Active Directory Domain Services (AD DS)

In a nonauthoritative restore, what happens after restoring the domain controller?

• It initiates schema updates

• It shuts down

• It updates from replication partners

• It deletes all FSMO roles

What are the three possible states of AD DS?

• On, Off, Safe Mode

• Normal, Disabled, Offline

• Started, Stopped, DSRM

• Active, Passive, Maintenance

What is a major advantage of enabling Active Directory Recycle Bin?

• Reduces power consumption

• Allows backup of DNS settings

• Restores deleted objects without downtime

• Automatically resets passwords

What happens when an object is deleted in AD DS without the Recycle Bin enabled?

• It is permanently deleted

• It is moved to the Recycle Bin

• It becomes a tombstone with most attributes removed

• It becomes a read-only copy

What command-line tool is used to manage and maintain AD DS?

• Dcdiag

• Repadmin

• Ntdsutil

• Dsquery

Which tool is primarily used for synchronizing on-premises AD DS with Azure AD?

• Azure Sync Manager

• Azure AD Connect

• Azure Identity Gateway

• AD FS Manager

What is a key architectural difference between AD DS and Azure AD?

• Azure AD uses Kerberos

• AD DS supports Internet-based applications

• Azure AD does not use LDAP or Kerberos

• AD DS has no OUs or GPOs

What synchronization feature allows users to have the same password in both AD DS and Azure AD?

• Federation

• Kerberos Delegation

• Password Hash Synchronization

• Device Writeback

Which Azure AD Connect feature allows you to write groups created in Azure AD back to on-prem AD DS?

• Group replication

• Group synchronization

• Group writeback

• Group passthrough

Which protocol does Azure AD NOT use for authentication?

• Kerberos

• OAuth

• SAML

• OpenID Connect