Chapter 14+ Chapter 15

What can be used to add, delete, or modify objects in Active Directory, in addition to modifying the schema if necessary? DCPROMO LDIFDE CSVDE NSLOOKUP

LDIFDE

Who may join a computer to the domain? No one, the computer does this itself when authenticating. The computer joins the domain as part of the object creation process. Only the domain administrator may join the computer to the domain. Members of the computer's local Administrators group may join the computer to the domain.

Members of the computer's local Administrators group may join the computer to the domain.

Which of the following is a container object within Active Directory? Folder Group User OU

OU

Which of the following groups do you use to consolidate groups and accounts that either span multiple domains or the entire forest? Global Domain local Built-in Universal

Universal

In a domain running at the Windows Server 2012 R2 domain functional level, which of the following security principals can members of a global group? (Choose all answers that are correct.) Users Computers Universal groups Global groups

Users Computers Global groups

Creator Owner and Authenticated Users are two examples of:

Special groups

You are attempting to delete a global security group in the Active Directory Users and Computers console, and the console will not let you complete the task. Which of the following could possibly be causes for the failure? (Choose all answers that are correct.) There are still members in the group. One of the group's members has the group set as its primary group. You do not have the proper permissions for the container in which the group is located. You cannot delete global groups from the Active Directory Users and Computers console.

You do not have the proper permissions for the container in which the group is located. One of the group's members has the group set as its primary group.

If the user named Amy is located in the sales OU of the central.cohowinery.com domain, what is the correct syntax for referencing this user in a command line utility? amy.cohowinery.com cn=amy.ou=sales.dc=cohowinery.com cn=amy,ou=sales,dc=central,dc=cohowinery,dc=com dc=com,dn=cohowinery,ou=sales,cn=amy

cn=amy,ou=sales,dc=central,dc=cohowinery,dc=com

You are planning an Active Directory implementation for a company that currently has sales, accounting, and marketing departments. All department heads want to manage their own users and resources in Active Directory. What feature will permit you to set up Active Directory to allow each manager to manage his or her own container but not any other containers? Delegation of control Read-only domain controller Multimaster replication SRV records

Delegation of control

What do you call the process of configuring one or more groups as members of another group?

Nested groups

What is the interface within ADAC that simplifies the delegation of permissions for domains, OUs, or containers?

delegation wizard

Which of the following is not a type of user account that can be configured in Windows Server 2012 R2? local accounts domain accounts network accounts built-in accounts

network accounts

Which of these groups is not related to security and cannot have permissions assigned to it? Universal groups Global groups Domain local groups Distribution groups

Distribution groups

Which of the following group scope modifications are not permitted? (Choose all answers that are correct.) Global to universal Global to domain local Universal to global Domain local to universal

Global to domain local Universal to global

What is the Windows PowerShell cmdlet syntax for creating a new computer object? New-Computer -Name <computer name> -path <distinguished name> New-ADComputer -Name <computer name> -path <distinguished name> New-ComputerName <computer name> -path <distinguished name> There is no PowerShell cmdlet for creating computer objects.

New-ADComputer -Name <computer name> -path <distinguished name>

What is the Windows PowerShell cmdlet syntax for creating a new user account? New-ADUser New-User New-SamAccountName There is no PowerShell cmdlet for user creation.

New-ADUser

Which of the following is NOT a group scope? Universal groups Global groups Domain local groups Security groups

Security Groups

Which of the following utilities do you use to perform an offline domain join? net join join djoin dconnect

djoin

When using CSVDE, what is the first line of the text file that uses proper attribute names? header row header record name row name record

header record

Which of the following are the two built-in user accounts created automatically on a computer running Windows Server 2012 R2? Network Interactive Administrator Guest

Administrator; guest

Of the key reason for creating organizational units, which of the following is NOT one of them? Delegating administration Assigning Group Policy Settings Duplicating organizational divisions Assigning permissions to network resources

Assigning permissions to network resources

How do groups differ from OU's? Groups are security principals, meaning you assign access permissions to a resource based on membership in a group. OU's are for organization and for assigning Group Policy settings Groups are created by server manager but you create OU's by scripts OUs are security principals, meaning you assign access permissions to a resource based on membership in a group. Groups are for organization and for assigning Group Policy settings. Organizational units are container objects made from the active directory users and computers consoles

Groups are security principals, meaning you assign access permissions to a resource based on membership in a group. OU's are for organization and for assigning Group Policy settings

When using Netdom.exe to join an account, you may add the parameter [/OU:OUDN]. If this parameter is left out, where is the object placed? In the same organizational unit (OU) as the administrator running Netdom.exe In the Users container In the Computers container Without the OU specified, the program will fail.

In the Computers container

Which of the following is not a correct reason for creating an OU? To create a permanent container that cannot be moved or renamed To duplicate the divisions in your organization To delegate administration tasks To assign different Group Policy settings to a specific group of users or computers

To create a permanent container that cannot be moved or renamed