All Questions IT222 lesson 1

9.______ allows a user at a remote site to be able to log into Active Directory without needing to contact a global catalog server.

Universal group caching

Each domain in an Active Directory forest has a(n) _____ trust relationship with every other domain in a forest.

_two-way transitive

Which of the following items is a valid leaf object in Active Directory?

Except for a user object, all of the listed choices are container objects that can contain additional Active Directory objects within them. A user object is the only leaf object listed.

Each object in the schema must have a unique ___OID___.

OID

What is required by DNS for Active Directory to function?

Of the listed choices, only SRV records support is required by DNS for Active Directory to function. Dynamic update support is helpful in supporting an Active Directory environment, but it is not a requirement.

Which of the following is a container object within Active Directory?

Of the listed choices, only the organizational unit (OU) is a container object within Active Directory. A folder may contain other objects within the file system, but of the choices here, only an OU may contain other objects within Active Directory.

RODCs do not participate in which of the following?

Read-Only Domain Controllers do not perform any type of outbound replication within Active Directory. They accept inbound changes from writeable domain controllers, but do not replicate any local changes to the rest of the domain or forest.

10.Active Directory clients rely on ______ in DNS to locate Active Directory resources such as domain controllers and global catalog servers.

SRV records

Which naming context contains forest-wide data about the physical topology of an Active Directory forest?

The Configuration NC is replicated forest-wide. It contains data about Active Directory sites, subnets, and other forest-wide configuration data.

If the user named Amy is located in the sales OU of the central.cohowinery.com domain, what is the correct syntax for referencing this user in a command line utility?

The correct syntax of a distinguished name lists the leaf object first, any OUs or containers second, and the components of the Active Directory domain name last.

What is the first domain installed in a new Active Directory forest called?

The forest root domain is the first domain installed in an Active Directory forest; while it can subsequently be renamed, it cannot be decommissioned without decommissioning the entire forest.

Which of the following is the security boundary within Active Directory?

The security boundary within Active Directory is the forest. Active Directory domains provide administrative boundaries, but the true security boundary is at the forest level.

You are planning an Active Directory implementation for a company that currently has sales,accounting, and marketing departments. All department heads want to manage their own users and resources in Active Directory. What feature will permit you to set up Active Directory to allow each manager to manage his or her own container but not any other containers?

Using delegation of control within Active Directory, you can assign granular permissions within the directory. Therefore, delegated administrators can have elevated rights to only the specified objects and/or containers.

Which of the following domain controllers can be joined to a forest that is currently set at the Windows Server 2008 forest functional level?

When an Active Directory forest is set to the Windows Server 2008 forest functional level, onlyWindows Server 2008 domain controllers can be joined to any domain within the forest from that point forward.

The _ _ naming context is replicated across the domain.

Domain

A(n) ____ provides a two-way transitive trust relationship between all domains within two forests.

cross-forest trust

To create a trust relationship with an NT4 domain, you will configure a(n) ____.

external trust

The Active Directory ______ is considered the security boundary for an Active Directory environment.

forest

To provide fault tolerance, Active Directory utilizes a __ replication model.

multimaster

The Active Directory database is stored on each domain controller in a file called

ntds.dit