Module 4 Review Questions

Your domain consists of two separate physical locations. Each location contains several domain controllers, and you have noticed that domain controller replication traffic consumes a large amount of your Internet bandwidth. What can you do within Active Directory Sites and Services to ensure that replication occurs outside of business hours? (Choose all that apply.) a. Create a site object for each physical location, and ensure that domain controller objects are placed within the correct site object. b. Create subnet objects for each site. Ensure that the properties of each subnet object contains a schedule that excludes business hours. c. In the properties of a site link object, configure a replication schedule that excludes business hours. d. Modify the NTDS Site Settings for each site to include a replication schedule that excludes business hours.

a. Create a site object for each physical location, and ensure that domain controller objects are placed within the correct site object. c. In the properties of a site link object, configure a replication schedule that excludes business hours.

Which functions does the global catalog provide? (Choose all that apply.) a. Fast object searching b. Time synchronization c. Universal group membership d. Domain authentication using UPNs

a. Fast object searching c. Universal group membership d. Domain authentication using UPNs

Which of the following occurs when you join a computer to an Active Directory domain? (Choose all that apply.) a. The Domain Users group is added to the local Users group b. A computer account is created within Active Directory, if one has not been prestaged c. The Domain Admins group is added to the local Administrators group d. The SAM database is replaced by the Active Directory database

a. The Domain Users group is added to the local Users group b. A computer account is created within Active Directory, if one has not been prestaged c. The Domain Admins group is added to the local Administrators group

Which of the following PowerShell cmdlets can be used to move or seize a FSMO role? a. Move-FSMORole b. Move-ADDirectoryServerOperationMasterRole c. Transfer-ADOperationMasterRole d. Set-DirectoryServerOperationMaster

b. Move-ADDirectoryServerOperationMasterRole

You wish to add a copy of the global catalog to a domain controller within Active Directory Sites and Services. For which object must you right-click and select Properties? a. server b. NTDS settings c. NTDS site settings d. site link

b. NTDS settings

Which of the following FSMO roles are stored on one domain controller within each domain? (Choose all that apply.) a. Schema Master b. PDC Emulator c. RID master d. Domain Naming Master

b. PDC Emulator c. RID master

Which of the following group scopes can contain objects from any domain within the forest? (Choose all that apply.) a. global b. domain local c. distribution d. universal

b. domain local d. universal

Which of the following domain functional levels provides Kerberos armoring? (Choose all that apply.) a. windows server 2008 R2 b. windows server 2012 c. windows server 2012 R2 d. windows server 2016

b. windows server 2012 c. windows server 2012 R2 d. Windows Server 2016

You have created a template user account within Active Directory Users and Computers. What must you do to create additional user accounts based on this template user account? a. Create a new user account and select the template user account when prompted b. Create a new user account and specify the name of the template user account in the User Principle Name text box c. Right-click the template user account, and click Copy d. Right-click the template user account, and click Import

c. Right-click the template user account, and click Copy

Which default folder under a domain within Active Directory Users and Computers contains the Administrator user account and Domain Admins group? a. Builtin b. default c. users d. foreignsecurityprinciples

c. users

Which of the following trust relationships can be created between two domains in separate Active Directory forests? a. forest trust b. shortcut trust c. realm trust d. external trusts

d. external trusts

(T/F) Creating OUs within the Active Directory database is also called prestaging

false

(T/F) Domain controllers store local user accounts within a SAM database and domain user accounts within Active Directory.

false

(T/F) The Active Directory Recycle Bin can be enabled using the Active Directory Domains and Trusts tool.

false - enabled in the active directory administrative center if forest functional lvl is at least windows server 2008 R2 (this edition introduced it)

(T/F) You can use the Install-ADDSDomain cmdlet within Windows PowerShell to configure a new forest root domain.

false - use Install-ADDSForest

(T/F) Before installing Active Directory on a Windows Server system to function as an additional domain controller within a forest, you must first ensure that the Windows Server is configured to contact a DNS server that contains the appropriate service records for the forest.

true

(T/F) If a RODC (read only domain controller) is stolen, you can delete the computer account to reset affected user and computer accounts.

true

(T/F) If a global catalog cannot be placed within a branch office site, you can enable UGMC on the site to ensure branch office domain controllers provide fast authentication.

true

(T/F) The schema and configuration partitions of the Active Directory database are replicated forest-wide (replicated to all domain controllers within the forest)

true

(T/F) You must be a member of the Enterprise Admins group in order to add a trust relationship.

true