies that are used in the office rooms.Currently,all computers are in the Computers folder.What is the most efficient way to accomplish this task?

A)Create a new OU called "CommonsArea" and move the commons area computer accounts into it.Create a new GPO and configure the desired account policies.Link the new GPO to the CommonsArea OU.
B)Create a new domain on a new domain controller to service the commons area.
C)The policy settings must be assigned manually on the local computer GPOs in the commons area.
D)Create a new GPO and specify the computer accounts of the computers in the commons area then apply the desired account policies.Finally,link the new GPO to the domain.

Question 12

Domain controller computer accounts are placed in what container by default?

A)Computers folder
B)Special Computers OU
C)Built-in folder
D)Domain Controllers OU

Question 13

In what order are GPOs applied?

A)Local computer,site,domain,OU
B)OU,domain,site,local computer
C)Site,OU,domain,local computer
D)Local computer,domain,OU,site

Question 14

How many domains can a single domain controller service?

A)Only one
B)As many as needed
C)Two
D)Only as many as you have purchased licenses to do so

Question 15

A ____ specifies the actions a user can perform on a Windows network.

A)Permission
B)Right
C)Object
D)Schema

Question 16

What are the two default GPOs that are created when Active Directory is installed?

A)Default Directory Policy and Default Domain Policy
B)Default Domain Controllers Policy and Default Directory Policy
C)Default Domain-Wide Policy and Default Active Directory Policy
D)Default Domain Policy and Default Domain Controllers Policy

Question 17

GPOs can be linked to all of the following except ____.

A)sites
B)domains
C)OUs
D)groups

Question 18

Schema is information that defines the type,organization,and structure of data stored in the Active Directory database.

Question 19

Jenna works for your company's Human Resources department.For several years she has volunteered to instruct new and present employees on the use of office applications in a special training lab environment.Due to the sensitive nature of this environment,security policies are more strict for the lab than the rest of the network.A more refined policy was just set in place by your administrator last Friday.
On Monday,Jenna calls you and explains that she can no longer log into the lab machines locally.After further troubleshooting,you discover that any user that is a member of the "Lab Instructors" group can no longer log into any of the lab machines.What is most likely the problem?

A)The lab machines have lost their network connections and are no longer authenticating privileged users
B)The "Lab Instructors" group has been removed from the "Allow log on locally" policy
C)The domain controller for this environment is down
D)The group (and it's associated user accounts)do not exist on this machine,therefore Jenna cannot log in.

Question 20

What boot mode is used to perform restore operations on Active Directory if it becomes corrupted or parts of it are deleted accidentally?

A)System Restore mode
B)Safe mode
C)Directory Services Restore Mode
D)Safe mode with Command Prompt

Question 21

A forest is ____.

A)A grouping of information that describes a network resource,such as a shared printer,or an organizing structure,such as a domain or OU
B)The core structural unit of Active Directory;contains OUs and represents administrative,security,and policy boundaries
C)A collection of one or more Active Directory trees.
D)A database that stores information about a computer network and includes features for retrieving and managing that information

Question 22

MATCHING
a.Group Policy Object (GPO)
f.Contact
b.Organizational Unit
g.dcpromo.exe
c.domain
h.User Configuration
d.built-in user accounts
i.Schema
e.dsadd
Used to create new objects in Active Directory from the command line

Question 23

After choosing your forest functional level when installing Active Directory,you are provided with three additional options.Which answer is not one of these three options?

A)DNS server
B)Global Catalog
C)Read-only domain controller (RODC)
D)DHCP Server

Question 24

The ____________________ folder is a shared folder that stores information from Active Directory that's replicated to other domain controllers.

Question 25

If a policy is defined in a GPO linked to a domain,and that policy is defined with a different setting in a GPO linked to an OU,which is true by default?

A)The policy setting in the GPO linked to the OU is applied.
B)The policy setting in the GPO linked to the domain is applied.
C)Neither policy setting is applied,and an error message is generated.
D)The policy in both GPOs defaults to Not Defined so that no conflict exists.

Question 26

A ____________________ is a category of schema information that defines the types of objects that can be stored in Active Directory,such as a user or computer accounts.

Question 27

MATCHING
a.Group Policy Object (GPO)
f.Contact
b.Organizational Unit
g.dcpromo.exe
c.domain
h.User Configuration
d.built-in user accounts
i.Schema
e.dsadd
A list of settings that administrators use to configure user and computer operating environments remotely through Active Directory

Question 28

The ____________________ command applies group policy settings immediately to the computer that runs it.

Question 29

MATCHING
a.Group Policy Object (GPO)
f.Contact
b.Organizational Unit
g.dcpromo.exe
c.domain
h.User Configuration
d.built-in user accounts
i.Schema
e.dsadd
Used to set policies that apply to all users within the GPO's scope

Question 30

MATCHING
a.Group Policy Object (GPO)
f.Contact
b.Organizational Unit
g.dcpromo.exe
c.domain
h.User Configuration
d.built-in user accounts
i.Schema
e.dsadd
Information that defines the type,organization,and structure of data stored in the Active Directory database

Question 31

MATCHING
a.Group Policy Object (GPO)
f.Contact
b.Organizational Unit
g.dcpromo.exe
c.domain
h.User Configuration
d.built-in user accounts
i.Schema
e.dsadd
An Active Directory container used to organize a network's users and resources into logical administrative units

Question 32

MATCHING
a.Group Policy Object (GPO)
f.Contact
b.Organizational Unit
g.dcpromo.exe
c.domain
h.User Configuration
d.built-in user accounts
i.Schema
e.dsadd
Used to complete the installation of Active Directory and to make a domain controller fully functional

Question 33

A ____________________ is a list of settings that administrators use to configure user and computer operating environments remotely through Active Directory.

Question 34

At about what interval are GPOs updated on domain controllers?

A)5 seconds
B)5 minutes
C)50 minutes
D)5 hours

Question 35

A ____________________ is a physical location,defined by one or more IP subnets,in which domain controllers communicate and replicate information regularly.

Question 36

Which of the following is not a part of Active Directory's four organizing components?

A)Organizational Units (OUs)
B)Domains
C)Trees
D)Users

Question 37

MATCHING
a.Group Policy Object (GPO)
f.Contact
b.Organizational Unit
g.dcpromo.exe
c.domain
h.User Configuration
d.built-in user accounts
i.Schema
e.dsadd
User accounts created by Windows automatically during installation

Question 38

MATCHING
a.Group Policy Object (GPO)
f.Contact
b.Organizational Unit
g.dcpromo.exe
c.domain
h.User Configuration
d.built-in user accounts
i.Schema
e.dsadd
The core structural unit of Active Directory;contains OUs and represents administrative,security,and policy boundaries

Question 39

Which of the following best describes a directory service?

A)Similar to a list of information in a text file
B)Similar to a database program but with the capability to manage objects in it
C)A program for managing the user interface on a server
D)A program for managing folders,files,and permissions on a distributed server

Question 40

MATCHING
a.Group Policy Object (GPO)
f.Contact
b.Organizational Unit
g.dcpromo.exe
c.domain
h.User Configuration
d.built-in user accounts
i.Schema
e.dsadd
A person who is associated with the company but is not a network user

Question 41

What acronym describes the order in which GPOs are applied?

Question 42

Which folder under the User Configuration node contains settings relating to configuring Folder Redirection?

Question 43

What term matches the following description?
A grouping of domains that share a common naming structure.

Question 44

MATCHING
a.Group Policy Object (GPO)
f.Contact
b.Organizational Unit
g.dcpromo.exe
c.domain
h.User Configuration
d.built-in user accounts
i.Schema
e.dsadd
What term best matches the following description?
A domain name that includes all parts of the name,including the top-level domain.

Question 45

What term matches the following description?
Settings that define which resources users can access and what level of access they have to resources.

Question 46

What term best matches the following description?
A category of schema information that defines what type of information is stored in each object.

Question 47

Which folder under the Computer Configuration node contains settings related to configuring Windows Firewall?

Question 48

What term matches the following description?
The transfer of information among domain controllers to make sure all domain controllers have consistent and up-to-date information.

Question 49

"John Doe" is an example of which of the following?

Question 50

What kind of account is not found in Active Directory?