Module 4 ITN 200

Kiora is setting up an RODC for the first time at one of her organization's branch offices. She creates a prestaged RODC computer account. Next, she installs a Windows Server 2019 system that will function as the RODC. What is the most appropriate step that Kiora should take next?

Add branch office user accounts to the Allowed RODC Password Replication Group

Censu Technologies wants to enforce a strict timings policy such that users are able to log into their systems only during specific time slots on weekdays. The company also wants to restrict access on weekends. Glenna, a system administrator at Censu, is tasked with enforcing this change. What tab under a user object's properties will allow Glenna to make this change?

Account

Describe the three main container objects within an Active Directory database.

Domains, Forests, Trees

What is the term for domain and forest functions that must be coordinated from a single domain controller?

Flexible Single Master Operations

What is the use of the New-ADReplicationSite Windows PowerShell cmdlet?

It can be used to create a new site object.

What is the purpose of a Read-only Domain Controller?

It made to help improve security using authentication requests.

You are the system administrator tasked with raising the domain functional level of domainA.com from Windows Server 2008 to Windows Server 2012 R2. First, you upgrade the domain controllers running Windows Server 2008 to Windows Server 2012 R2. Which of the following commands must you run next in Windows PowerShell to complete your task?

Set-ADDomainMode -Identity domainA.com -DomainMode Windows2012R2Domain

Arpita is adding FSMO roles to domain controllers in the domainG.com forest. The forest contains other domains. domainG.com contains two domain controllers, DC1 and DC2. DC1 contains a copy of the global catalog. Which of the following is a best practice that Arpita should follow?

She should create the Infrastructure Master role on DC1.

If a site cannot hold a copy of the global catalog, which of the following features can be enabled on the site to provide fast authentication?

Universal Group Membership Caching

Explain the process of restoring a deleted user account object using the Active Directory Administrative Center.

You first head to the Active Directory Administrative Centre. Afterwards, you click on the domain name and selected the Deleted objects. Then you right click the container and restore the deleted objects.

Which of the following statements about directory partitions is true?

Changes to a domain partition on a domain controller are only replicated to domain controllers within the same domain.

Faustino is the system administrator at an organization that has offices in multiple locations. The domain controllers in each location are within location-specific sites to improve Active Directory replication. Faustino notices performance issues in the Active Directory replication across sites. Which of the following measures can Faustino use to improve the performance?

He change the bridgehead server to one with a faster network interface.

Which of the following statements regarding a domain functional level is accurate?

It represents the oldest Windows Server version that can be used on a domain controller.

After an RODC gets stolen along with a few other computers, Shania, the system administrator, resets the computer accounts of the stolen computers that were cached on the RODC. She accomplishes this task by using the Reset all passwords for computer accounts that were cached on this Read-only Domain Controller option. Which of the following is true of this scenario?

Any computers that were not stolen will need to rejoin the domain.

What are the Windows Server 2019 default password requirements?

At least 7 characters. Non-Alphabetic characters. 0 through 9 digits.

Alfons recently received a promotion to lead a team of 35 software engineers, testers, and business analysts. When he needs to send an email or meeting invite to his team, he realizes that he must type out the email IDs for all his team members. He approaches Priyanka from the IT team to help him make this process easier and more efficient. Which of the following features of Active Directory can Priyanka use to provide a solution?

Distribution groups

By default, a new domain has six organizational units: Domain Controllers, Builtin, Computers, ForeignSecurityPrincipals, Managed Service Accounts, and User.

False

By default, the only site created within a new forest does not contain any domain controller.

False

If domain1.com is the forest root domain, you can use the command Set-ADForestMode Windows2012R2Domain to raise the forest functional level to Windows Server 2012 R2.

False

Sanya, an IT administrator for an organization, installs a new application on 150 computers used by programmers in the organization. She does this with a few clicks only for this specific set of users without impacting the rest of the organization. Which of the following features of Active Directory is exemplified by Sanya's actions in this scenario?

Group Policy

Hiroshi is the system administrator at an organization that has offices spread across three locations, Boston, London, and Paris. The organization has an Active Directory domain, domainA.com, with two domain controllers in each location for the marketing business unit. The company expanded recently and added over 3000 new users across these locations. Hiroshi notices that this surge in users is causing Internet congestion because of the Active Directory replication. What is a cost-effective method of dealing with this issue?

Hiroshi should create site objects and specify timed intervals for replication using site link objects.

Latanya, a system administrator, is creating computer objects. She uses the Active Directory Users and Computers tool instead of the Active Directory Administrative Center. What is the most likely reason for not using the Active Directory Administrative Center?

It uses a minimal color interface that is similar to the one provided by Server Manager.

Explain the use of prestaging.

It when you add a computer to the directory before joining.

Which of the following organizations should consider using Azure Active Directory?

An organization that subscribes to Office 365 services

Keplez Informatics is headquartered in Sydney, Australia, and has smaller branch offices spread across the world. The RODC in one of the branch offices gets stolen. Shannon is the system administrator at Keplez Informatics. What is the appropriate security measure that Shannon should take?

Delete the RODC computer account

Azure Active Directory can be configured to trust an organization's Active Directory forest, or mirror it using a synchronization service.

True

What are the three Active Directory group scopes and their restrictions regarding the objects that the groups can contain and the domains within the forest that can access them?

Universal- All users and groups from any domain in the forest Global- All users and groups from the same domain but universals Local- All users from any domain and universals in the forest.

What happens when you join a computer to an Active Directory domain?

It will create an account in the domain.

Kettle Inc. from Florida merges with Blue Clu Networks from Minneapolis. Minisha, a system administrator, is granted the responsibility of configuring Active Directory across both locations to enable users from both locations to access common resources. If Minisha is able to accomplish this task successfully, which of the following must be true?

Minisha is a member of the Enterprise Admins group in both organizations.

A user, Petra.T, is trying to access their system while the global catalog server for the domain is offline. What is the most likely outcome?

Petra.T will be allowed to log in to the system with cached credentials.

Raven is adding FSMO roles to domain controllers in the domain1.com forest. The forest contains a single domain and three domain controllers, DC1, DC2, and DC3. DC1 contains a copy of the global catalog, and all three domain controllers have the latest version of Windows Server 2019 installed. Which of the following is a best practice that Raven should follow?

She should create the Domain Naming Master role on DC1.

A recently promoted employee at your company has called you because they attempted to log in to their computer several times with a password created after a password expiry notice, but the attempts made were unsuccessful. You have reset the user's account password, but the user is still unable to log in. What is most likely the cause of the failure?

The user's account has been locked because of frequent failed password attempts.

What are the necessary conditions and permissions required to raise domain or forest functional levels?

To raise the forest functional level, you need administrative permissions to access the properties and raise the domain functional level.

Ahmad, a system administrator in an organization, is setting up new Active Directory domains for the Marketing and Sales teams in the organization. Previously, all the marketing and sales employees worked as a single team. Recently, the employees in these teams were reorganized into two separate teams. He is setting up Active Directory domains on Windows 2019 Server to reflect the organizational structure. What is the minimum number of domain controllers that Ahmad should add to the Marketing domain?

Two

You are the system administrator at an organization. Most of the servers in your organization, including domain controllers, are running Windows Server 2012 and above. Some servers, excluding domain controllers, are running Windows Server 2008 R2. Most of the clients are running Windows 10, but a few systems are running Windows 7. You have been tasked with improving the security measures of the Active Directory forest by restricting malicious access to Active Directory. You decide to use Privilege Access Management. What should you do next?

Update all the domain controllers running Windows Sever 2012 to Windows Server 2016

Anahira is the system administrator at an organization that has offices in two different locations, New York and Sao Paulo. She decides to create sites for each location, NewYorkSite and SaoPauloSite, to improve Active Directory replication. Once she creates the sites, she associates NewYorkSite with the IP address 10.1.0.0/16. Which of the following is true of this scenario?

When new domain controllers are added to this network, they will be added to NewYorkSite by default.