3&6 CTEC

Once Active Directory has been installed a default site link is created.. What is the name of the site link?

DEFAULTIPSLINK

Select the FSMO role that is required to be online to facilitate the addition or removal of a domain controller.

Domain Naming Master

Which of the following managing adding removing and renaming in the forest

Domain Naming Master

A managed Service account (MSA) enables administrators to manage rights and permissions for services bit with strict password management policies.

False

A site bridge is needed to connect two or more sites for replication.

False

Kerberos policies, found in a GPO, control settings related to user authentication and logon.

False

The logical components of Active Directory of Active Directory are forests, domains, and sites.

False

When a client wants to connect to a service, it finds the service based solely on the instance name.

False

if using virtual accounts to access the network, how are permissions added to a network resource to allow the virtual account access?

The resource must have proper permissions set for ComputerName$, where ComputerName is the name of the computer attempting to access the resource.

How is a computer's designated site determined, such that the computer is given a domain controller to request services from within the same site ?

Through subnets in the same site

Select the term that is record of the time a message is sent and is used in the kerberos to determine a message's validity and prevent replay attacks.

Time Stamp

By default, for how long are deleted objects stored within the Active Directory database before they are removed entirely?

180 days

What assigned value represents the bandwidth of the connection between sites.

Cost

What configuration tool must be used to create and manage MSAs ?

Powershell

In the order to force a computer to immediately download and apply all group policies, what command should be run ?

gpupdate /force

How can an administrator initiate a system state recovery using the command line ?

wbadmin start systemstaterecovery

By default, the maximum tolerance for computer synchronization is set to what value

5 Mins

By default, what is the maximum period during which a TGT can be renewed?

7 days

When a client computer wants to connect to a service instance, what specific name type does it use to find the service ?

A service principal name

Select the Account Lockout Policy item that determines how many failed logins can occur on an account before the account is locked.

Account lockout threshold

What option limits the delegation to specific services running on specific computers ?

Constrained delegation

What assigned value represents the bandwidth of the connection between sites ?

Cost Field

Select below the option that is not one of the three built-in service accounts

Local Operator

What settings specified how long a service ticket can be used before a new ticket must be requested to access the resource for which the ticket was granted ?

Maximum Lifetime for service ticket

What is the name of the domain controller on which changes can't be written ?

Read Only Domain Controller

An administrator has attempted to change the forest functional level, but the attempt failed due to the failure of an FSMO role. Which FSMO role should be investigated ?

Schema Master

During garbage collection, what setting controls how long deleted objects remain within the database before such objects are completely removed?

Tombstone Lifetime

The default domain policy is linked to the domain object and specifies default settings that affect all users and computers in the domain.

True

For automatic SPN support, what must the domain functional level be?

Windows Server 2008 R2 or higher

By default, replication between DCs when no changes have occurred is scheduled to happen how often?

Once per hour

The RID master FSMO role is ideally placed on the same server as what other role?

PDC Emulator

What Active Directory object enables an administrator to configure password settings for users or groups that are different from those defined in the GPO linked to the domain ?

Password Settings Object

Time stamps within kerberos are used to help guard against what type of attack ?

Replay Attack

A service account is user account that Windows services use to log on to a computer or domain with specific set of rights and permissions.

True

Account Polices are set in the local Security Policy MMC on computers that aren't domain members.

True

Account policies set in GPOs linked to an OU containing computer accounts affect only local user accounts defined in the computers SAM database

True

An active directory snapshot is a replica of the Active Directory database at a specific moment.

True

Delegated installation allows a domain administrator to create the RODC computer account in the Active Directory, so a regular user can perform the installation at a later time.

True

With universal group membership caching, how often is the cached information on group membership refreshed?

every 8 hours