Server Unit Ch 3&6 quiz

Which server role below cannot be installed on a domain controller that will be cloned?

DHCP

What policy is a GPO linked to the domain controllers OU and specifies the default policy settings for all domain controllers?

Default Domain Controllers Policy

What are two flexible single master operation (FSMO) roles? (Choose all that apply.)

Domain Wide and Forest Wide

T or F A managed service account(MSA) enables admins to manage rights and permissions for services but with strict manual password management policies

False

T or F A site bridge is needed to connect tow or more sites for replication

False

T or F Active directory metadata describes the actual AD data, not the AD database

False

T or F Intrasite replication occurs between bridgehead servers

False

T or F Keberos policies, found in a GPO, control settings related to a user authentication and logon

False

T or F The GPO policy defines which objects a GPO affects

False

T or F The logical components of AD are forest , domains and sites

False

T or F When a client wants to connect to a service, it finds the service based solely on the instance name

False

T or F. By default, subnets are created in active directory sites and services

False

In order to increase security of data stored on an RODC, what can be configured to specify domain objects that aren't replicated to RODCs?

Filtered attribute sets

Which FSMO role is responsible for ensuring that changes made to object names within one domain are updated in references to those object in other domains?

Infrastructure master

What type of replication schema does AD use to synchronize copies of most information in the AD database

Jffnfnfn\

What specific authentication protocol used in Windows domain environment to authenticate logons and grant accounts access to domain resources?

Keberos

What component of Kerberos is responsible for storing keys for encrypting and decrypting data in the authentication process?

Key distribution center

What specific tool allows you to create GPO's, view a GPO settings, link and unlink GPO's with contains and manage the inheritance settings of GPO's?

Ktrkggkg

Which of the following options are valid configuration options in the Kerberos delegation tab

-Trust this user for delegation to any service -Trust this user for delegation to any specified service only -Do not trust this user for delegation

How often do garbage collections run on a DC?

12 hours

Select the account lockout policy item that determines how many failed logins can occur on an account before the account is locked

Account lockout threshold

Select below the FSMO role that is a forest-wide FSMO role

Domain naming master

Which of the following manages adding, removing and renaming domains In the forest

Domain naming master

With universal group membership caching, how often is the cached information on group membership refreshed ?

Every 8 hours

By default, for how long are deleted objects stored within the active directory database before they are removed entirely?

180 Days

What option limits the delegation to specific services running on specific computers?

Constrained delegation

Once Active Directory has been installed, a default site link is created. What Is the name of this site link?

DEFAULTIPSITELINK

Select the FSMO role that is required to be online to facilitate the addition or removal of a domain controller

Domain Naming Master

What type of account provides the same function as managed service accounts but can be managed across multiple servers as in a server farm or load-balancing arrangement?

Group Managed Service Account

When a client computer wants to connect to a service instance, what name name type does it use to find the service?

Hdhjdjd

What holds the log activity of active directory transactions or changes?

Hhffnnfnfjf

By default, replication between DCs when no changes have occurred is scheduled to happen how often?

Once per hour

What Active Directory object enables an administrator to configure password settings for users or groups that are different from those defined in a GPO linked to the domain?

Password settings object

What active directory object enables an administrator to configure password settings for users or groups that are different from those defined in a GPO linked in the domain

Password settings object

What configuration tool must be used to create and manage MSA's

PowerShell

What configuration must be used to create and MSA's

Powershell

Which type of ticket below is requested by an account when it wants to access a network resource such as a shared folder?

Service ticket

Select the RODC installation type where the domain administrator creates the RODC computer account in Active Directory and then a regular user can perform the installation at a later time.

Staged Installation

Using the default settings, if a computer clock differs more thank more than 5 times a kerbos message tie snap what happens?

The kerbos message is considered invalid

If using virtual accounts to access network, how are permissions added to a network resource to allow the virtual account access?

The resource must have proper permissions set for ComputerName$, where ComputerName is the name of the computer attempting to access the resource.​

​Approximately 42 days after a service was configured to use a normal user account, the service has stopped working and refuses to run. An administrator has verified that the account still exists on the domain. Assuming default domain policy settings, what could be the issue?

The user account password expired

How is a computer's designated site determined, such that the computer is give a domain controller to request services from within the same site?

Through subnets added to the site

T or F A service account is a user account that windows services use to log on to a computer or domain with a specific set of rights and permissions

True

T or F Account policies are set in the local security policy mmc on computers that aren't domain members

True

T or F Account policies set In the GPO's linked to an containing computer account affects only local user accounts defined in the computers SAM database

True

T or F Authentication efficiency, replication efficiency, and application efficiency are the three main reasons for establishing multiple sites

True

T or F Before you can install RODC, the forest must functional level must be atleast windows server 2003

True

Which of the following tools allow you to create a password setting object?

jfjffjfjf

the RID master FSMO role is ideally placed on the same server as what other role

pdc emulater

By default, the maximum tolerance for computer check synchronization is set to what value?

5 Minutes

By default, what is the maximum period during which a TGT can be renewed?

7 days

What assigned value represents the bandwidth of the connection between sites?

Cost

What setting specifies how long a service ticket can be used before a new ticket must be requested to access the resources for which the ticket was granted?

Maximum lifetime for service ticket

Within the NTDS folder, which file stores the main Active Directory database?

Ntds.dit

What is the name of the domain controller which changes can be written

Read only Domain Controller

An administrator has attempted to change the forest functional level, but the attempts failed due to the failure of an FSMO role. Which FSMO role should be investigated?

Schema Master

An administrator has attempted to change the forest functional level, but the attempt failed due to the failure of an FSMO role. Which FSMO role should be investigated?

Schema master

Select the term that is recorded of the time message is sent and is used in the kerbors to determine a messages validity and prevents replay attack?

Timestamp

During garbage collection, what setting controls how long deleted objects remain within the database before such objects are completely removed?

Tombstone lifetime

T or F. The default domain policy is linked to the domain object and specifies settings that affect all users and computers in the domain.

True

Which option is not one of the three main methods for cleaning up metadata?

Wbsadnin.exe

For automatic SPN support, what must the domain functional level be?

Windows server 2008 R2 or higher

An administrator has received a call indication that some users are having difficulty logging on after a password change. Which FSMO role should be investigated?

PDC Emulator

Timestamps within keberos are used to help guard against what type of attack?

Replay attack

What is used to identify all objects in a domain

SID

What folder contains group policy templates, logon/logoff scripts and DFS synchronization data?

SYSVOL

A delegated installation allows a domain administrator to create a RODC computer account in AD so that a regular user can perform the installation at a later time

True

T or F A domain controller clone is a replica of an existing DC

True

T or F Mutual authentication means that the identity of both parties is verified

True

T or F. An AD snapshot is a replica of the AD database at a specific moment

True

What DC is responsible for ensuring that changes made to the objects name in one domain are updated in the references to these objects in other domains

ffnfjfjnv