Server Test 3

Once Active Directory has been installed, a default site link is created. What is the name of this site link?

DEFAULTIPSITELINK

Intrasite replication occurs between bridgehead servers.

False

What are the two flexible single master operation (FSMO) roles?

Forestwide Domainwide

Select the command that is used to import settings from a backed-up GPO to an existing GPO.

Import-GPO

The RID master FSMO role is ideally placed on the same server as what other role?

PDC emulator

Which tab in the Group Policy Results window shows all events in Event Viewer that are generated by group policies, and can be used to view the relevant information on a remote computer?

Policy events

Which of the following manages adding, removing, and renaming domains in the forest?

domain naming master

Which of the following uses permissions to restrict objects from accessing a GPO?

security filtering

Select the FSMO role that is required to be online to facilitate the addition or removal of a domain controller

Domain naming master

Which of the following are ways to change default GPO inheritance? (Choose all that apply.)

GPO Enforcement blocking inheritance

What tool can be used to determine what policy settings would apply to a computer or user account if it were moved to a different container?

Group Policy Modeling

What command can be used to cause a group policy refresh remotely on Windows Vista and later clients?

Invoke-GPUpdate

What GPO policy will take precedence over all other GPO policies when they are being applied?

The last policy applied takes precedence

During garbage collection, what setting controls how long deleted objects remain within the database before such objects are completely removed?

Tombstone lifetime

An Active Directory snapshot is a replica of the Active Directory database at a specific moment.

True

Authentication efficiency, replication efficiency, and application efficiency are the three main reasons for establishing multiple sites.

True

What type of replication scheme does Active Directory use to synchronize copies of most information in the Active Directory database?

multimaster

How often does garbage collection run on a DC?

12 hours

By default, subnets are created in Active Directory Sites and Services

False

What PowerShell cmdlet will allow an administrator to check for software that is incompatible with the cloning process?

Get-ADDCCloningExcludedApplicationList

What is the name of a domain controller on which changes can't be written?

Read only domain controller

What folder contains group policy templates, logon/logoff scripts, and DFS synchronization data?

SYSVOL

Which policy below requires synchronous processing to ensure a consistent computing environment?

Software installation policies

How is a computer's designated site determined, such that the computer is given a domain controller to request services from within the same site?

Through subnets added to the site

A domain controller clone is a replica of an existing DC.

True

You can configure a firewall with the Group Policy tool or on a client computer.

True

OU-linked policies are applied last so they take precedence over which policies?

-site -domain

The gpupdate command in conjunction with which option below causes synchronous processing during the next computer restart or user logon?

/sync

By default, for how long are deleted objects stored within the Active Directory database before they are removed entirely?

180 days

A slow link, by default, is a network connection that's less than which of the following?

500 kbps

When a GPO is linked to a site object, what will be affected?

All users and computers physically located at the site

By default, what policies will be downloaded and processed by a Group Policy client?

Changed policies only

Select below the FSMO role that is a forest-wide FSMO role:

Domain naming master

Select the GPO permission that provides the ability to change existing settings, import settings, and enable or disable a GPO, but is not granted to any user by default.

Edit Settings

With universal group membership caching, how often is the cached information on group membership refreshed?

Every 8 hours

A site bridge is needed to connect two or more sites for replication.

False

Active Directory metadata describes the actual Active Directory data, not the Active Directory database.

False

GPOs set at the domain level should contain settings that you want to apply to all objects in the domain.

False

On a slow link, policies involving folder redirection are always processed.

False

When you back up a GPO, the policy settings are backed up, but not the security filtering settings, delegation settings, and WMI filter links.

False

To increase security of data stored on an RODC, what can be configured to specify domain objects that aren't replicated to RODCs?

Filtered attribute sets

What defines which objects are affected by settings in a GPO?

GPO scope

An administrator needs to know which servers carry forest-wide roles. What PowerShell cmdlet can be used to display this information?

Get-ADForest

By default, replication between DCs when no changes have occurred is scheduled to happen how often?

Once per hour

An administrator has received a call indicating that some users are having difficulty logging on after a password change. Which FSMO role should be investigated?

PDC emulator

What does the /target option do when used with the gpupdate command?

The option can specify whether computer or user policy settings should be updated

A delegated installation allows a domain administrator to create the RODC computer account in Active Directory, so a that a regular user can perform the installation at a later time.

True

A loopback policy can be used to change user policy settings based on the GPO within whose scope a computer object falls.

True

A migration table is a list of security principals and UNC paths in a GPO that can be mapped to the security principals and UNC paths in the destination domain.

True

Before you can install an RODC, the forest functional level must be at least Windows Server 2003.

True

GPO enforcement is configured on a GPO, not on an Active Directory container.

True

The Group Policy Results wizard will show administrators which policy settings apply only to a user, computer, or both.

True

You can see a GPO's DACL in Active Directory Users and Computers in the System\Policies folder.

True

Which of the following uses queries to select a group of computers based on certain attributes, and then applies or doesn't apply policies based on the query's results?

WMI filtering

What assigned value represents the bandwidth of the connection between sites?

cost

Select the specific tab within the Group Policy Management Console that will allow you to view which policies affect a domain or OU and where the policies are inherited from.

Group Policy Inheritance

What DC is responsible for ensuring that changes made to object names in one domain are updated in references to these objects in other domains?

Infrastructure master

Which FSMO role is responsible for ensuring that changes made to object names within one domain are updated in references to those objects in other domains?

Infrastructure master

Select the GPO state where the GPO is in the Group Policy Objects folder but hasn't been linked to any container objects.

Link status: unlinked

What mode of the Resultant Set of Policy (RSoP) snap-in produces a database of policy results that you browse in a similar manner to using the Group Policy Management Editor?

Logging

What PowerShell cmdlet will link a GPO to a site, domain or OU?

New-GPLink

Select below the policy permission that grants a user or group the ability to use the GPO Modeling Wizard on a target container.

Perform Group Policy Modeling analyses

What holds the log of Active Directory transactions or changes?

edb.log

How can an administrator initiate a system state recovery using the command line?

wbadmin start systemstaterecovery

Which option below is not one of the three main methods for cleaning up metadata?

wbsadmin.exe

What permission is given to the Enterprise Domain Controllers universal group on all GPOs by default, and grants permission to view settings and back up a GPO?

Read

What is used to identify all objects in a domain?

SID

An administrator has attempted to change the forest functional level, but the attempt failed due to the failure of an FSMO role. Which FSMO role should be investigated?

Schema master

Which PowerShell cmdlet below can be used to set permissions for a security principal to a GPO or to all GPOs?

Set-GPPermission

If the slow link detection policy is set at 0, what does this indicate?

Slow link detection is disabled

What command below can be used to reset the default GPOs to their original settings?

dcgpofix

Select the RODC installation type where the domain administrator creates the RODC computer account in Active Directory, and then a regular user can perform the installation at a later time.

staged installation

What policy setting can be used to force synchronous processing?

Always wait for the network at computer startup and logon

To find a full list of policies and preferences that can have background processing disabled, where should you look?

Computer Configuration\Policies\Administrative Templates\System\Group Policy

Which server role below cannot be installed on a domain controller that will be cloned?

DHCP

Group policy caching improves system startup speed because the cache is used during asynchronous background processing, which occurs when the system boots.

False

The logical components of Active Directory are forests, domains, and sites.

False

The option to turn off background processing is not available for which type of policy below?

Folder redirection

Select the term used to describe forcing inheritance of settings on all child objects in the GPO's scope, even if a GPO with conflicting settings is linked to a container at a deeper level.

GPO enforcement

Within the NTDS folder, which file stores the main Active Directory database?

ntds.dit