Unit 3 - Active Directory

What is a directory?

A directory is a list organizing resources and associates' characteristics, like a telephone directory.

What is a domain client?

A domain client is a computer that has an account in Active Directory. It can run the user's desktop environment and allow the user to gain access to resources in the domain.

What are the responsibilities of the domain controller?

A domain controller is a Microsoft Windows Server that manages the domain security policy. Users and computers that need to obtain access to network resources within the domain must be authenticated by a domain controller in the domain.

What is a domain tree?

A domain tree is simply a collection of one or more domains that share a common namespace.

What is the difference between a site and a domain?

A site is a collection of well-connected subnets. A domain is a collection of objects that share the same database.

A domain is a logical security boundary with access controlled by a/an _____________.

Access Control List (ACL)

What is an advanced hierarchical directory service (proprietary to Microsoft) used for managing permissions and user/group access to network resources?

Active Directory

What is an object in Active Directory?

An object is the basic element of Active Directory in Microsoft Windows that represents something on the network, such as a user, a group, a computer, an application, a printer, or a shared folder.

What is an attribute?

Attributes are a set of fields that define and describe the additional data that can be attributed to the object.

Domains created after the forest root are known as ____________.

Child Domains

_________ is the container that stores configuration objects for the entire forest.

Configuration

What are the three partitions of the domain controller?

Configuration, Schema, and Domain

What Active Directory logical structure is a group of users, servers and other resources sharing a centralized database of account and security information?

Domain

What manages the domain security policy?

Domain Controller

(True/False) Users can authenticate and log into the Air Force network if the domain controller is down.

False

What are some examples of member servers?

File and Print Servers, Application Servers, Database Servers, and Web Servers

What is at the top of the Active Directory structure and consists of one more domain trees?

Forest

Which logical Active Directory component provides the foundation for the active directory infrastructure and is the first domain to be created?

Forest Root

The ________ server includes Active directory objects from all domains in a forest.

Global Catalog

What is the end point of a branch in Active Directory?

Leaf

Active Directory is divided into __________ and _________ structures for grouping network components.

Logical and Physical

________ servers are usually used for dedicated purposes such as FTP, print servers, application servers, or web servers.

Member

What subdivision in Active Directory would you place users, groups, or computers?

Objects

Where is the Active Directory information segregated and logically stored?

Partition

What are the ten components of Active Directory's logical structure?

Partition, Schema, Domain, Domain Tree, Forest, Forest Root, Organization Unit, Objects, Leaf

What Active Directory container consists of a set of object classes, attributes and syntaxes?

Schema

What Active Directory resource defines the rules that ensure objects are created and modified with consistency?

Schema

_________________ container defines the rules that ensure objects are created and modified with consistency.

Schema

Name the five components that make up the Active Directory physical structure.

Sites, Domain Controller, Global Catalog Server, Member Servers, and Domain Clients

(True/False) Active Directory has a tree-like structure (like the hierarchy of folders and subfolders) consisting of forests, trees, domains, organizational units, objects, and sites.

True

(True/False) The global catalog server is part of Active Directory's physical structure and allows access to network resources in other domains within a forest or tree.

True