WorksheetsActive Directory Quiz
Total questions: 78
Worksheet time: 13hrs 44mins
What allows administrators to grant users in one domain access to resources of another domain within the same domain tree?
Bidirectional trust relationship between domains
Permission inheritance between domains
Access control list for users
Domain isolation policy
What special DNS resource record enables clients to locate domain controllers and other vital AD DS services?
NSEC
SPF
SRV
PTR
What is a container object that functions in a subordinate capacity to a domain, and still inherits policies and permissions?
Organizational unit
Domain controller
Leaf object
Forest root domain
What is the method for removing a domain controller in Windows Server 2012 R2?
Using the Active Directory Users and Computers Console
Manually Deleting the Domain Controller Files
Using the Remove Roles and Features Wizard
Reinstalling the Operating System
In Active Directory Domain Services, an architectural element that consists of one or more domains that are part of the domain tree.
domain controller
domain tree
domain clients
forest root
What is the PowerShell cmdlet for installing a domain controller to the domain 'adatum.com'?
Install-ADDSDomainController -DomainName "adatum.com"
Install-ADDSDomainController -DomainName "adatum.com" -LocalAdministratorPassword -Force
Uninstall-ADDSDomainController -ForceRemoval
Install-addsdomain -domainname "adatum.com"
What can be used to add, delete, or modify objects in Active Directory, in addition to modifying the schema if necessary?
DCPROMO
LDIFDE
CSVDE
NSLOOKUP
When using CSVDE, what is the first line of the text file that uses proper attribute names?
header row
header record
name row
name record
Which of the following utilities do you use to perform an offline domain join?
net join
join
djoin
dconnect
Which of the following is not a type of user account that can be configured in Windows Server 2012?
local accounts
domain accounts
network accounts
built-in accounts
Which of the following are the two built-in user accounts created automatically on a computer running Windows Server 2012?
Network
Interactive
Administrator
Guest
What is the PowerShell cmdlet syntax for creating a new user account?
New-ADUser
New-User
New-SamAccountName
There is no PowerShell cmdlet for user creation.
What is the PowerShell cmdlet syntax for creating a new computer object?
New-Computer -Name
New-ADComputer -Name
New-ComputerName
There is no PowerShell cmdlet for creating computer objects.
What is the PowerShell cmdlet and syntax for demoting a domain controller?
Uninstall-ADDSDomainController -ForceRemoval
Install-AddsForest -DomainName "adatum.com"
Read-Only Domain Controller (RODC)
A set of network resources available for a group of users who can authenticate to the network to gain access to those resources.
What is the process of granting the user access only to the resources he or she is permitted to use?
Replication
Authentication
Authorization
Identification
What is the command-line tool and syntax for determining whether a domain controller has been registered in DNS?
nslookup /query: /server:
dcdiag /test:registerindns /dnsdomain: /v
ping
tracert
In AD DS, a domain controller that supports only incoming replication traffic.
Read-Only Domain Controller (RODC)
Active Directory Domain Services (AD DS)
Directory Access Protocol (DAP)
Primary domain controller (PDC) emulator
In AD DS, the individual properties that combine to form an object.
methods
attributes
values
constraints
If an admin creates two domain trees in an AD forest, what is the relationship between them?
Completely separate security entities with no trust
Hierarchical structure with no inter-domain trust
Single domain tree with multiple forests
Same security entity as one Active Directory forest, bidirectional trust
In AD DS, an object that has leaf objects or other container objects as subordinates.
container object
domain
leaf object
group object
For Server Core installations, how does Windows Server 2012 R2 differ when installing AD DS role?
Windows Server 2008 Has more installation options
Windows Server 2012 R2 allows admins to use PowerShell
Windows Server 2012 R2 does not support DCs
Windows Server 2008 requires a GUI
When is an Active Directory site topology created?
Started upon initial installation of AD
Starts when you finalize links and subnets config
Manually configured depending on WAN bandwidth
Depends on link costs
A technique where duplicate copies of a file are updated regularly from one master copy.
multi-master replication
multiserver replication
multiple-master replication
single-master replication
In AD DS, an object like a user or computer, incapable of containing any other object.
group objects
container object
leaf object
tree
What is the global catalog?
List of all users in the domain
A security policy for the forest
A backup of all domain controllers
What does LDAP stand for?
Local Data Access Protocol
Link Directory Access Protocol
Lightweight Directory Access Protocol
What is an important difference between groups and OUs?
OUs are always nested within groups.
Group memberships are independent of the domain's tree structure.
Groups are only for security purposes, while OUs are for organization.
OUs can contain users but groups cannot.
What is the next level of Active Directory container object within a domain?
Organizational unit
Global catalog
Domain controller
Directory schema
What defines what objects exist as well as what attributes are associated with any object in the Active Directory?
Schema master
Active directory root user
Active Directory schema
Active directory global directory
An Active Directory _____ consists of one or more separate domain trees.
forest
workgroup
subnet
tree
What administrative division in Active Directory is defined as a collection of subnets with good connectivity?
Forests
Domains
Sites
Locations
Which feature allows you to create virtual machines on a leased cloud resource?
Platform as a Service (PaaS)
Infrastructure as a Service (IaaS)
Network as a Service (NaaS)
Software as a Service (SaaS)
What is the process by which domain controllers stay synchronized?
Replication
Recovery
Authorization
Transcription
What determines the functional level of an Active Directory forest?
Number of users in the domain
Total number of DCs
Number of DCs in the forest
Lowest version of Windows Server on a DC
What is not a container, nor full-fledged security division, and cannot have Group Policy settings applied?
Group
Policy
Site
User
Which feature allows you to install AD DS on a virtual machine in the cloud?
Windows Azure
Sql Azure
Windows Blob Storage
Google App Engine
What can be used to add, delete, or modify objects in Active Directory, in addition to modifying the schema if necessary?
DCPROMO
LDIFDE
CSVDE
NSLOOKUP
When using CSVDE, what is the first line of the text file that uses proper attribute names?
header row
header record
name row
name record
Which of the following utilities do you use to perform an offline domain join?
net join
join
djoin
dconnect
Which of the following is not a type of user account that can be configured in Windows Server 2012?
local accounts
domain accounts
network accounts
built-in accounts
Which of the following are the two built-in user accounts created automatically on a computer running Windows Server 2012?
Network
Interactive
Administrator
Guest
What is the PowerShell cmdlet syntax for creating a new user account?
New-ADUser
New-User
New-SamAccountName
There is no PowerShell cmdlet for user creation.
What is the PowerShell cmdlet syntax for creating a new computer object?
New-Computer -Name
New-ADComputer -Name
New-ComputerName
There is no PowerShell cmdlet for creating computer objects.
When using Netdom.exe without [/OU:OUDN], where is the computer object placed?
In the same organizational unit as the administrator running Netdom.exe
In the Users container
In the Computers container
Without the OU specified, the program will fail.
Who may join a computer to the domain?
No one, the computer does this itself when authenticating.
The computer joins the domain as part of the object creation process.
Only the domain administrator may join the computer to the domain.
Local admins can join the computer to the domain.
What is the primary means by which people access resources on an AD DS network?
By having a computer account
Being within the proper site and domain
By having elevated privileges
By having a user account
What differences matter most in creating a single user versus multiple users?
Single user: GUI; multiple users: command-line tools.
Creating a single user is simple, but manual work.
Time does not permit automating the creation of a single user.
When creating multiple users, not as many parameters are involved.
What two graphical tools help create user or computer objects?
ADAC and ADUC tools
Server Core and PowerShell
LDIFDE.exe and CSVDE.exe
What is a key benefit of using ADAC or ADUC?
ADAC can edit properties of many users and computers.
ADAC allows you to import multiple objects at once.
ADAC can change many user or computer settings at once.
ADAC creates and joins users/computers to the domain.
when is an active directory site topology created?
a. Creation of sites and its topology is dependent on link costs.
b. Site topology is manually configured dependent on WAN bandwidth and transmission speed.
c. Site topology is started upon initial installation of the Active Directory
d. Site topology starts when you finalize the links and subnets configuration.
What defines what objects exist as well as what attributes are associated with any object in the Active Directory?
Active Directory root user
Active Directory administrator
Active Directory global directory
Active Directory schema
Resource access for individuals takes place through their _____
a. computer accounts
b. shared folders
user accounts
authentication
What command-line utility requires you know the SAM account name as well as the Distinguished Name before creating user?
a. CSVDE exe
b. Active Directory Administrative Center
c. Dsadd.exe
d. New-ADUser
To perform an offline domain join, how many times would an administrator run the Djoin.exe command?
a. twice
b. Djoin exe cannot perform this task
c. once
d. as many times as necessary
Active directory keeps a naming convention for the domain that mirrors _____
DNS
WINS
Files & Folders
DHCP
Using File and Storage Services in Server Manager, you will create a new share. The New Share Wizard prompts you for a profile. You need a profile for basic SMB sharing with full permissions. Which do you choose?
a, NFS Share-Advanced
b. NFS Share-Quick
c. SMB-share- quick
D. SMB Share-Advanced
What is not a container, nor full-fledged security division and cannot have Group Policy settings applied directly to them?
a. Forest
Organizational unit
Domain
Group
Which of the following is a PowerShell cmdlet for creating user objects?
a. New-ADUser
b. CSVDE.exe
Active Directory Administrative Center
Dsadd.exe
Which of the following is the best description of a security principal?
the person granting permissions to network users
the network resource receiving permissions
a collection of individual special permissions
an object that assigns permissions
Which of the following statements about effective access is not true?
Inherited permissions take precedence over explicit permissions.
Deny permissions always override Allow permissions.
When a security principal receives Allow permissions from multiple groups, the per missions are combined to form the effective access permissions.
Effective access includes both permissions inherited from parents and permissions derived from group memberships.
Which of the following statements is not true in reference to resource ownership?
One of the purposes for file and folder ownership is to calculate disk quotas.
Every file and folder on an NTFS driver has an owner.
It is possible for any user possessing the Take Ownership special permission to assume the ownership of a file or folder.
It is possible to lock out a file or folder by assigning a combination of permissions that permits access to no one at all, including the owner of the file or folder.
Which of the following statements about permissions are true?
a. ACLs are composed of ACEs.
b. Basic permissions are composed of advanced permissions.
All permissions are stored as part of the protected resource.
d. All of the above
What is the maximum number of shadow copies that a Windows Server 2012 system can maintain for each volume?
8
16
64
128
Which of the following terms describes the process of granting users access to file server shares by reading their permissions?
a. authentication
authorization
enumeration
assignment
Which of the following are tasks that you can perform using the quotas in File Server Resource Manager but you can’t perform with NTFS quotas?
a. Send an email message to an administrator when users exceed their limits.
b. Specify different storage limits for each user.
c. Prevent users from consuming any storage space on a volume beyond their allotted limit.
d. Generate warnings to users when they approach their allotted storage limi
In the NTFS permission system, combinations of advanced permissions are also known as __________ permissions.
a. special
b. basic
c. share
d. standard
What is a key reason for assigning permissions when configuring file and share access?
a. Creates redundancy for file storage, providing a fault-tolerant file archive.
b. Enables configuring offline files, improving performance.
c. Improves data security, granting file and share access only to the users who need it.
d. Assigns ownership to specific users, instilling responsibility and personal accountability.
You are deciding which file system to use. You need NTFS permission system support. You don’t presently need encryption or compression, but might at a later date. What file system is your best choice?
a. The traditional NTFS file system
b. The new ReFS file system introduced in Windows Server 2012
c. The FAT file system
d. The NFS file system
f massive shares were split across multiple servers, what is the best way to make them appear as a single, unified directory tree?
a. Windows Server 2012 Distributed File System
b. Volume Shadow Copy Service
c. Large volume split across multiple drives, attached to multiple servers
d. Volumes created on a single Virtual Hard Disk (VHD)
Which of the following sets of permissions is responsible for controlling access to files and folders stored on a local disk volume?
a. Share permissions
b. NTFS permissions
c. Registry permissions
d. Active Directory permissions
Knowing how permissions can be cumulative or override each other is an important factor in understanding what?
a. Permission inheritance
b. Explicitly assigned permissions
c. Permission precedence
d. Effective access
1. What does SMB in file sharing stand for?
A) Server Message Block
B) Secure Message Broadcast
C) System Managed Backup
D) Simple Mail Bridge
Which SMB share type is optimized for applications like Hyper-V?
A) SMB Share – Quick
B) SMB Share – Advanced
C) SMB Share – Applications
D) NFS Share – Quick
Which file system provides full share and NTFS permissions?
A) SMB Share – Quick
B) NFS Share – Advanced
C) SMB Share – Applications
D) Both A and C
Which of the following shares provides access to File Server Resource Manager services?
A) SMB Share – Quick
B) SMB Share – Advanced
C) NFS Share – Quick
D) SMB Share – Applications
What does NFS stand for?
A) Network File System
B) New File Server
C) Network File Sharing
D) Node File System
Which NFS share type provides basic sharing with authentication and permissions?
A) NFS Share – Quick
B) NFS Share – Advanced
C) SMB Share – Quick
D) SMB Share – Advanced
What extra feature does NFS Share – Advanced provide over NFS Share – Quick?
A) Faster file transfers
B) Access to File Server Resource Manager services
C) Application optimized settings
D) No authentication required
