Hybrides M1 & M2

How is a schema How is a schema element uniquely identified in an AD DS deployment?

• SID

• OID

• GUID

What is the default refresh time for group policies on a Windows 10 machine?

• Every 5 minutes

• Every 90 minutes

• Every 180 minutes

• Every 60 minutes

Password synchronization is the low-cost option and can be consider to replace an Identity Federation solution.

• Vrai

• Faux

Password synchronization is the process of copying on-premises password hash of hash to Azure AD.

• Vrai

• Faux

In a multi-domain forest, when all domain controllers of the forest are global catalogs, the domain controllers have a copy of the domain partition with all objects and some attributes.

• Vrai

• Faux

Custom domains added to Azure AD always belong to .onmicrosoft.com. (ex: mycustomdomain.onmicrosoft.com)

• Vrai

• Faux

Object Security Identifiers (SIDs) are used to assign permissions in a discretionary access control list (DACL). Domain controllers construct SIDs for each object, but how the SID is built?

• The DC takes the “Forest SID” and appends a “RID”

• The DC generates the SID by generating a GUID

• The DC takes the “Domain SID” and appends a “RID”

• The DC takes the “Domain SID” and appends a “GUID”

• The DC takes the “Forest GUID” and appends a “RID”

What are the different Web Sign-in Protocols supported by Azure AD?

• WS Federation

• OpenID Connect

• SAML 2.0

• OAuth 2.0

• All

Select all the statements that apply about the adminSDHolder feature.

• It sets the adminCount attribute to the value 1 for all protected objects

• It is automatically applied to all AD Admins accounts

• It ensures that inheritance is set on all AD Admin Objects

• It replaces the DACL of protected objects with the DACL of the adminSDHolder object

• It disables the inheritance on the protected objects

Which statement about Kerberos tickets is true?

• Kerberos tickets are retrieved by the server hosting the resource requested by the client

• Kerberos tickets are retrieved by the client from a KDC and then presented to the server hosting the resource