Net 231 Chapter 4

1. Holds the default service administrator accounts. 2. The default location for new user accounts and groups 3. The default location for domain controllers computer accounts 4. The root container to the hierarchy 5. The default location for workstations when they join the domain

1 Builtin container 2. Users container 3. Domain controllers OU 4. Domain Container 5. Computers Container

1. An object type that cannot be created, moved, renamed or deleted 2. A database that contains a partial replica of every object from every domain 3. Facilitates faster searches 4. A type of container object that can be created by the administrator 5. Identifies the types of objects that can exist in a tree 6. Information about an object such as a users name

1. Generic Container 2. Global Catalog 3. Global Catalog 4. Organizational Unit 5. Schema 6. Attributes

1. Local Organization of Resources 2. Collection of Network Resources 3. Collection of related domain trees 4. Resource in the directory 5. Group of related domains

1. Organizational Unit 2. Domain 3. Forest 4. Object 5. Tree

1. A group of related domain that share the same DNS namespace 2. A collection of related domain trees 3. A server that holds a copy of the Active Directory database 4. The process of copying changes between domain controllers 5. A collection of network resources that share a common directory database 6. Can make changes to the Active Directory database

1. Tree 2. Forest 3. Domain Controller 4. Replication 5. Domain 6. Domain Controller

You manage a network with a single domain named eastsim.com. The network currently has three domain controllers. During installation you did not designate one of the domain controllers as a global catalog server. Now you need to make the domain controller a global catalog server. Which tool would you use?

Active Directory Users and Computers or Active Directory Sites and Services

You are the administrator for a multi-domain forest. Users in each domain have been trained to log in using their user principal name (UPN). Because of recent policy change you rename two of the domains in the forest. The number of help desk calls relating to user logon has increased in the last few days. Users are having a hard time remembering their UPNs. Management has asked you to devise a solution that will be easy for users and require minimal effort on your part. What should you do?

Add an alternative UPN suffix to the forest. Configure all user accounts to use that suffix.

Your network has two sites as shown in the graphic. You want to configure Computer1 as a Global Catalog server. Which objects properties would you edit to accomplish this?

COMPUTER1>NTDS settings

You manage a group of 10 Windows 8 workstations that are currently configured as a Workgroup. Which are advantages you could gain by installing Active Directory and adding the computers to a domain?

Centralized configuration control Centralized Authentication

You are the network administrator for your company. Your network consist of two Active Directory domains: research.westsim.local and sales.westsim.local. Your company has two sites: Dallas and Houston. Each site has two domain controllers with one domain controller for each domain. Users in Houston who are members of the sales.westsim.local domain report slow performance when logging in and accessing files in Dallas. Users in Dallas do not report any problems logging in and accessing local resources. You want all users in Houston to experience adequate log on and resource access response time. What should you do?

Configure one of the domain controllers in Houston to be a global catalog server

You are the network administrator for westsim.com. The network consists of a Single Active Directory domain. There is one main office located in New York and several branch offices including one in Chattanooga TN. All of the clients in Chattanooga TN are configured using DHCP and obtain addresses in the 172.16.0.0/16 subnet with a scope ranging from 172.16.3.1 to 172.16.3.254. There are two domain controllers in the Chattanooga office named TNDC1 and TNDC2. TNDC1 has a static IP address of 172.16.2.3/16 and TNDC2 has a static IP address of 172.16.2.4/16. During the course of an IT audit, you notice that users authenticated by TNDC2 experience significant logon delays. You order a new server to replace TNDC2. As a temporary fix you would like to ensure that all users in the Chattanooga TN sites are authenticated by TNDC1. The solution should enable users to be authenticated by TNDC2 only if TNDC1 fails. What should you do?

Create a new Active Directory site. Create a new subnet object using the 172.16.2.4/32 subnet. Move TNDC2 to the new site

You are the administrator of a network that spans two locations: Atlanta and Dallas. Atlanta and Dallas are connected using a dedicated WAN link. The Atlanta location is also connected to the internet. A single Active Directory spans both locations and each location has a single-domain controller. You have not used Active Directory Sites and Services snap-in to make any changes to the default configuration. Users in Dallas complain that at certain times, Internet access is very slow. After monitoring the network traffic across the WAN link, you discover that the slow performance occurs after making any major changes to Active Directory. What is the first step to solving this problem?

Create a new site object in Active Directory and move the server object for the Dallas domain controller into the new site

You get a call from a user one day telling you that his password no longer works. As you inquire about the reasons the password doesn't work he tells you he got a call from an administrator asking for his user account password which he promptly supplied. You know that a legitimate administrator would never make this request. You are concerned that the impersonator might have contacted other users with the same request. To protect your network you would like to reset all user account passwords, and force users to change their passwords at next logon. You want to accomplish this as quickly as possible. What should you do?

Create a script that runs Dsmod. Specify the new password and account properties in the script. Run the script. Run Ldifde to export user account information . Edit the .ldifd file to modify user account properties and passwords. Run Ldifde to modify existing user accounts

You manage a network with a single Active Directory domain called westsim.com. Organizational units have been created for the Accounting, Sales and Support departments. User and Computer accounts for each department are in their respective OU. The Support department has a very high turnover. Nearly every week you add new user accounts. All user accounts have the same Department and Fax Number settings. Each User Account must also have permission to the Orders shared folder. You want to create a template account to use when creating new accounts in the future. What should you do?

Create a user account with the Department and Fax Number settings Disable the User account Create a group called Support. Make the template account a member of the Shipping group. Assign permissions for the group to the Orders shared folder

You are the network administrator for an Active Directory forest with a single domain. The network has three sites with one domain controller at each site. You have created and configured sites in Active Directory Services and replication is operating normally between sites. You configure two universal groups for use in securing the network. All users are members of one universal group or the other. After configuring the universal groups users at sites 2 and 3 report slow login and slow access to the corporate database. Users at site 1 can log in and access the corporate database with acceptable performance. You want to improve login and resource access performance for users in Sites 1 and 3. What should you do?

Designate the domain controllers at sites 2 and 3 as global catalog servers

When Active Directory is installed several containers are created by default. Which default container would you be able to apply a Group Policy to ?

Domain Controllers OU

You are the manager of the eastsim.com domain. Your two domain controllers have been updated to Windows Server 2012 R2. Your Active Directory structure has organized units (OU) for each company department. You have several assistant administrators who help manage Active Directory objects. For each OU you grant one of your assistants full control. You come to work one morning to find that the while managing some user accounts the administrator in charge of the Sales OU has deleted the entire OU. You restore the OU and all of it's objects from a recent backup. You want to configure the OU to prevent accidental deletion. You edit the OU properties but can't find the Protect object from accidental deletion setting. What should you do so you can configure this setting?

In Active Directory Users and Computers, select View>Advanced Features

You are the network administrator for westsim.com. The network consists of a single Active Directory domain. All servers run Windows 2012 R2 and all clients run Windows 8. There is one main office and seven branch offices. You have been asked to create a scripts that can be used in the event of a disaster that destroys the entire network. The script must be able to re-create the company's Active Directory users computers and groups as well as sites and subnet objects. Which command should you use in your script?

New-ADObject

You are the administrator for a small network. You have approximately 50 users who are served by a single Windows Server 2012 R2 computer. You are providing Active Directory, DNS and DHCP with this server. Your clients all use Windows 8. Last week an employee quit. A replacement has been hired and will be starting next Monday. The new user will need to have access to everything the previous user had including document files held in the home folder. You need to set up an account for the new user providing all of the access required. What should you do?

Rename the existing account changing the name fields to match the new employee

Prior to installing Active Directory on your network, you set up a test network in your lab. You created several user accounts that correspond to actual network users. Now that your test is done, you'd like to move all user accounts from your test network to a new domain that you've just installed. You decide to use Ldifde command to import the user accounts into the production domain. You want to set passwords for the new user accounts. You want to use the least amount of effort as possible. What should you do?

Run Ldifde to export user accounts. Run Ldifde to import the user accounts. edit the ldifde file to specify user account passwords. Run Ldifde to modify existing accounts

You are the administer of a network with a single Active Directory domain.You need to create 75 user accounts in the domain Users container. You have a list of new user accounts that include an IP telephone number. The user accounts are available via an export from your company's HR application in the form of a comma-delimited file. You want create the new accounts as quickly and easily as possible. What should you do?

Use Csvde to import user accounts using the .csv file

You are the administrator of a network with a single Active Directory domain. The domain currently includes 75 user accounts. You have been asked to add 50 additional accounts. Your human resources manager has an existing database of employees that can be imported to Active Directory. You would like to use an automated method for data import if possible. What should you do

Use Csvde.exe utility Use the Ldifde.exe utility

You are the network administrator for a company with a Single Active Directory domain. The corporate office is located in Miami and there are satellite offices in Boston and Chicago. There are Active Directory sites configured for all three geographic locations. The Default-First-Site-Name was renamed to become the Miami site. Each location has a single IP subnet configured and associated with appropriate site. Each office has several domain controllers The Boston office has recently expanded to three additional floors in the office building that they are in. The additional floors each have their own IP subnet and are connected by a router. The domain controllers for the Boston office are all located on one floor and are in the same subnet. You notice that users working on the new floors in the Boston office are sometimes authenticating to domain controllers from other locations. You need to make sure that all authentication traffic over the WAN links is kept to a minimum. What should you do?

create subnets for the new floors in the Boston office and link them to the Boston site

You manage a Windows Server 2012 R2 system that functions as your company's domain controller. You want to test a new network application in a lab environment prior to rolling it out on to your production network. To make sure the test is as realistic as possible you want to export all Active Directory objects from your production domain controller and import them to a domain controller in the test environment. Which tools should you use to do this?

csvde ldifde

You are the administrator of a network with a single Active Directory domain. You would like to create a script to distribute to the Help Desk support staff for their needs when creating domain user accounts. The Help Desk staff input various user account values and these values will be used in the script. Which of the following commands should your script include?

dsadd

You are the administrator with a single Active Directory domain. You would like to create a new script to distribute to the Help Desk support staff for their needs when creating domain user accounts. The help desk staff will input various user accounts values and these values will be used in the script. Which of the following commands should your script include?

dsadd

You are the administrator of a network with a Single Active Directory domain. The domain includes a user account named Bob Smith. You have been asked by the network security group to provide a listing of all the domain groups to which Bob Smith is a member. You would prefer to use a command-line utility so that out-put can be saved and printed. Which command should you use?

dsget

You are the administrator of a network with a single Active Directory domain. The domain includes a user account named Bob Smith. You have been asked by the network security group to provide a listing of all domain groups to which Bob Smith is a member. You would prefer to use a command-line utility so that the output can be saved and printed. Which command should you use?

dsget

You manage a Windows Server 2012 R2 system that functions as your company's domain controller. Your organization was recently acquired by a larger organization and the company name has changed as a result. You need to modify the Company property of each user account in Active Directory. Which tools would you use to make this change?

dsmod ldifde

You manage a Windows Server 2012 R2 system that is an Active Directory domain controller for your organization. You need to use command-line tools to generate a list of all users in your domain and then view the Office property of each user. Which command should you use?

dsquery user-name*|dsget user-display-office

You need to use a PowerShell to generate a list of all Active Directory computer accounts located in just the Computers container (cn=Computers,dc=testoutdemo dc=com) Which cmdlet should you use?

get-adcomputer-filter*-SearchBase "cn=computers, dc=testoutdemo dc=com*

You are the network administrator for westsim.com. The network consists of a single Active Directory domain. All servers run Windows Server 2012 R2 and all clients run Windows 8. The company is opening a new branch office in New York which will have one hundred new users. All the information on the new accounts is contained in a file named branch.csv which specifies a unique name and password for each user. You need to run a script to successfully create the new accounts contained in the branch.csv file. The new accounts must be assigned to the appropriate passwords as contained in the branch.csv file. What commands should you run?

import-csv new-ADUser

Which tool would you use to process the file to make changes to Active Directory?

ldifde