What is an AD DS domain tree?

What is an AD DS forest?

What is a trust relationship?

List Windows 2016 new features:

___ is a solution that helps organisations to restrict privileged access within an existing Active Directory environment.

List windows 2016 new features:

__________ is a feature that provides certificate authentication that can replace the use of passwords.

List the Operations master roles at forest level.

(choose Two)

List the Operations master roles at Domain level

(choose Three)

________ is a cloud-base service that provides identity management and access control for cloud-based applications.

____________ is an easy and fast solution to deploy many virtual Domains Controllers in the private cloud environment.

What are the two types of Group in Active Directory?

Why is it better to reset the computer account rather than to disjoin and then rejoin it to the domain?

The best practice for nesting groups is known as _________

When importing user accounts from .csv file, you can use ________ (Syntax) loop to process each row in the file.

Compared to system container, what are the advantages of OU?

(Select Two)

Your company has purchased another company that also uses Windows Server 2016 and Active Directory. Both Companies need to be able to access each others forest resources. How can you achieve this goal with the least administrative effort?

You can have different domain functional levels within the forest, however, the lowest domain functional level determines the forest functional level. True or False?

List the Three options that you can increase the security in forest trust.

_______ is used in each DC to generate IntraSite replication topology.

_________ is used in each DC to generate InterSite replication topology

The bridgehead server is responsible for all replication into and out of the site. Instead of replication all domain controllers from one site with all domain controllers in another site. True or False?

How to resolve replication conflict? (Choose Three)

In windows 2008 or newer domain controllers, SYSVOL folder replication takes place by using _____________.

In a windows domain, sites are useful to quickly locate domain controllers and site-aware application and services. True or False?

A GPO is stored in __________ and SYSVOL folder in the Domain Controller.

What is the default processing order that GPOs apply?

How to refresh GPO in CLI?

When you delete a GPO link, you also delete the GPO as well. True or False?

What is a starter GPO?

How do you exclude users/computers to be affected by a GPO?

There is no difference between an ADMX and a ADMLfile. True or False?

What is the difference between policies and preferences in a GPO?

You have created Group Policy preferences to configure new power options. How can you make sure that they apply only to laptop computers?

Group policy can be used to install, maintain and remove software from organisation computers. When delivering software to client, admin has 2 deployment methods. (choose two)

Which technology allows you to use biometric functionality to sign in to Windows devices?

When a user signs in to a domain controller, a logon event is generated in the DC. True or False?

How are group MSAs different from standard MSAs?

In windows domain, administrator can create multiple ______________________ to specify multiple password policies to different users or groups within a single domain or single OU.

________________ enable administrators to configure users, service accounts and computers within the same security scope to apply the same authentication policy.

Both user account names and passwords are case sensitive. True or False?

Managed service accounts provide managed password changes that do not require administrator intervention. True or False?

Certificate auto enrollment is an option only on enterprise CA's. True or False?

Your company is currently acquiring another company. Both companies run their own PKI. What hierarchy could you create to minimize disruption and continue to provide PKI services seamlessly?

To recover private keys, you must configure CA to archive private keys for specific templates, and you must issue a Key Recovery Agent (KRA) certificate. True or False?

Which of the following actions must you take to configure key archival on an AD CS CA? (choose four)

AD FS is designed to work over the public internet with a Web Browser interface. True or False?

Where do you deploy Application Proxy Server when deploying AD FS in a single organisation scenario?

A federated trust is the same as a forest trust that organizations can configure between AD DS forests. True or False?

In Windows Server 2016, the federation server proxy functionality is part of the Web Application Proxy role. True or False?

How can you test whether AD FS is functioning properly?

When deploying AD FS server, the server will have 3 self-issued certificates, they are; server communication certificate (SSL), Token Signing certificate and Token-decrypting certificate. Which self-issued certificate need be replaced by an internalCA issued certificate or public-CA issued certificate, so that users can access web application from intranet/internet?

Your company deals with highly confidential information, some of which is transmitted via email among company employess. Some documents have been forwarded via email, making the documents more difficult to track. You want to be able to prevent employes from forwarding certain emails. What should you deploy?

RMS Servers provide 3 types of exclusion policies. What are they?

You want to block uses from protecting content by using specific versions of Microsoft PowerPoint. Which exclusion policy should you create?

You can install an SSL certificate on the AD RMS configuration, the benefit is that you can protect the connection between clients and the AD RMS server with SSL. True or False?

Azure RMS is deployed locally on a server. True or False?

To implement an AD RMS cluster, which components are necessary? (choose two)

When you decide to remove your AD RMS cluster from AD DS, what should you do first?

When you decide to remove your AD RMS cluster from AD DS, what should you do first?

Which of the following are true statements regarding the use of certificates in a business environment? (choose three)

You are the AD CS administrator for A. Datum. You want to enable your AD DS users to perform digital signature and encryption using certificates from your internal PKI. Which step is required?

Select reasons that an organization would use a PKI? (choose 3 options)

Which of the following statements are true regarding smart cards? (choose three options)

You use __________________________ for directory synchronization between on-premises Active Directory and Azure AD.

When you implement directory synchronization, user accounts and groups move from your local AD DS to Azure AD. True or False?

If you implement AD FS and federation between locally deployed AD DS and Azure AD AD, then you do not need to use Azure AD Connect

If you want to have SSO for both cloud-based and on-premises services, what do you need to deploy? (Choose two)

In Azure AD, there are no OUs or GPOs. True or False?

By using Azure AD ___________________, you can limit standard administrator access to privileged roles, discover who can access and review privileged access.

List all monitoring tools tht can be used to monitor AD DS? (5)

_________________ is a command line tool which can be used to perform AD database maintenance, such as creating snapshots, performing offline defragmentation.

AD DS has 3 states, what are they?

____________ is a microsoft system center tool that can manage data backup/restore centrally

You restore a Domain Controller from backup file, then restored domain controller recieve all of the recent updates from the running Domain Controllers, this restore mode is called ____________.