Flashcards
MICROSOFT ACTIVE DIRECTORY MIDTERM
Cards in this deck (63)
- 1the process of keeping each domain controller in synch with changes that have been made elsewhere on the networkREPLICATION
- 2interoperability with prior versions of Microsoft Windows is available in Windows Server 2008FUNCTIONAL LEVELS
- 3The largest container object within Active DirectoryFOREST
- 4References an object in the Active Directory structure using its entire hierarchial path, starting with the object itself including all parents objects up to the root of the domainDISTINGUISHED NAME
- 5has been Active Directory's default name resolution methodDOMAIN NAME SYSTEM
- 6Are the locator records within DNS that allow clients to locate an Active Directory domain controller or global catalogSRV RECORDS
- 7the functional level allows no backward compatibility. Only Windows server 2008 domain controllers are supportedWINDOWS SERVER 2008
- 8this level allows backward compatibility with Microsoft Windows 2000WINDOWS 2000 NATIVE
- 9this functional level allows Windows Server 2003 and Windows Server 2008 domain controllers onlyWINDOWS SERVER 2003
- 10transitive in nature and they can be configured as either a one-way or two-way relationshipCROSS FOREST TRUSTS
- 11adds a domain controller to an existing environment and adds a new domain tree to an existing forestDCPROMO
- 12the process of replicating DNS information from one DNS server to anotherZONE TRANSFER
- 13the process of removing records that were not refreshed or updated within specified time intervals, which will occur naturally with machines that are removed from the networkSCAVENGING
- 14necessary for computer hostname-to-IP address mappings, which are used for for name resolution by a variety of servicesFOWARD LOOKUP ZONES
- 15DNS resolves the IP address to a host nameREVERSE LOOKUP ZONE
- 16a special installation option that creates a minimal environment for running only specific services and rolesSERVER CORE
- 17can be used to shorten the "Tree-walking" process for users who require frequent access to resources elsewhere in the forestSHORTCUT TRUST TYPE
- 18allows you to create two-way transitive trusts between separate forestsCROSS-FOREST TRUSTS
- 19used to configure a one-way nontransitive trust with a Windows 2000 domain or a single domain in a external organizationEXTERNAL TRUSTS
- 20allow you to configure trust relationships between Window Server 2008 Active Directory and a UNIX MIT Kerberos realmREALM TRUSTS
- 21Active Directory uses this to control replication trafficSITES
- 22Domain controllers that reside within the same siteINTRASITE REPLICATION
- 23Domain controllers located in different sitesINTERSITE REPLICATION
- 24Active Directory installation wizard which you can see in the Active Directory Sites and Services toolDEFAULT-FIRST-SITE-NAME
- 25INTERSITE REPLICATION PRIMARY GOALto minimize bandwidth usage
- 26BOTH INTRASITE AND INTERSITE REPLICATION USE THISRemote Procedure Calls over Internet Protocol (RPC over IP)
- 27acts as a central repository by holding a complete copy of all objects from the host server's local domain along with a partial copy of all objects from other domains within the same forestGLOBAL CATALOG
- 28WHEN A USER INITIATES A SEARCH FOR AN OBJECT IN ACTIVE DIRECTORY THE REQUEST IS AUTOMATICALLY SENT TO THIS PORTTCP port 3268
- 29TRUE/FALSE each site should contain a global catalog server to facilitate user logonsTRUE
- 30responsible for assigning relative identifiers to domain controllers in the domainRELATIVE IDENTIFIER MASTER (RID)
- 31responsible for reference updates from its domain objects to other domainsINFRASTRUCTURE MASTER
- 32provides backward compatibility with Microsoft Windows NT 4.0 domains. Password changes, account lockouts, and time synchronization for the domain will also be managed by thisPRIMARY DOMAIN CONTROLLER (PDC) EMULATOR
- 33RID, infrastructure master, and PDC emulatorDOMAIN SPECIFIC
- 34Domain naming master and schema masterFOREST SPECIFIC
- 35responsible for managing changes to the Active DirectorySCHEMA MASTER
- 36has the authority to manage the creation and deletion of domains, domain trees, and application data partitions in the forestDOMAIN NAMING MASTER
- 37process is used when you move a FSMO role gracefully from one domain controller to anotherROLE TRANSFER
- 38procedure is used only when you have experienced a failure of a domain controller that holds a FSMO role. Seizing a role can be defined as forced, ungraceful transferROLE SEIZURE
- 39view the RID Master, PDC Emulator, or Infrastructure MasterConsole : ACTIVE DIRECTORY USERS AND COMPUTERS
- 40to view the Schema MasterConsole : ACTIVE DIRECTORY SCHEMA
- 41to view Domain Naming Master (DNS)Console : ACTIVE DIRECTORY DOMAINS AND TRUSTS
- 42is the process of confirming a user's identity using a known value such as a password, smart card, or biometric meansAUTHENTICATION
- 43the process of confirming that an authenticated user has the correct permissions to access one or more network resourcesAUTHORIZATION
- 44accounts used to access the local computer only and are stored in local Security Account Manager (SAM) database where they resideLOCAL ACCOUNTS
- 45these accounts are used to access Active Directory or network based resources, such as shared folders or printersDOMAIN ACCOUNTS
- 46these accounts are automatically created when Microsoft Windows Server 2008 is installedBUILT-IN USER ACCOUNTS
- 47describes the process of configuring one or more groups as members of another groupGROUP NESTING
- 48security-related groups created for purposes of granting resource access permissions to multiple usersSECURITY GROUPS
- 49nonsecurity-related groups created for the distribution of information to one or more personsDISTRIBUTION GROUPS
- 50controls which objects the group can contain, limiting the objects to the same domain or permitting objects from remote domains as well, and controls the location in the domain or forest the group can be usedGROUP SCOPES
- 51can be used to grant or deny permissions to any resource located in any domain in the forestGLOBAL GROUPS
- 52used to assign permissions to resources that reside only in the same direction as the domain local groupDOMAIN LOCAL GROUPS
- 53ALL DEFAULT GROUPS ARE....security groups
- 54you cannot manually modify the group membership, nor can you view their membership listsSPECIAL IDENTITY GROUPS
- 55is a special identity group that contains all authenticated users and domain guestsEVERYONE GROUP
- 56used to import or export Active Directory information from a comma-separated value (.csv) file.COMMA-SEPARATED VALUE DIRECTORY EXCHANGE (CSVDE)
- 57can be used to add, delete, or modify objects in Active Directory, in addition to modifying the schemaLDAP DATA INTERCHANGE FORMAT DIRECTORY EXCHANGE (LDIFDE)
- 58can be used to create, delete, view, and modify Active Directory objects including users, groups, and OUsDSADD
- 59an alphanumeric sequence of characters that you enter with a username to access a server, workstation, or shard resourcePASSWORD
- 60an attempt to discover a user's passwordPASSWORD-CRACKING
- 61password cracking can be accomplished by intelligent guessing on the part of the hacker or through the use of automated tools to try every possible combination of characters until correct sequence is discoveredDICTIONARY ATTACK
- 62Strong passwords are required when Active Directory is installedWINDOWS SERVER 2008
- 63you utilize a simple interface to delegate permissions for domains, OUs, or containersDELEGATION OF CONTROL WIZARD
Information
- Description
- Flashcards on MICROSOFT ACTIVE DIRECTORY MIDTERM, created by maxwell3254 on 07/02/2015.
- Created by
- maxwell3254
- Views
- 821
- Rating