Network Administration Practice Questions 4.1.10

You are the network administrator for a company with a single Active Directory domain. The domain functional level is Windows Server 2012 R2. Each departmental administrative team has delegated control over an organization unit (OU) for their department. In the last few weeks, several new administrators have joined the team that have never managed Active Directory before. Yesterday, one of the new administrators inadvertently deleted an entire OU from within his department's OU structure. You have located a backup from two days ago to use for the restoration. What should you do? (Select two. Each correct answer is part of the complete solution.)

-Reboot a domain controller into directory services restore mode and restore Active Directory from the backup. -Run Ntdsutil and mark the deleted OU for authoritative restore. -Remove and re-install Active Directory and then let replication restore Active Directory data. -Perform a nonauthoritative restore and reboot the domain controller normally. -Restore Active Directory from the backup and then reboot the domain controller into directory services restore mode. -Reboot a domain controller into directory services restore mode and restore Active Directory from the backup. -Run Ntdsutil and mark the deleted OU for authoritative restore.

You have just installed a new domain on a new domain controller running Windows Server 2016. You would like to use Windows Server Backup to back up Active Directory. You would like to perform the backup so that you can restore the domain controller if the domain controller is able to boot but when Active Directory is corrupt. You want to back up only the items necessary to restore Active Directory. Which type of backup should you create?

A. Full server backup B. Back up the Ntds.dit file and the Sysvol folder C. Critical volume backup D. System state backup D. System state backup

You are the network administrator for southsim.com. The company has one main office along with several branch offices. All the domain controllers run Windows Server 2016, and all the client computers run Windows 10. The domain functional level is set to Windows Server 2008 R2. The forest functional level is set to Windows Server 2008. You need to enable the Active Directory Recycle Bin feature. What should you do? (Select two. Each selection is a part of the complete solution.)

-Run the adprep /forestprep command on the domain controller hosting the Schema master role. -Use the ADSI Edit utility to enable the Active Directory Recycle Bin. -Raise the forest functional level to Windows Server 2008 R2 or higher. -Use Active Directory Administrative Center to enable the Active Directory Recycle Bin. -Use Active Directory Administrative Center to enable the Active Directory Recycle Bin. -Raise the forest functional level to Windows Server 2008 R2 or higher.

You are the network administrator for a network with a single Active Directory parent domain and two child domains. All domain controllers are running Windows Server 2016. You are responsible for disaster recovery across the entire network. You decide to use Windows Server Backup. You schedule full server backups to be taken every night, along with a system state backup an hour later. On Friday morning, you are creating new users in the Accounting OU when you receive an error stating that the user cannot be created because the context could not be found. After some investigation, you find that a co-worker has deleted the OU, and the change has replicated to all domain controllers. You want to restore the latest version of the OU without affecting the rest of Active Directory. What should you do?

A. Boot a domain controller into Directory Services Restore mode. Perform a nonauthoritative restore. B. Boot a domain controller into Directory Services Restore mode. Perform a nonauthoritative restore. Run Ntdsutil and mark the Accounting OU as authoritative. C. Boot a domain controller into Directory Services Restore mode. Perform a nonauthoritative restore of the Accounting OU. D. Boot a domain controller into Directory Services Restore mode. Perform an authoritative restore of the Accounting OU. E. Boot a domain controller into Directory Services Restore mode. Perform a nonauthoritative restore. Run Ntdsutil and mark the entire restore as authoritative. B. Boot a domain controller into Directory Services Restore mode. Perform a nonauthoritative restore. Run Ntdsutil and mark the Accounting OU as authoritative.

You are the network administrator for westsim.com. The network consists of a single Active Directory domain. All the servers run Windows Server 2016, and all the clients run Windows 10. The network had a child domain named east.westsim.com. The domain was decommissioned but several snapshots were taken prior to the decommissioning. Management requests that you identify the members of a group that existed in the east.westsim.com. You mounted the last snapshot to examine the group on a domain controller named DC1, but you now need to see the data in the snapshot. What command should you run?

A. Get-ADObject B. ntdsutil mount C. dsamain D. dcgpofix C. dsamain

You manage a Windows Server 2016 system and need to perform an immediate system state backup. The backup will be saved on the C:\ volume. To accomplish this, you determine that wbadmin start systemstatebackup -backupTarget:C: is the appropriate command to use. Will this strategy work?

A. No. The backup cannot be saved to the same drive as the system state data. B. No. The wbadmin start backup command should be used instead. C. No. The wbadmin start systemstaterecovery command should be used instead. D. Yes. This strategy will immediately create a system state backup. A. No. The backup cannot be saved to the same drive as the system state data.

You work for a consulting company. Your best customer, a university on summer break, has a serious problem. One of the student interns carried a large cup of coffee into the computer room and tripped over a section of the raised flooring. The coffee spilled and found its way into one of the domain controllers. Sparks flew, and the domain controller was dead by the time it arrived at the tech bench. The system board is no longer functional, and two SCSI hard drives have failed. You replace the system board and SCSI hard drives. Fortunately, a system state backup was done two nights ago, but several changes in Active Directory have occurred since then and have been fully replicated to other domain controllers in this single domain network. You need to decide how to restore Active Directory on the failed server. You must complete the restoration as quickly as possible. What should you do?

A. Perform a nonauthoritative restore of the entire Active Directory database. B. Perform a nonauthoritative restore of only the Active Directory objects created or updated since the server failed. C. Perform an authoritative restore of the entire Active Directory database. D. Perform an authoritative restore of only the Active Directory objects created or updated since the server failed. A. Perform a nonauthoritative restore of the entire Active Directory database.

You are the network administrator for westsim.com. The network consists of a single Active Directory domain. All the servers run Windows Server 2016. All the clients run Windows 10. The forest functional level is set to Windows Server 2012 R2. The Active Directory Recycle Bin has been enabled. While working in Active Directory Users and Computers, you accidentally delete a group. You need to restore the group using the least amount of administrative effort. What should you do?

A. Perform an authoritative restore of the group using the NTDSUtil command. B. Use the ADSIEdit utility to restore the group. C. Use the Active Directory Administrative Center to restore the group from the Deleted Objects folder. D. Use Active Directory Sites and Services to force replication from another domain controller to restore the group. C. Use the Active Directory Administrative Center to restore the group from the Deleted Objects folder.

You manage a Windows Server 2016 server that is also a domain controller. You want to use Windows Server Backup to configure a backup schedule. You want to perform a complete system backup that includes a backup of Active Directory every Monday, Wednesday, and Friday. You want to be able to restore the entire system or individual files from the backup. What should you do? (Select two. Each choice is a required part of the complete solution.)

A. Save backups to a shared folder. B. Create a Scheduled Task that runs wbadmin start backup. C. Save backups to the C:\NTDS folder. D. In Windows Server Backup, run the Backup Schedule wizard. E. Save backups to the C:\Backups folder. A. Save backups to a shared folder. B. Create a Scheduled Task that runs wbadmin start backup.

You are the network administrator for northsim.com. The network consists of a single Active Directory domain. All the servers run Windows Server 2016. All the clients run Windows 10. While working in Active Directory Users and Computers, you discover that an organizational unit (OU) that contained several group objects is missing. You do not know how long the OU has been missing. You select a backup from the previous week. You need to determine whether this backup contains the missing OU. You attempt to mount the snapshot using NTDSUtil, but are not successful. You must mount the backup as an Active Directory snapshot. What should you do?

A. Start the Volume Shadow Copy service (VSS). B. Restart the server in Directory Services Restore Mode (DSRM). C. Reset the Directory Services Restore Mode (DSRM) password using the NTDSUtil command. D. Stop the Active Directory Domain Services service. A. Start the Volume Shadow Copy service (VSS).

You have activated an Active Directory database snapshot on your Windows Server 2016 system and have mounted it. Now you need to view the contents of the snapshot. To do this, you decide to access the mounted snapshot in Active Directory Users and Computers using the Lightweight Directory Access Protocol (LDAP). Which command should you use to do this?

A. ldp B. ntdsutil C. ADExplorer D. dsamain D. dsamain

You manage a Windows Server 2016 system and need to perform an immediate system state backup. The backup should be saved on the E:\ volume. Which command should you use to do this?

A. wbadmin start backup -backupTarget:E: B. wbadmin start systemstaterecovery -backupTarget:E: C. wbadmin start sysrecovery -backupTarget:E: D. wbadmin start systemstatebackup -backupTarget:E: D. wbadmin start systemstatebackup -backupTarget:E: