Final Exam

You are the system administrator of a large organization that has recently implemented Windows Server 2008. You have a few remote sites that do not have very tight security. You have decided to implement read-only domain controllers (RODCs). What forest and function levels does the network need for you to do the install? (Choose all that apply.)You are the system administrator of a large organization that has recently implemented Windows Server 2016. You have a few remote sites that do not have very tight security. You have decided to implement read-only domain controllers (RODCs). What forest and function levels does the network need for you to do the install? (Choose all that apply.)

• Windows Server 2016

• Windows Server 2008 R2

• Windows Server 2012 R2

• Windows Server 2008

Miguel is a junior-level system administrator, and he has basic knowledge about working with Active Directory. As his supervisor, you have asked Miguel to make several security related changes to OUs within the company’s Active Directory domain. You instruct Miguel to use the basic functionality provided in the Delegation of Control Wizard. Which of the following operations are represented as common tasks within the Delegation of Control Wizard? (Choose all that apply.)

• Reset passwords on user accounts

• Manage Group Policy links

• Modify the membership of a group.

• Create, delete, and manage groups

A system administrator is trying to determine which file system to use for a server that will become a Windows Server 2016 file server and domain controller. The company has the following requirements:

■ The file system must allow for file-level security from within Windows 2016 Server.

■ The file system must make efficient use of space on large partitions.

■ The domain controller Sysvol must be stored on the partition. Which of the following file systems meets these requirements?

• FAT

• FAT32

• HPFS

• NTFS

1. You are the system administrator responsible for your company’s infrastructure. You think you have an issue with name resolution, and you need to verify that you are using the correct hostname. You want to test DNS on the local system and need to see whether the hostname server-1 resolves to the IP address 10.1.1.1. Which of the following actions provides a solution to the problem?

• Add a DNS server to your local subnet.

• Add the mapping for the hostname server-1 to the IP address 10.1.1.1 in the local system’s HOSTS file.

• Add an A record to your local WINS server.

• Add an MX record to your local DNS server.

1. What is the maximum number of domains that a Windows Server 2016 computer configured as a domain controller may participate in at one time?

• Zero

• One

• Two

• Any number of domains

You are the administrator of an organization with a single Active Directory domain. A user who left the company returns after 16 weeks. The user tries to log on to their old computer and receives an error stating that authentication has failed. The user’s account has been enabled. You need to ensure that the user is able to log on to the domain using that computer. What do you do?

• Reset the computer account in Active Directory. Disjoin the computer from the domain, and then rejoin the computer to the domain.

• Run the ADadd command to rejoin the computer account

• Run the MMC utility on the user’s computer, and add the Domain Computers snap-in.

• Re-create the user account and reconnect the user account to the computer account.

You are the administrator of an organization with a single Active Directory domain. One of your senior executives tries to log on to a machine and receives the error “This user account has expired. Ask your administrator to reactivate your account.” You need to make sure that this doesn’t happen again to this user. What do you do?

• Configure the domain policy to disable account lockouts.

• Configure the password policy to extend the maximum password age to 0.

• Modify the user’s properties to set the Account Never Expires setting.

• Modify the user’s properties to extend the maximum password age to 0.

You are a domain administrator for a large domain. Recently, you have been asked to make changes to some of the permissions related to OUs within the domain. To restrict security for the Texas OU further, you remove some permissions at that level. Later, a junior system administrator mentions that she is no longer able to make changes to objects within the Austin OU (which is located within the Texas OU). Assuming that no other changes have been made to Active Directory permissions, which of the following characteristics of OUs might have caused the change in permissions?

• Inheritance

• Group Policy

• Delegation

• Object properties

You need to deactivate the UGMC option on some of your domain controllers. At which level in Active Directory would you deactivate UGMC?

• Server

• Site

• Domain

• Forest

The process of assigning permissions to set Group Policy for objects within an OU is known as ---------------?

• Promotion

• Inheritance

• Delegation

• Filtering