NET 140 Review Question ch#5-9

Which of the following is not associated with an Active Directory tree?

A container object that can be linked to a GPO

Your DNS server is on the same network as the computer where you enter the following commands: arp -d ipconfig /flushdns nslookup server1 Which of the following protocols is used first as a result of these commands?

ARP

Which SMB share option should you enable if you don't want users to see files they don't have at least Read permission to?

Access-based enumeration

Which MMC is added after Active Directory Installation(Choose all that apply)

Active Directory Domain and Trusts ADSI Edit

Which of the following is a built- in user account?(Choose all that apply)

Administrator Guest

Which of the following can be used to create shares?(Choose all that apply)

Advanced sharing Simple file sharing File and Storage Services

You want to configure an inbound firewall rule that allows a connection only if the computer trying to make the connection is authenticated. What option should you select?

Allow the connection if it is secure

You're the administrator of a file server. Tom, who is on vacation, had created a file that Mary needs access to, but neither her account nor the Administrator accounts has permission to access the file. What is the best way to allow Mary to access the file?

As Administrator, take ownership of the file, grant Mary the permission she needs, and then give ownership back to Tom.

By default, when are polices set in the user configuration node applied ?

At user logon

A domain user logging on to the domain becomes a member of which special identity group?

Authenticated Users

Which of the following is associated with an Active Directory forest?(Choose all that apply)

Can contain trees with different naming structures. Allows independent domain administration. Represents the broadest element in Active Directory.

Which of the following is not a standard NTFS permission?

Change

You're having replication problems with your GPOs and suspect that the version numbers have somehow gotten out of sync between the GPT and the GPC. What can you do to verify the version numbers on a GPO?

Check the versionNumber attribute of the GPC and open the GPT.INI file

Which of the following is a default folder object?

Computer

Which of the following is considered a leaf object?(Choose all that apply)

Computer account Shared folder

Which of the following is considered a security principal? (Choose all that apply)

Computer accounts User accounts

You want to create policies in a new GPO that affects only computers with Windows 7 installed. You don't want to reorganize your computer accounts to do this, and you want computers that are upgraded to Windows 8.1 to fall out of the GPO's scope automatically. What can you do?

Configure a WMI filter on the GPO that specifies Windows 7 as the OS. Link the GPO to the domain

You're a consultant for a small company that uses eight Windows 8.1 computers in a workgroup configuration. The owner asked you to set restrictive policies on users to prevent them from making Control Panel, desktop, and other changes. The owner wants to be exempt from these policies but shouldn't be a member of the local Administrators group. What should you do?

Configure the Local Computer Policy object, and then configure a user-specific GPO for the owner

You want to have a library of GPOs that specify baseline settings for different policy categories, and you can use this library to create new GPOs with baseline settings already configured. What's the best way to accomplish this?

Create Starter GPOs for each policy category you want to configure

You want to make changes to policy settings that affect File Explorer. The settings are in the Administrative Templates folder of the User Configuration node. You want the settings to affect all users in the domain. Which of the following is the best way to accomplish this?

Create a GPO, configure the policy, and link the GPO to the Domain object

You have created a GPO named RestrictU and linked it to the Operations OU (containing 30 users) with link order 3. RestrictU sets several policies in the User Configuration node. After a few days, you realize the Operations OU has three users who should be exempt from the restrictions in this GPO. You need to make sure these three users are exempt from RestrictU's settings, but all other policy settings are still in effect for them. What's the best way to proceed?

Create a global group and add the three users as members. Configure GPO security filtering so that the global group is denied access to the GPO

You're concerned that some domain controllers and workstations don't meet security requirements. What should you do to verify security settings on a computer against a list of known settings?

Create a security database from a template and run secedit.exe

You have been working with ADMX files to modify existing Administrative Templates and create new templates. You work on different domain controllers, depending on your location. Despite a concerted effort, your ADMX files are getting out of sync. How can you solve this problem?

Create an ADMX store in the SYSVOL share, and copy the ADMX files to the ADMX store

Your network consists of three sites and two domains, with some computers from both domains at each site. Each site has certain security settings that should apply to all computers from both domains when they're located at the site. What's the best way to ensure that the correct security settings are applied to the computers at each site?

Create three GPOs, one for each site, with the appropriate security settings. Apply the GPOs to the corresponding site, and enforce the GPO

An expensive color laserjet printer is shared by a group of managers and some other employees. The managers complain that they often have to wait for their print jobs until other employees' large jobs have finished. Usually, the managers' print jobs are small and needed immediately, but other employees rarely need their print jobs in a hurry. What can you do to help solve this problem without buying additional equipment?

Creates two printer and design them different proprieties and permission.

Which of the following is not part of Active Directory's logical structure?

DC

The Tsmith user account has been granted the Read share permission. Tsmith is a member of the Sales group, which has been granted the Change share permission. On the shared folder's Security tab, Sales has been granted Full control, and the Domain Users group has been granted Read permission. Which of the following can Tsmith do in the share when accessing it from the network?

Delete all files Creates files

You need to prevent members of a group from accessing a subfolder of a folder the group does have access to. What's the best way to do this? (Choose two answers. Each correct answer represents part of the solution.)

Disable permission inheritance on the subfolder, and convert existing permissions. Remove the group from the subfolder's DACL

You have installed a share printer with the default permissions and wants users to able to manage their own documents in the print quene. what do you need to do?

Do nothing

Which container has a default GPO linked to it?

Domain

Which of the following is the core logical structure container in Active Directory ?

Domain

An account named SrAdmin created an OU named QandA under the Operations OU. Which of the following is true by default?

Domain Admins is the owner of the QandA OU

which of the following is true about the Users domain local group?

Domain Users is a member.

Which of the following is a directory partition?(Choose all that apply)

Domain directory partition Schema directory partition Configuring partition

Which direct group scope conversion is allowed ?

Domain local to universal, provided no domain local group is already a member

Which is responsible for management of adding, removing and renaming and renaming domains in a forest?

Domain naming master

To which of the following can a GPO be linked?(Choose all that apply)

Domains Sites

Jane has left the company. Her user account is a member of several groups and has permissions and rights to a number of forestwide resources. Jane's replacement will arrive in a couple of weeks and need access to the same resources. In addition, you want the new employee to have access to files in Jane's profile. What is the best course of action?

Dsiable Jane's account. When the new employee arrives, rename Jane's account, assign it a new password, and enable it again.

You have been getting quite a few calls with requests to restore files from a backup because the file was accidentally deleted from a share or because the user needed a previous version of a file that was overwritten. Restoring the files has become a burden, and sometimes you need to repeat the process several times until you find the version the user needs. What can you do to give users a way to access the files they need and reduce your administrative burden?

Enable shadow copies on the volumes where the shares are hosted.

A user-specific local GPO takes precedence over a site-linked GPO. True or False?

False

Global groups can have domain local group as members. True or False?

False

Sam*Snead is a valid account name. True or False?

False

The Users domain local group can be a member of the local Administrators group on a Vista computer. True or False?

False

Which of the following is feature of Active Directory?(Choose all that apply)

Fine-grained access controls Can be distributed among many servers

Which of the following is a valid group scope?(Choose all that apply.)

Global Domain local

Which of the following is associated with installing the first domain controller in a forest?

Global catalog

Which of the following can be a member of a universal group? (Choose all that apply.)

Global groups from any domain in the forest Other universal groups

When installing an additional DC in exiting domain, which of the following is an option for reducing replication traffic?

IFM

You want to see the permission set on an OU, so you open Active Directory Users and Computer, right click the OU, and v click Properties. After clicking all the avaliable tabs, you can't seem to find where permission are set in the

In Active Directory Users and Computers, click View, Advanced Features

Another administrator has been changing permissions on the operation OU by adding some group and users to the DACL. You're concerned that the JrAdmin account has been given more access to the OU than it should have. You need to see all permission the JrAdmin accounts has to the Operations OU. What should you do?

In Active Directory Users and Computers, enable Advanced Feature, open the operations OU's Properties dialog box, and navigate to the Effective Access tab.

you have hired a new juniors administrator and create an account for her with the logon name JrAdmin. You wan her to be able to reset user accounts and modify group memberships for users in the Operations department whose accounts are in the operations OU. You want to do this with the least effort and without giving JrAdmin broader capabilities. What should you do?

In Active Directory Users and Computers, right-click the operations OU and click Delegate Control.

Where is a GPT stored?

In a folder named the same as the GUID of the GPO in the SYSVOL share

Which type of connection security rule should you configure if you want to prevent computers in your domain from connecting to computers outside the domain?

Isolation

The protocol for accessing Active Directory object and services is based on which of the following standards?

LDAP

You have created a GPO that defines settings only in the Local Policies node. You want the settings to apply to all computers in the domain and take precedence over any other GPOs. Which of the following is the best approach?

Link the new GPO to the domain, and then right-click the new GPO and click Enforced

Which of the following is a user accounts category?(Choose all that apply)

Local Domain

Which of the following is a local GPO on a Windows 8.1 computer? (Choose all that apply.)

Local Administrators Local Non-Administrators

Which of the following represents the correct order in which GPOs are applied to an object that falls within the GPO's scope?

Local GPOs, site, domain, OU

Which type of account is not found in Active Directory?

Local user account

In Active Directory, all your computer accounts are in the Computers folder, and all your user accounts are in the Users folder. You need to configure an AppController policy that affects users who log on to computers in the Engineering Department. Which of the following is the best way to accomplish this?

Move the Engineering Department computer accounts to a new OU named Eng. Create a new GPO, configure the AppController policy, and link the GPO to the Eng OU

Which of the following is true about share and NTFS permissions?

NTFS permissions are applied t network access.

Which of the following is true about organization units?(Choose all that apply)

OU can be nested. A group policy can be linked to an OU.

What term is used to describe a single printer that represents two or more print devices?​

Printer pool

You're seeing heavy use on one of your shared printers, and users often have to wait in line to get their print jobs. What printing feature can you use to best alleviate the problem?

Printing pooling

Which of the following is an inbound and outbound rule type you can create with Windows Firewall with Advanced Security? (Choose all that apply.)

Program Port

You need to create a share containing confidential information that only a select group of people should know about. You don't want this share to appear in users' network browse lists. What can you do that involves the least administrative effort and disruption?

Put a $ character at the end of the share name

Which of the following is not true about disk quotes?

Quotas can be a overridden for groups.

A user is having trouble logging on to the domain from a computer that has been out of service for several months. Nobody else can seem to log on from the computer either. What should you try first to solve the problem?

Reset the computer accounts, remove the computer from the domain, and rejoin it to that domain.

Which of the following specifies what types of actions a user can perform on a computer or network?

Rights

Which of the following is needed if a computer with the IP address 172.31.210.10/24 wants to communicate with a computer with the IP address 172.31.209.122/24?

Router

Which administrative share does Active Directory use for replication?

SYSVOL

All domain in the same forest have which of the following in common?(Choose all that apply.)

Schema Global catalog

Which of the following defines the types of information stored in an Active Directory object?

Schema attributes

Which of the following define the types of object in Active Directory?

Schema classes

Which of the following creates a file named disabled.txt containing a list of disabled Active Directory accounts?

Search-ADAccounts - AccountDisabled >disabled.txt

You have noticed inappropriate use of computers for gaming and Internet downloads by some employees who come in after hours and on weekends. These employees don't have valid work assignments during these times. You have been asked to devise a solution for these employees that doesn't affect other employees or these employees' computers during working hours. What's the best solution?

Set the Logon Hours options for their user accounts

Which of the following is a component of Active Directory's physical structure?

Sites

Over the past several months, Tom, who has access to sensitive company information, has logged on to computers in other departments and left them without logging off. You have discussed the matter with him, but the problem continues to occur. You're concerned that someone could easily access these sensitive resources easily. What's the best way to solve this problem?

Specify which computers Tom can log on to in the domain by using the Log On To option in his account's properties.

Which of the following is the responsibility of a domain controller?(Choose all that apply)

Storing a copy of the domain data Providing data search and retrieval functions Providing authentication services

In which of the following ways can a user become a file owner?(Choose all that apply)

Take ownership of the file. Create the file. Be assigned as the owner by an administrator.

Which IPv6 transition technology can be used with NAT routers and has the address prefix 2001::/32?

Teredo

None of the computers in an OU seem to be getting computer policies from the GPO linked to the OU, but users in the OU are getting user policies from this GPO. Which of the following is a possible reason that computer policies in the GPO aren't affecting the computers? (Choose all that apply.)

The Computer Configuration settings are disabled The computer accounts have Deny Read permission

Which of the following accounts options can't be set together?(Choose all that apply.)

User must change password at next logon. Password never expires.

All your domain controllers are running Windows Server 2012 R2. You're noticing problems with GPT replication. What should you check?

Verify that DFSR is operating correctly

What Group Policy feature should you use if you have a policy linked to an OU that contains computer accounts but want the policy to affect only computers running Windows 7? You don't know exactly which computer accounts represent the computers running Windows 7

WMI filtering

Which feature of windows file sharing should you configure if you want users to be able t access their files securely from mobile devices without having to set up a VPN or configure the firewall?

Work Folders

A user needs to create files and make changes to file contents. Aside from the Read permission, what other permission should the user be granted without allowing more access than is necessary?

Write

Which commands can you use together to change attributes of several users at once?

dsquery and dsmod

A folder can be shared only with a single name and single set of share permission. True or False

false

What command can you put in a batch file to allow users to access the Public share on the ServPub1 server, using the drive letter P?

net use P: \\ServPub1\Public

Which of the following best describe a directory service?

similar t a database program but with the capability to mange objects

​What type of access control list defines the settings for auditing access to an object?

​System access control list

Which of the following is a correct example of a valid UNC path?​

​\\server\share\subfolder

Which of the following sets the profile for each network connection on your computer?

The Network Location Awareness feature

You have an Active Directory forest of two trees and eight domains. You haven't changed any of the operations master domain controllers. On which domain controller is the schema master?

The first domain controller in the forest root domain.

What happens if security group that's an ACE in a shared folder is converted to a distribution group?

The group remains in the DACL, but the ACE has no effect on members' access to the resource.

Which of the following is true about user accounts in a Windows Server 2012/R2 domain (Choose all that apply.)

The name can be form 1 to 20 characters. The name can't be duplicate in the domain

Objects in an OU with the Block Inheritance option set are affected by a domain-linked GPO with the Enforced option set. True or False?

True

When a policy setting in Computer Configuration and User Configuration in the same GPO conflict, the Computer Configuration policy setting takes precedence. True or False?

True

You want to configure an encrypted and authenticated connection between two gateway computers. What rule type should you configure in the New Connection Security Rule Wizard?

Tunnel