Quiz
Chapter 4
Erstelle ein kostenloses Konto, um dieses Quiz zu beenden
Speichere deinen Fortschritt und sieh dir dein Endergebnis an.
oder mit deiner E-Mail registrieren
Schon ein Konto? Anmelden
Fragen in diesem Quiz (30)
1How are changes made within Active Directory maintained on different domain controllers?
- AThe configurations will copy to each domain controller one at a time.
- BThe primary domain controller on the network must be notified of the changes, after which other secondary DCs will pull changes from the master.
- CThe domain controllers must manually sync their configurations.
- DMultimaster replication is used to replicate changes to other DCs.
2What happens if a user attempts to sign in while the global catalog server for the domain is offline?
- AThe user will be allowed to sign in to the network with cached credentials.
- BThe user will be allowed to sign in only to the local computer.
- CThe user will be allowed to log in, but group membership information will not be loaded.
- DThe user will not be allowed to log in.
3What statement regarding functional domain functional levels is accurate?
- AThe functional level does not affect the features available for use on the domain.
- BUnlike forest functional levels, you can revert back to earlier domain functional levels.
- CThe functional level at both the domain and forest level should be set to the lowest version of Windows Server used.
- DThe functional levels are not OS specific, and any Windows Server OS can be configured to run at newer functional levels.
4What is the minimum forest functional level should you use if you wish to make use of the protected users security group?
- AWindows Server 2012 R2
- BWindows Server 2008 R2
- CWindows Server 2016
- DWindows Server 2008
5What statement regarding trust relationships between domains is accurate?
- ADue to the trust relationship between parent and child domains, any one domain can have access to the resources of all others.
- BThe security in a two-way trust relationship between domains is based on RADIUS security techniques.
- CA new domain joining a tree has no trust relationships with the other domains in the same tree.
- DIf domain A and B have a trust and domain B and C have a trust, domain A does not automatically trust domain C.
6What domain functional level removes compatibility for Network Access Protection?
- AWindows Server 2016
- BWindows Server 2008 R2
- CWindows Server 2012 R2
- DWindows Server 2012
7What feature provided at the Windows Server 2012 domain functional level creates a secure channel or tunnel between a client seeking authentication for a computer service and the server providing secure access keys for secure communications?
- ATunneled Authentication Security (TAS)
- BFlexible Authentication Secure Tunneling (FAST)
- CKerberos Hardening Policy (KHP)
- DSecure Tunneling Authentication Protocol (STAP)
8What is NOT a true statement to keep in mind when designing an OU structure?
- ACreation of OUs involves more processing resources because each request through an OU requires CPU time.
- BMicrosoft recommends nesting OUs at least four levels deep.
- CActive directory works more efficiently when OUs are set up horizontally.
- DNested OUs should be used sparingly to maintain simplified administration.
9What is the most typically used boundary for an Active Directory site?
- AA site boundary is typically defined by a domain.
- BA site boundary is typically defined by a network or subnet boundary.
- CA site boundary is typically defined by an administrative boundary.
- DA site boundary is typically defined by an OU.
10When replication occurs between sites, what servers are involved in replication?
- AReplication between the two sites occurs between global catalog servers on both sides.
- BAll the servers in one site sync directly with the servers of the remote site.
- CReplication between the sites is handled by randomly picked DCs on both sides.
- DReplication only occurs between two bridgehead servers.
11What tab under a user's account properties allows you to define the hours at which the user is able to log on to the domain?
- AAccess tab
- BAccount tab
- CProfile tab
- DOrganization tab
12A recently promoted employee at your company has called you because they attempted to log in to their computer several times with a password created after a password expiry notice, but the attempts made were unsuccessful. You have reset the user's account password, but the user is still unable to log in. What is most likely the cause of the failure?
- AThe user's account has been locked due to frequent failed password attempts.
- BThe user is in a new OU and lacks log on permissions to the computer used.
- CThe computer is having issues communicating with the domain and is attempting to use cached credentials.
- DThe global catalog server has not replicated the user's account information to the rest of the domain.
13After deleting an account, what happens to the associated GUID?
- AThe GUID will be reused, but only by another account using the same name.
- BThe GUID will be permanently deleted and never re-used.
- CThe GUID will be recycled and reused by another newly created user or object.
- DThe GUID remains in the domain database information to provide restoration options.
14What type of group is typically used to manage resources in a domain?
- ADomain local group
- BLocal group
- CUniversal group
- DGlobal group
15How do you make a user profile a mandatory profile, preventing all changes?
- ARename the Ntuser.dat file to Ntuser.man in the user's profile directory.
- BCheck the "mandatory profile" box under the user account's properties.
- CCreate the Manual.ini file in the user profile's directory.
- DChange the permissions on the Ntuser.dat file to read only.
16When using the protected users global group, what is not a valid security restriction imposed on the group?
- AOnly computers running Windows 7 or higher can be made member computers.
- BOnly higher-level encryption methods compatible with Kerberos security, such as Advanced Encryption Standard (AES) can be used.
- CConnections to systems that do not utilize this global group may not succeed.
- DGroup members cannot use weaker forms of authentication, such as NTLM, CredSSP, or digest authentication.
17For members of a protected users global group, how often must the Kerberos Ticket Granting Ticket be renewed?
- A4 hours
- B6 hours
- C8 hours
- D10 hours
18What kind of group is used for e-mail or telephone lists, to provide quick, mass distribution of information?
- Adomain local groups
- Bdistribution groups
- Cglobal groups
- Duniversal groups
19Under what conditions can a global group be converted to a universal group?
- AIt can be converted as long as it is not nested in another global group or in a universal group.
- BIt can be converted regardless of nested memberships.
- CIt can be converted as long as it is not nested in a local group.
- DIt can be converted as long as it is not nested in a domain group.
20You are attempting to create a new universal group but find that the radio button in the Create New Object - Group dialog box is deactivated. What is the issue?
- AYou are not creating the group on the global catalog server.
- BYou are trying to create a universal group in an OU without the permission to do so.
- CYou are attempting to create a universal group within another universal group.
- DYou are operating in a domain with a Windows 2000 domain functional level.
21According to Microsoft, what is the minimum number of DCs that should be present in any organization using Active Directory?
- AFour
- BThree
- CSix
- DTwo
22What is NOT an attribute that must be defined for each Active Directory account?
- AAccount holder's e-mail address
- BDomain
- CSign-in name
- DUser's full name
23When should an organization consider using Microsoft Azure Active Directory?
- AIt should be used when deploying Internet accessible services, such as FTP or DNS.
- BIt should be used when a user needs remote access from another location outside the domain.
- CIt should be used when using IIS as a web server for customer logins.
- DIt should be considered if the organization subscribes to Office 365 services, or other compatible web services.
24What symbol cannot be used in an account name in Windows Server 2016?
- A_
- B:
- C!
- D-
25What statement regarding Active Directory objects that can be members of a domain local group is NOT accurate?
- ADomain local groups in the same domain can be members of the group.
- Buser accounts in the same domain can be members of the group.
- CGlobal groups in any domain in a tree or forest, as long as a transitive or two-way trust relationship is maintained, can be a member of the group.
- DUniversal groups in any domain in a tree or forest can be a member of the domain local group, without requiring a trust relationship.
26In an Active Directory forest, all trees use the same schema.
- ARichtig
- BFalsch
27A transitive trust means that if A and B have a trust and B and C have a trust, A and C automatically have a trust as well.
- ARichtig
- BFalsch
28An Organizational Unit cannot be nested within another Organizational Unit.
- ARichtig
- BFalsch
29A Read-Only Domain Controller (RODC) cannot be used to update information in Active Directory, and it does not replicate to regular DCs.
- ARichtig
- BFalsch
30You can't convert a domain local group to a universal group.
- ARichtig
- BFalsch
Informationen
- Beschreibung
- CS 205 - Windows Server Admin Quiz am Chapter 4, erstellt von Nathanael Key am 01/03/2018.
- Autor
- Nathanael Key
- Sprache
- English
- Aufrufe
- 0
- Schlagwörter
- Bewertung
- Noch keine Bewertungen Bewerte dieses Quiz