CH14-15 C23

What is the primary function of Active Directory Domain Services (AD DS)?

• Manage IP addressing

• Provide DHCP leasing

• Provide directory-based network services

• Manage firewall rules

Why might an organization implement multiple domains within a single forest?

• To simplify DNS replication

• To support older operating systems

• To eliminate administrative overhead

• To comply with political or legal requirements

What is a key reason to create a child domain in an Active Directory structure?

• To logically separate resources and apply delegation

• To reduce schema replication

• To provide physical server redundancy

• To avoid using DNS altogether

Which tool is used to raise the forest functional level?

• DNS Manager

• Active Directory Users and Computers

• Active Directory Domains and Trusts

• Server Manager

What does the domain functional level determine?

• Number of domains in the forest

• Features available to the forest

• Compatibility with older clients

• Available Active Directory features

Which trust type is transitive and connects two entire forests?

• Forest Trust

• Shortcut Trust

• Realm Trust

• External Trust

Which trust type is used to optimize authentication between two domains in the same forest?

• Shortcut Trust

• Forest Trust

• Realm Trust

• External Trust

What role does DNS play in Active Directory environments?

• Assigning IP addresses to computers

• Locating network resources and domain controllers

• Controlling firewall rules

• Managing email routing

What is the purpose of the global catalog in AD DS?

• It stores GPO templates

• It handles DHCP leases

• It filters network traffic

• It resolves user principal names

What is SID filtering designed to prevent?

• Malware infection

• Trust authentication failures

• SID injection from a trusted domain

• DNS poisoning