Test
Quiz 15 & 16
Crea una cuenta gratis para terminar este test
Guarda tu progreso y consulta tu resultado final.
¿Ya tienes cuenta? Inicia sesión
Preguntas del test (35)
1Where are you most likely to see a Read-Only Domain Controller (RODC)?
- Ain a small network instead of in an enterprise
- Bin an enterprise network
- Cin a remote site
- Din the place of a standard domain controller
2Which of the following is the format for a virtual account used with Windows Server 2008 R2, Windows Server 2012, and Windows Server 2012 R2?
- Adomainname\servicename
- Bcomputername\servicename
- CNT Service\servicename
- DNT Service\servicename$
3NTLM uses a challenge-response mechanism for authentication without doing what?
- Arevealing the client's operating system to the server
- Brevealing the protocol to the server
- Csending a password to the server
- Dsending an encrypt/decrypt message to the server
4Which three components make up a service principal name (SPN)
- Aservice name, IP address, and port number
- Bservice name, URL and host name
- Cservice name, host name, and IP address
- Dservice class, host name, and port number
5Before you can create an MSA object type, you must create what?
- Aa key services MSA group
- Ba key services MSA distributed domain account
- Ca key distribution services root key
- Da key distribution services Master MSA
6What are the two restrictions for adding SPNs to an account?
- ADomain Administrator privileges
- Bfull control permissions for the folder
- Clocal administrator privileges
- Dthe editor runs from the domain controller
7Although the changes are easy to make, why is changing the AD schema such a big deal
- AThe changes replicate to all domain controllers.
- BThe changes could corrupt the database.
- CDoing so affects all objects for that object type.
- DDoing so requires controlled changes.
8Where in the forest is a global catalog automatically created?
- Athe PDC Emullator
- Bthe most powerful system
- Cthe first domain controller
- Dthe schema master
9You do not place the infrastructure master on a global catalog server unless what situation exists?
- AYou have a single domain
- BYou have Windows NT 4.0 systems to support
- CYou have multiple schemas
- DYour AD DS is Windows 2008 or higher
10Beginning with which server version can you safely deploy domain controllers in a virtual machine?
- AWindows Server 2003
- BWindows Server 2008
- CWindows Server 2008 R2
- DWindows Server 2012
11Which of the following commands issued at the fsmo maintenance prompt would successfully seize the role of an Operations Master Holder? Select all that apply
- Aseize schema master
- Bseize global master
- Cseize PDC
- Dseize domain control
12Identify another utility that you can use to add SPNs to an account
- Adnscmd
- Bspnedit
- Csetspn
- Dnetsh
13What happens if a client submits a service ticket request for an SPN that does not exist in the identity store?
- AAn event is written to the Kerberos server's event log.
- BThe client receives an access denied error
- CThe Kerberos server receives an access denied error
- DThe Kerberos ticket for that service is destroyed.
14Kerberos security and authentication are based on what type of technology?
- Asecure transmission
- Bsecret key
- Cchallenge-response
- Dlegacy code
15What is the default maximum allowable time lapse between domain controllers and client systems for Kerberos to work correctly?
- A1 minute
- B5 minutes
- C15 minutes
- D45 minutes
16When creating accounts for separating systems, processes, and services, you should always configure them with what two things in mind?
- Ausing strong passwords
- Busing cryptic user names
- Cgranting the least rights possible
- Dusing built-in accounts
17What is the name by which a client uniquely identifies an instance of a service?
- Aservice instance name
- Bservice account name
- Cservice provider name
- Dservice principal name
18What is the default authentication protocol for contemporary domain controllers
- ANTLM
- BPAP
- CCHAP
- DKerberos
19Which version of Windows Server introduced incremental universal group membership replication?
- AWindows Server 2000
- BWindows Server 2003
- CWindows Server 2008
- DWindows Server 2012
20What are the three types of groups in a domain?
- Adomain trust groups, domain schema groups, and universal groups
- Bdomain local groups, global groups, and universal groups
- Cglobal groups, domain trust groups and schema groups
- Duniversal groups, global catalog groups and schema groups.
21When you add attributes to an Active Directory object, what part of the domain database are you actually changing?
- AFSMO
- Bschema
- Cdirectory structure
- Dorganizational units
22The domain controllers are the computers that store and run the:
- Auser database
- Bservices database
- CManaged Service Accounts database
- DActive Directory database
23Which Active Directory object is defined as a specialized domain controller that performs certain tasks so that multi-master domain controllers can operate and synchronize properly?
- ASchema Master
- BForest
- CRODC
- DOperations Master
24What service right does an MSA account automatically receive upon creation?
- Alog on interactively
- Blog on as a service
- Cdomain administrator
- Ddomain power user
25Name two benefits to using Managed Service Accounts (MSAs).
- AMicrosoft technology
- Bautomatic password management
- Csimplified SPN management
- Dsimplified account troubleshooting
26What does the acronym NTLM stand for?
- ANT LInk Messenger
- BNT Link Manager
- CNT LAN Manager
- DNT LAN Messenger
27Which command-line command do you use to allow Windows Server 2003 domain controllers to replicate to RODCs?
- Anetdom /RODCPrep
- Bnetsh /RODCPrep
- Cntdsutil /RODCPrep
- DADPrep /RODCPrep
28Which tool can you use to add SPNs to an account?
- ANotepad
- BLDAP
- CMicrosoft Word
- DADSI Edit
29How many global catalogs are recommended for every organization?
- Aat least one
- Bat least two
- Cat least three
- Dno fewer than four
30How many PDC Emulators are required, if needed, in a domain?
- Aone
- Btwo
- Cthree
- Dfour
31By default, which service accounts will the Windows PowerShell cmdlets manage?
- Astandalone MSAs
- Bstandard local services accounts
- Cgroup MSAs
- Ddomain user accounts designated as service accounts
32What type of account is an account under which an operating system, process, or service runs?
- Auser
- Bsystem
- Cservice
- Dnetwork
33The global catalog stores a partial copy of all objects in the forest. What are the reasons for keeping that partial copy? Select all that apply.
- Alogon
- Bobject searches
- Cuniversal group membership
- Dschema integrity
34Which type of system must you connect to and use to make changes to Active Directory?
- ARODC
- Bforest master
- Cwritable domain controller
- Ddomain tree
35What utility must you run on a cloned system to ensure that the clone receives its own SID?
- Aadprep/renew
- Bsysprep
- Cdcpromo
- Dntconfig
Información
- Descripción
- 70-411 Final College Exam
- Autor
- Michael Marcus
- Idioma
- English
- Visitas
- 528
- Etiquetas
- Valoración
- 5,0 de 5 · 1 valoración Valora este test