Chapter 6
Operations master
A domain controller with sole responsibility for certain domain or forest-wide functions
Security identifier (SID)
A numeric value assigned to each object in a domain that uniquely identifies the object; composed of a domain identifier and a RID.
Authentication
A process that confirms a user's identity, and the account is assigned permissions and rights that authorize the user to access resources and perform certain tasks on the computer or domain
Directory partition
A section of an Active Directory database stored on a domain controller's hard drive
UPN
A user can use their ___________, which follows the format username@domain, to log into a computer on a domain.
object
A(n) ___________ is a grouping of information that describes a network resource, such as a shared printer; an organizing structure, such as a domain or OU; or an account, such as a user or group. BLANK
True
Active Directory's use of multimaster replication ensures that changes to AD objects are automatically replicated to all domain controllers. T/F
Infrastructure master
Select the operations master role responsible for ensuring that changes made to object names in one domain are updated in references to the object in other domains:
PDC emulator master
Select the operations master role that is responsible for providing backward compatibility with Windows NT servers configured as Windows NT backup domain controllers or member servers:
Default Domain Policy
The ____________ GPO is linked to the domain object and specifies default settings that affect all users and computers in the domain.
Domain
The core structural unit of Active Directory; contains OUs and represents administrative, security, and policy boundaries
False
The dcpromo.exe command is the preferred method for installing Active Directory on Server Core. T/F
True
The recommended minimum number of Active Directory domain controllers in a domain environment is two. T/F
Active Directory replication
The transfer of information between all domain controllers to make sure they have consistent and up-to-date information
Admin and User
What two local accounts are converted to domain user accounts when Active Directory is installed on a Windows Server 2012/R2 server? BLANK
Have at least 2 domain controllers
When installing Active Directory, what must be done to ensure minimal fault tolerance capabilities? BLANK
Install-ADDSForest
When using PowerShell, an administrator can use the ____________ cmdlet to create a new DC in a new forest.
Service user account
Which of the following choices is not one of the three user account types defined in Windows Server 2012?
Administrators
Which of the following is not one of the five folder objects that are created when Active Directory is installed?
The domain structure must be able to utilize different name identities
Which of the following scenarios is not ideal for the deployment of a single domain structure?
Only one global catalog exists per forest
Which of the following statements is true regarding the global catalog?
Zach
Who is a bitch?
because they are established automatically between all domains in a forest
Why is it unnecessary to create trust relationships between domains in the same forest? BLANK
Organizational Unit (OU)
An Active Directory container used to organize a network's users and resources into logical administrative units
Configuration partition
A directory partition that stores configuration information that can affect the entire forest, such as details on how domain controllers should replicate with one another.
much of the Active Directory database contents are copied to the new DC from media created from an existing DC
How does the Install from media (IFM) option help to reduce replication traffic between domain controllers over a WAN connection? BLANK
15 seconds, with a 3 second delay between each replication partner
How long does it take for a change to trigger intrasite replication?
5 minutes
How often are Group Policy Objects updated on domain controllers?
local, site, domain, OU
In what order are group policy settings applied?
Schema master
Which of the following choices is one of the two forest-wide FSMO roles?
Forest
A collection of one or more Active Directory trees.
Group Policy Object (GPO)
A list of settings that administrators use to configure user and computer operating environments remotely through Active Directory.
Directory Services Restore Mode (DSRM)
An administrator has discovered that several critical parts of Active Directory have been deleted. What boot mode can be used to perform restoration?
True
In order for a software package to be published in Active Directory, it must be configured in the User Configuration node of an applicable group policy. T/F
Windows Server 2008 R2
In order to use the Active Directory Recycle Bin, all DCs in the forest must be running at least what Windows Server operating system?
GPO
How can a software installation package be made available to a user as an icon on the Start Screen, which triggers the installation of the software when the icon is launched? BLANK
Using a GPO
How can a software package be assigned to a computer? BLANK
the types of objects that can be stored in Active Directory, such as user or computer accounts
In Active Directory, what do the schema classes define? BLANK
True
The Active Directory Recycle Bin is disabled by default, and can be enabled in the Active Directory Administrative Center (ADAC) T/F
3
The Knowledge Consistency Checker (KCC) ensures the maximum number of hops between any two domain controllers does not exceed what number?
SYSVOL
The __________ folder is a shared folder containing file-based information that's replicated to other domain controllers.
The structure should facilitate easier access to resources
Under what circumstances would a multi-domain structure not be an ideal choice?
Application directory partition
What Active Directory directory partition holds the DNS database?
Schema directory partition
What Active Directory partition contains the information needed to define objects and object attributes for all domains in the forest?
Add-WindowsFeature AD-Domain-Services
What PowerShell cmdlet below will install the Active Directory Domain Services role?
Active Directory Recycle Bin
What feature, once activated, can't be disabled without reinstalling all domain controllers within a forest?
Administrative Templates
What folder under Policies within the Computer Configuration Node of a GPO contains the Control Panel, Network, Printers, System, and Windows Component folders?
domain name that includes all parts of the name, including the top-level domain.
What is a fully qualified domain name (FQDN)? BLANK
It is the main root of the forest with out another root domain the forest would not exist
What is the importance of the forest root domain? BLANK
to give someone access to the computer but not have administrator rights
What is the main purpose of a user account? BLANK
OUs
What is the primary container object for organizing and managing resources in a domain?