Flashcards
MICROSOFT ACTIVE DIRECTORY FINAL
Cards in this deck (62)
- 1A method of controlling settings across your networkGroup Policy
- 2contain all the Group Policy settings that you wish to implement to user and computer objects within a site, domain, or OU.Group Policy Object (GPO)
- 3MMC snap-in that is used to create and modify Group Policies and their settingsGroup Policy Management Console (GPMC)
- 4Administrative Templates are files with the ______ extension.admx
- 5Config this setting on an individual GPO link forces a particular GPO's settings to flow down through the AD, without being blocked by any child OUsEnforce
- 6directory object includes subcontainers that hold GPO policy informationGroup Policy Container (GPC)
- 7Administrators find that _____ ______ implementation helps them to achieve centralized managementGroup Policy
- 83 subnodes within the Computer Configuration and User Configuration nodesSoftware Settings,
Windows Settings, and
Administrative Templates - 9Config this setting on a container object will block all policies from parent containers from flowing to this containerBlock Policy Inheritance
- 10Allows you to specify a more or less stringent password policy for this subset than the password policy defined for the entire domainFine-Grained Password Policies
(FGPP) - 11The default mechanism for authenticating domain users in Windows Server 2008, 2003, and 2000Kerberos Policy
- 123 Subcategories of Local PoliciesUser Rights Assignment
Security Options
Audit Policy - 13allows the admins to log successful and failed security, such as logon events, account access, and object accessAudit Policy
- 14allows an admin to specify group membership listsRestricted Groups
- 15This is a Group Policy option that provides an alternative method of obtaining the ordered list of GPOs to be processed for the userLoopback Processing
- 16Configured on the Sharing tab of a folderOffline Files
- 17By default, computer policies are updated in the background every ___ minutes90
- 18System Development Life Cycle contain 4 phases :Planning
Implementation
Maintenance
Removal - 19Helpful when you are deploying required applications to pertinent users and computersAssign Option
- 20allows users to install the applications that they consider useful to themPublish Option
- 21Use this option to provide all installation messages and screens for users during the installation of all packages in the GPOMaximum
- 22By default, the Software Restriction Policies are has an ____ value in the Default Security Level settingUnrestricted
- 23a series of bytes with a fixed length that uniquely identifies a program or file. Using a ___ ___ on an app executable will check the file's hash value and prevent the app from running if the hash value is not correctHash;
Hash Rule - 24identifies software by specifying the directory path where the application is stored in the file systemPath Rule
- 25This info includes hardware, Group Policy Software Installation settings, Internet Explorer Maintenance settings, scripts, Folder Redirection settings, and Security settingsCommon Information Management Object Model (CIMOM)
- 26use command _______ to obtain RSoP info on computer and user policies that will affect Sseelygpresult /user sseely /v
- 27a command-line tool that allows you to create and display an RSoP query from the command lineGPResult
- 28Using the __ ___ ___ policy setting, you can prevent policy settings from applying to all child objects at the current level and all subordinate levelsBlock Policy Inheritance
- 29Uses the signing cert of an app, can be used to allow software from a trusted source to run or prevent software that does not come from a trusted source from runningCertificate Rule
- 30Only __ WMI filter can be configured per GPOone
- 31method that uses filters written in the WMI Query Language (WQL), similar to SQL, to control GPO applicationWMI Filtering
- 32Windows Server Backup supports the use of __ and __ drives as backup destinations, but doesn't support ___ ___ as backup mediaCD, DVD
Magnetic Tapes - 33Apply only to Windows Installer packages that attempt to install from a specified zone, such as a loyal comp, a local intranet, trusted sites, restricted sites, or the InternetNetwork Zone Rules
- 34If you find yourself in a position where you need to restore an object or container within Active Directory that has been deleted, you perform an....Authoritative restore
- 35these are the specific processes or events that you want to trackPerformance Counters
- 36to assist you with obtaining more detailed info in the event logs, you can set the event logs to record diagnostic info specific to processes related to ___ ____Active Directory
- 37this command-line tool can analyze the state of the domain controllers in the forest or enterprise and reports any problems to assist in troubleshootingDcdiag
- 38___ backup will reformat the target drive that hosts the backup files, and thus can only be performed on a loyal physical drive that does not host any critical volumesScheduled
- 39the ___ command-line utility allows you to perform an authoritative restoreNtdsutil
- 40a ____ restore will restore the Active Directory objects with their original Update Sequence Number (USN), which is the number that each DC assigns to every transaction that is either originated on the DC or replicated from another DCNonauthoritative
- 41the ___ database is used through WMI and contains information that is gathered when a computer starts and becomes part of the networkCommon Information Management Object Model (CIMOM)
- 42resource record is the functional opposite of the A record, providing an IP address-to-name mapping for the system identified in the Name field using the in-addr.arpa domain namePointer (PTR)
- 43Windows Server 2008 Active Directory clients rely on the __ ___ to locate the domain controllers they need to validate logon requestsService Record (SRV)
- 44At the top of the domain hierarchy are the__ ___ ___, which are the highest level DNS servers in the entire namespaceRoot Name Servers
- 45in a __ query, the DNS server receiving the name resolution request takes full responsibility for resolving the nameRecursive
- 46a DNS server that contains no zones and hosts no domainsCaching-only server
- 47Contains the master copy of the zone database, in which admins make all changes to the zone's resource recordsPrimary Zone
- 48Resource record identifies which name server is the authoritative source of info data within this domainStart of Authority (SOA)
- 49ACL allows a user to perform any action against a particular template; should be reserved for CA admins onlyFull Control
- 50ACL allows users or computers to manually request a cert based on the templateEnroll
- 51in an ___ query, the server that receives the name resolution request immediately responds to the requester with the best info it possessesIterative
- 52A ___ is a DNS server that receives queries from other DNS servers that are explicitly configured to send themFowarder
- 53forwards queries selectively based on the domain specified in the name resolution requestConditional Forwarder
- 54a read-only of the data that contains a backup copy of the primary master zone database file, stored as a identical text file on the server's local driveSecondary Zone
- 55A copy of a primary zone that contains SOA and NS resource records, plus the Host (A) resource records that identify the authoritative servers for the zoneStub Zone
- 56is an entity, such as Windows Server 2008 server running the AD CS server role, that issues and manages digital certificates for use in a PKICertification Authority (CA)
- 57These are templates used by a CA to simplify the administration and issuance of digital cerificatesCertificate Templates
- 58small physical devices, usually the size of a credit card or keychain fob, have a digital cert installed on themSmart Cards
- 59Not integrated with Active Directory and requires administrator intervention to respond to certificate requestsStandalone CA
- 60Integrates with an Active Directory domain, can use certificate templates to allow autoenrollment of digital certs, as well as store the certs themselves within the AD databaseEnterprise CA
- 61this ACL allows users or computers to be automatically issued certs based on this templateAutoenroll
- 62these are used to request certificates on behalf of a user, computer, or service if self-enrollment is not practical or is otherwise an undesirable solution for reasons of security, auditing, and so onEnrollment Agents
Information
- Description
- Flashcards on MICROSOFT ACTIVE DIRECTORY FINAL, created by maxwell3254 on 10/02/2015.
- Created by
- maxwell3254
- Views
- 1,006
- Rating