Quiz: Module 03 Managing Active Directory Accounts

• Check My Work

Which of the following are true about organizational units? (Choose all that apply.)

• a. OUs can be added to an object's DACL

• b. OUs can be nested.

  
  

• c. A GPO can be linked to an OU.

• d. Only members of Domain Administrators can work with OUs.

You want to see the permissions set on an OU, so you open Active Directory Users and Computers, right-click the OU, and click Properties. After clicking all the available tabs, you can't seem to find where permissions are set in the Properties dialog box. What should you do?

• a. Log on as a member of Enterprise Admins and try again.

• b. In the Properties dialog box, click the Advanced button.

• c. Right-click the OU and click Security.

• d. In Active Directory Users and Computers, click View and then click Advanced Features.

You have hired a new junior administrator and created an account for her with the logon name JrAdmin. You want her to be able to reset user accounts and modify group memberships for users in the Operations department whose accounts are in the Operations OU. You want to do this with the least effort and without giving JrAdmin broader capabilities. What should you do?

• . In Active Directory Administrative Center, right-click the Operations OU, click Properties, and click Managed By.

• b. In Active Directory Users and Computers, right-click the Operations OU and click Delegate Control.

• c. Open the Operations Security tab and add JrAdmin to the DACL.

• d. Add JrAdmin to the Password Managers domain local group.

Which of the following are user account categories? (Choose all that apply.)

• local

• global

• domain

• d. Universal

Which of the following is a built-in user account? (Choose all that apply.)

• a. Administrator

• b. Operator

• c. Anonymous

• . Guest

Which of the following is not a valid user account name?

• a. Sam$Snead1

• b. Sam*Snead35

• c. SamSnead!24

• c. SamSnead!24

Which of the following are true about user accounts in a Windows Server 2016 domain? (Choose all that apply.)

• a. The name can have 1 to 20 characters.

• b. The name is case sensitive.

• c. The name can't be duplicated in the domain.

• d. Using default settings, PASSWORD123 is a valid password

Which of the following account options can't be set together? (Choose all that apply.)

• a. User must change password at next logon

• b. Store password using reversible encryption

• c. Password never expires

• d. Account is disabled

Which of the following members can belong to a global group? (Choose all that apply.)

• . Computer accounts

• Global groups from any domain

• c. User accounts

• d. Universal groups

Jada has left the company. Her user account is a member of several groups, and it has permissions and rights to a number of forest-wide resources. Jada's replacement will arrive in a couple of weeks, and the replacement will need access to the same resources. What's the best course of action?

• a. Find all groups that Jada is a member of and make a note of them. Delete Jada's user account and create a new account for the new employee. Add the new account to all the groups that Jada was a member of.

• b. Copy Jada's user account and give the copy another name

• c. Disable Jada's account. When the new employee arrives, rename Jada's account, assign it a new password, and enable it again

• d. Export Jada's account and then import it when the new employee arrives. Rename the account and assign it a new password