Quiz
Quiz 17 & 18
Questions in this quiz (39)
1Which of the following ntdsutil commands cleans up metadata?
- Ametadata defrag
- Bmetadata restore
- Cmetadata cleanup
- Dmetadata repair
2Why is backing up the Windows system state necessary?
- AIt's needed to perform a full system restore
- BIt's a precautionary move against failure
- CIt's standard practice to do so
- DIn some commercial third-party software backup programs, it's mandatory.
3In interactive mode, what aspect of AD can you check with the ntdsutil integrity command?
- Alow-level database corruption
- Bfragmentation levels
- Caccuracy of entries
- Dcompleteness of entries
4What is the range of password history settings?
- A0 to 9
- B0 to 15
- C0 to 24
- D0 to 63
5What is the primary advantage of using Group Policies in a domain environment?
- Aease of enforcement
- Buser of compliance
- Ccentralized management
- Dease of creation
6How should you assign Password Settings objects (PSOs) to users?
- AAssign the PSOs directly to individual users
- BAssign the PSOs to a new group and add the users to the new group
- CAssign the PSOs to a global security group and add users to the group
- DAssign the PSOs to various Active Directory groups as needed
7By default, how often does Active Directory "garbage collection" occur?
- Aevery 45 minutes
- Bevery 2 hours
- Cevery 8 hours
- Devery 12 hours
8What is the proper procedure for removing a domain controller from Active Directory?
- AShut down the domain controller and manually remove it from AD.
- BUse dcdemo to demote the domain controller.
- CUninstall Active Directory Domain Services.
- DEnter the DSRM and delete Active Directory.
9To perform an authoritative restore, into what mode must you reboot the domain controller?
- ARepair
- BSafe
- CCommand line with networking
- DDSRM
10If a single domain controller's AD database becomes corrupt, which type of restore should you perform on it?
- Aauthoritative
- Bnonauthoritative
- Cexplicit
- Dfull
11Why can you not modify snapshots?
- AThey are encrypted.
- BThey are compressed and zipped.
- CThey are read- only.
- DThey are binary files.
12What is the default minimum password length in characters?
- A5
- B7
- C8
- D10
13Which aspect of passwords is a key component of their strength?
- Aeasy to remember
- Bnumber of characters
- Cdictionary basis
- Dkeyboard complexity
14Why primarily are account lockout policies put into place?
- Aprivacy
- Bsecurity
- Cpolicy
- Dregulations
15Why should administrator passwords change more often than user passwords?
- Abecause administrator passwords are usually simpler than user passwords.
- Bbecause administrator accounts carry more security sensitivity than users do
- Cbecause administrators are paranoid about security
- Dbecause administrator accounts are watched by management in large companies
16An Active Directory snapshot is actually what kind of backup?
- Aa shadow copy
- Ba simple file copy
- Ca compressed (zipped) copy
- Da file copy plus metadata
17What is a GUID?
- Aa unique identifier for a snapshot
- Ba special file permission
- Can Active Directory object ID
- Da group-user ID in Active Directory
18When you do an authoritative restore process, a back-links file is created. What is a back-links file?
- Aa reference to an attribute within another object
- Ba reference to metadata
- Ca pointer to the object's OU
- Da reference to a distinguished name location
19Which utility do you use to defragment Active Directory?
- ACSVDE
- BLDIFDE
- Cntdsutil
- Ddefrag
20To perform an authoritative restore of an object or subtree, what bit of information do you need to know about the object?
- Aits formal name
- Bits exact location
- Cits OU and proper name
- Dits distinguished name
21What utility first appeared in Windows Server 2000 R2 that allows you to undelete Active Directory containers and objects?
- Athe Active Directory Lost and Found folder
- Bthe Active Directory Recycle Bin
- Cthe Active Directory Undelete utility
- DActive Directory Snapshots
22What is the default setting for password history?
- A6
- B10
- C16
- D24
23Account policies contain various subsets. Which of the following are legitimate subsets of accounts policies? Check all that apply
- APassword Policy
- BAccount Lockout Policy
- CKerberos Policy
- DUsername Policy
24By default, who has read/write capability to the Default Domain Policy?
- Alocal administrators
- Bpower users
- Cdomain users
- Ddomain administrators
25By default, which of the following represents the maximum amount of time by which a computer's internal clock can be inaccurate yet still be able to use Kerberos authentication?
- A30 seconds
- B1 minute
- C5 minutes
- D8 minutes
26What setting can you give for account lockout duration that requires an administrator to manually unlock the account?
- A0
- B10
- C99
- D99,999
27Why is a setting of 0 for maximum passwords age not a good idea? Check all that apply.
- AIt means that passwords never expire, which is a major security problem.
- BIt means that your passwords expire every day.
- CIt means that you've disabled password aging.
- DIt means that you've disabled the use of passwords.
28What function does the CSVDE tool perform?
- AIt decrypts and encrypts Active Directory information
- BIt exports/imports Active Directory information
- CIt exports/imports data from Event Viewer
- DIt extracts Event Viewer information into CSV files.
29Before you can use the Active Directory Recycle Bin, what two actions do you have to perform?
- AYou have to remove the System Recycle Bin
- BYou have to enable the AD Recycle Bin.
- CYou have to set the AD forest to Windows Server 2003 or higher
- DYou have to set the AD forest to Windows Server 2008 R2 or higher.
30What is an easy method of creating a strong password?
- AUse your username and add numbers and special characters
- BUse your favorite football team's name with numbers and special characters.
- CAsk a friend for some ideas for good passwords and then add your own number and characters.
- DStart with a sentence then add numbers and special characters.
31What are examples of password policies? Select all that apply.
- Ahistory
- Blength
- Ccomplexity
- Dage
32The default maximum password age is how long?
- A12 days
- B36 days
- C42 days
- D86 days
33what character length for a password generally accepted as minimum?
- Afour
- Bsix
- Ceight
- Dfourteen
34After you undelete a user account with the LDP utility, what action do you need to perform?
- ARemove the old identifier
- BRe-establish user to domain trust.
- CReset the user's password
- DRestore the user-owned objects from a backup
35Why is backup of the Active Directory database so important?
- ABackup of all data is a good idea.
- BBackup is a standard practice in large companies.
- CBackup is needed in case of corruption, deletion, or other failure.
- DBackup is an insurance policy for data and should be performed regularly.
36What does the minimum password age setting control?
- Ahow many seconds a user must wait before a password reset
- Bhow many minutes a user must wait before a password reset
- Chow many hours a user must wait before a password reset
- Dhow many days a user must wait before a password reset
37What is the secpol.msc utility used for?
- Aediting group policies
- Bediting local security policies
- Cediting global security policies
- Dediting domain-level policies
38Which of the following passwords is considered complex?
- AM!croS0ft
- Bcandybar01
- Cbobj
- Dfred@local
39Windows Server 2012 introduces a new time-saving feature when performing tasks such as AD defragmentation. What is that feature?
- Athe DSRM console
- Bthe ntdsutil command-line utility
- CActive Directory Maintenance Mode
- DRestartable Active Directory Domain Services
Information
- Description
- 70-411 College Final Exam
- Author
- Michael Marcus
- Language
- English
- Views
- 796
- History
- Created on 29 Nov 2015 · updated on 17 Jan 2017
- Tags
- Rating
- 5.0 out of 5 · 1 rating Rate this quiz