Module 3

Domain and forest boundaries in an AD DS structure are defined as:

• Logical separations that define the scope of administrative control and replication within Active Directory.

• Physical network boundaries that separate different subnets in a network.

• Security zones that restrict user access to specific resources only.

• Geographical locations of servers within an organization.

Overview of advanced AD DS deployments: Multiple domains are implemented primarily to:

• Provide administrative boundaries and support different security policies

• Reduce network traffic by limiting replication

• Increase the number of domain controllers required

• Eliminate the need for trusts between domains

Overview of advanced AD DS deployments: The primary reason to implement multiple forests is:

• To provide complete isolation between different organizations or security boundaries

• To increase the number of domain controllers in a single domain

• To simplify the DNS namespace

• To reduce the need for group policies

Overview of advanced AD DS deployments: What is involved in deploying a domain controller in Azure IaaS?

• Deploying a virtual machine, configuring networking, and installing Active Directory Domain Services role

• Only creating a storage account in Azure

• Deploying a web server and configuring DNS only

• Setting up Azure AD Connect without any virtual machines

Considerations for managing objects in complex AD DS deployments include:

• Delegation of administrative control

• Ignoring replication topology

• Disabling auditing

• Avoiding use of organizational units

Which of the following is a boundary type for the Domain in an AD DS structure?

• Security

• Domain partition replication

• Global catalog replication

• Schema partition replication

Which of the following is a boundary type for the Domain in an AD DS structure?

• Administrative permissions

• Forest DNS zone replication

• Configuration partition replication

• Security

Which of the following is a boundary type for the Domain in an AD DS structure?

• Group Policy application

• Global catalog replication

• Schema partition replication

• Security

Which of the following is a boundary type for the Domain in an AD DS structure?

• A) Password and account policies

• B) Global catalog replication

• C) Schema partition replication

• D) Security

Which of the following is a boundary type for the Domain in an AD DS structure?

• Domain DNS zone replication

• Forest DNS zone replication

• Configuration partition replication

• Security