Chapter 4 windows server

What type of group is typically used to manage resources in a domain?

Domain local group

For members of a protected users global group, how often must the Kerberos Ticket Granting Ticket be renewed?

4 hours

What are the Windows Server 2016 default password requirements?

7 or more characters cant contain account name or portions of users full name 3/4 of the next criteria -includes #'s -includes uppercase -includes lowercase -includes special characters like $ ! #

What symbol cannot be used in an account name in Windows Server 2016?

:

What is the most typically used boundary for an Active Directory site?

A site boundary is typically defined by a network or subnet boundary.

T or F An Organizational Unit cannot be nested within another Organizational Unit.

False

How are changes made within Active Directory maintained on different domain controllers?

Multimaster replication is used to replicate changes to other DCs

How do you make a user profile a mandatory profile, preventing all changes?

Rename the Ntuser.dat file to Ntuser.man in the user's profile directory

After deleting an account, what happens to the associated GUID?

The GUID will be permanently deleted and never re-used

What happens if a user attempts to sign in while the global catalog server for the domain is offline?

The user will be allowed to sign in to the network with cached credentials.

T or F A Read-Only Domain Controller (RODC) cannot be used to update information in Active Directory, and it does not replicate to regular DCs

True

T or F A transitive trust means that if A and B have a trust and B and C have a trust, A and C automatically have a trust as well

True

What statement regarding Active Directory objects that can be members of a domain local group is NOT accurate?

Universal groups in any domain in a tree or forest can be a member of the domain local group, without requiring a trust relationship.

You are attempting to create a new universal group but find that the radio button in the Create New Object - Group dialog box is deactivated. What is the issue?

You are operating in a domain with a Windows 2000 domain functional level.

***A recently promoted employee at your company has called you because they attempted to log in to their computer several times with a password created after a password expiry notice, but the attempts made were unsuccessful. You have reset the user's account password, but the user is still unable to log in. What is most likely the cause of the failure?

***The user's account has been locked due to frequent failed password attempts.

What is NOT an attribute that must be defined for each Active Directory account?

Account holder's e-mail address

List 4 of the guidelines to keep in mind when planning Active Directory structure.

-implement only 1 domain on most small networks -create only the # of OU's that are absolutely necessary -Implement multiple trees and forests only as necessary -above all Keep the active directory as simple as possible, plan its structure beforehand.

What tab under a user's account properties allows you to define the hours at which the user is able to log on to the domain?

Account tab

What kind of group is used for e-mail or telephone lists, to provide quick, mass distribution of information?

distribution groups

What is a site, and what are the functions of a site?

A TCP/IP container within active directory, linked to IP subnets. functions: -reflects 1 or more interconnected subnets -reflects the physical aspect of the network -DC replication -enables client access to the DC that is physically closest -composed of servers and configuration objects

What is an Organizational Unit (OU), and how does it assist management by administrators?

A grouping of related objects within a domain, like subfolders within a folder. Can be used to reflect the structure of the organization without having to completely restructure the domain(s) when changes happen. Allows grouping of objects, ability to administrate using same group policies. server administration can be decentralized.

What statement regarding trust relationships between domains is accurate?

Due to the trust relationship between parent and child domains, any one domain can have access to the resources of all others.

You can't convert a domain local group to a universal group.

False

What feature provided at the Windows Server 2012 domain functional level creates a secure channel or tunnel between a client seeking authentication for a computer service and the server providing secure access keys for secure communications?

Flexible Authentication Secure Tunneling (FAST)

Under what conditions can a global group be converted to a universal group?

It can be converted as long as it is not nested in another global group or in a universal group

When should an organization consider using Microsoft Azure Active Directory?

It should be considered if the organization subscribes to Office 365 services, or other compatible web services

What are the different types of groups and their associated scopes?

Local - not part of domain, doesnt go beyond its local server. Domain Local - scope is the domain that it exists in Global - can be a member of a domain local group in its own, or other domains Universal - Other domains and trees

What is NOT a true statement to keep in mind when designing an OU structure?

Microsoft recommends nesting OUs at least four levels deep

When using the protected users global group, what is not a valid security restriction imposed on the group?

Only computers running Windows 7 or higher can be made member computers.

When replication occurs between sites, what servers are involved in replication?

Replication only occurs between two bridgehead servers.

What statement regarding functional domain functional levels is accurate?

The functional level at both the domain and forest level should be set to the lowest version of Windows Server used

According to Microsoft, what is the minimum number of DCs that should be present in any organization using Active Directory?

Two