Quiz
Quiz 15 & 16
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (35)
1Where are you most likely to see a Read-Only Domain Controller (RODC)?
- Ain a small network instead of in an enterprise
- Bin an enterprise network
- Cin a remote site
- Din the place of a standard domain controller
2Which of the following is the format for a virtual account used with Windows Server 2008 R2, Windows Server 2012, and Windows Server 2012 R2?
- Adomainname\servicename
- Bcomputername\servicename
- CNT Service\servicename
- DNT Service\servicename$
3NTLM uses a challenge-response mechanism for authentication without doing what?
- Arevealing the client's operating system to the server
- Brevealing the protocol to the server
- Csending a password to the server
- Dsending an encrypt/decrypt message to the server
4Which three components make up a service principal name (SPN)
- Aservice name, IP address, and port number
- Bservice name, URL and host name
- Cservice name, host name, and IP address
- Dservice class, host name, and port number
5Before you can create an MSA object type, you must create what?
- Aa key services MSA group
- Ba key services MSA distributed domain account
- Ca key distribution services root key
- Da key distribution services Master MSA
6What are the two restrictions for adding SPNs to an account?
- ADomain Administrator privileges
- Bfull control permissions for the folder
- Clocal administrator privileges
- Dthe editor runs from the domain controller
7Although the changes are easy to make, why is changing the AD schema such a big deal
- AThe changes replicate to all domain controllers.
- BThe changes could corrupt the database.
- CDoing so affects all objects for that object type.
- DDoing so requires controlled changes.
8Where in the forest is a global catalog automatically created?
- Athe PDC Emullator
- Bthe most powerful system
- Cthe first domain controller
- Dthe schema master
9You do not place the infrastructure master on a global catalog server unless what situation exists?
- AYou have a single domain
- BYou have Windows NT 4.0 systems to support
- CYou have multiple schemas
- DYour AD DS is Windows 2008 or higher
10Beginning with which server version can you safely deploy domain controllers in a virtual machine?
- AWindows Server 2003
- BWindows Server 2008
- CWindows Server 2008 R2
- DWindows Server 2012
11Which of the following commands issued at the fsmo maintenance prompt would successfully seize the role of an Operations Master Holder? Select all that apply
- Aseize schema master
- Bseize global master
- Cseize PDC
- Dseize domain control
12Identify another utility that you can use to add SPNs to an account
- Adnscmd
- Bspnedit
- Csetspn
- Dnetsh
13What happens if a client submits a service ticket request for an SPN that does not exist in the identity store?
- AAn event is written to the Kerberos server's event log.
- BThe client receives an access denied error
- CThe Kerberos server receives an access denied error
- DThe Kerberos ticket for that service is destroyed.
14Kerberos security and authentication are based on what type of technology?
- Asecure transmission
- Bsecret key
- Cchallenge-response
- Dlegacy code
15What is the default maximum allowable time lapse between domain controllers and client systems for Kerberos to work correctly?
- A1 minute
- B5 minutes
- C15 minutes
- D45 minutes
16When creating accounts for separating systems, processes, and services, you should always configure them with what two things in mind?
- Ausing strong passwords
- Busing cryptic user names
- Cgranting the least rights possible
- Dusing built-in accounts
17What is the name by which a client uniquely identifies an instance of a service?
- Aservice instance name
- Bservice account name
- Cservice provider name
- Dservice principal name
18What is the default authentication protocol for contemporary domain controllers
- ANTLM
- BPAP
- CCHAP
- DKerberos
19Which version of Windows Server introduced incremental universal group membership replication?
- AWindows Server 2000
- BWindows Server 2003
- CWindows Server 2008
- DWindows Server 2012
20What are the three types of groups in a domain?
- Adomain trust groups, domain schema groups, and universal groups
- Bdomain local groups, global groups, and universal groups
- Cglobal groups, domain trust groups and schema groups
- Duniversal groups, global catalog groups and schema groups.
21When you add attributes to an Active Directory object, what part of the domain database are you actually changing?
- AFSMO
- Bschema
- Cdirectory structure
- Dorganizational units
22The domain controllers are the computers that store and run the:
- Auser database
- Bservices database
- CManaged Service Accounts database
- DActive Directory database
23Which Active Directory object is defined as a specialized domain controller that performs certain tasks so that multi-master domain controllers can operate and synchronize properly?
- ASchema Master
- BForest
- CRODC
- DOperations Master
24What service right does an MSA account automatically receive upon creation?
- Alog on interactively
- Blog on as a service
- Cdomain administrator
- Ddomain power user
25Name two benefits to using Managed Service Accounts (MSAs).
- AMicrosoft technology
- Bautomatic password management
- Csimplified SPN management
- Dsimplified account troubleshooting
26What does the acronym NTLM stand for?
- ANT LInk Messenger
- BNT Link Manager
- CNT LAN Manager
- DNT LAN Messenger
27Which command-line command do you use to allow Windows Server 2003 domain controllers to replicate to RODCs?
- Anetdom /RODCPrep
- Bnetsh /RODCPrep
- Cntdsutil /RODCPrep
- DADPrep /RODCPrep
28Which tool can you use to add SPNs to an account?
- ANotepad
- BLDAP
- CMicrosoft Word
- DADSI Edit
29How many global catalogs are recommended for every organization?
- Aat least one
- Bat least two
- Cat least three
- Dno fewer than four
30How many PDC Emulators are required, if needed, in a domain?
- Aone
- Btwo
- Cthree
- Dfour
31By default, which service accounts will the Windows PowerShell cmdlets manage?
- Astandalone MSAs
- Bstandard local services accounts
- Cgroup MSAs
- Ddomain user accounts designated as service accounts
32What type of account is an account under which an operating system, process, or service runs?
- Auser
- Bsystem
- Cservice
- Dnetwork
33The global catalog stores a partial copy of all objects in the forest. What are the reasons for keeping that partial copy? Select all that apply.
- Alogon
- Bobject searches
- Cuniversal group membership
- Dschema integrity
34Which type of system must you connect to and use to make changes to Active Directory?
- ARODC
- Bforest master
- Cwritable domain controller
- Ddomain tree
35What utility must you run on a cloned system to ensure that the clone receives its own SID?
- Aadprep/renew
- Bsysprep
- Cdcpromo
- Dntconfig
Information
- Description
- 70-411 Final College Exam
- Author
- Michael Marcus
- Language
- English
- Views
- 528
- Tags
- Rating
- 5.0 out of 5 · 1 rating Rate this quiz