Which of the following are defining characteristics of an AD DS forest? (Choose two)

• Each domain in a forest has its own unique schema and configuration partitions.

• Forests are security boundaries, restricting resource access to security principals within the forest.

• Forests are replicated between domain controllers in different forests.

• Forests are replication boundaries for the domain global catalog.

What is the primary role of the Schema master in an Active Directory Domain Services (AD DS) forest?

• Managing changes to the AD DS configuration when domains are added or removed.

• Maintaining administrative privileges throughout the forest.

• Ensuring the availability of the global catalog across all domain controllers.

• Overseeing modifications to the AD DS schema.

Which of the following best defines a characteristic of an Active Directory Domain Services (AD DS) domain?

• Each domain is an administrative boundary, allowing full administrative control only to the Domain Admins group.

• Domains are replication boundaries, with changes to domain objects replicated between domains.

• Each domain has its own unique schema and configuration partitions.

• Domains are high-level containers that store objects such as users, groups, computers, and other OUs.

What is one purpose of Organizational Units (OUs) in Active Directory?

• To store user and computer account passwords.

• To host built-in domain local groups.

• To delegate administrative tasks to smaller teams or individuals at departmental levels.

• To manage domain controller replication.

What does the Active Directory Domain Services (AD DS) schema define?

• The number of objects in a domain.

• The location of domain controllers within each site found in a forest.

• Types of objects, attributes of those objects, and the AD DS structure.

• The naming conventions for OUs.

What is the purpose of the Active Directory Schema console?

• To create new user accounts in Active Directory.

• To manage the incoming trust relationships between domains in the same forest.

• To edit the schema directly and make changes to object classes and attributes.

• To manage domain controller replication.

What is required to edit the schema directly and make changes to object classes and attributes in Active Directory?

• To edit the schema directly and make changes to object classes and attributes.

• To configure Group Policy Objects (GPOs) for domain-wide settings.

• To manage user accounts.

• To set up file sharing services.

Which method is recommended for securing Domain Controllers (DCs) in branch offices where physical security is challenging?

• Deploying Read-only Domain Controllers (RODCs) and enabling BitLocker Drive Encryption.

• Configuring DCs to use single-factor authentication.

• Storing DC backups on unencrypted external hard drives.

• Disabling Lightweight Directory Access Protocol (LDAP) on DCs.

What service does a Domain Controller (DC) advertise using SRV records in DNS?

• Active Directory services

• File sharing services

• Print services

• Domain Name System (DNS) services

How can you designate a Domain Controller (DC) as a global catalog server in Active Directory?

• During AD DS promotion or using the Active Directory Sites and Services tool after promotion.

• By configuring it as the forest root domain controller.

• By promoting it to be a read-only Domain Controller (RODC).

• By adding it to the Enterprise Admins universal security group.