Elance Active Directory Test Answers 2015
·
What is an example of a scenario when you
would need to rename a domain controller?
When logging out.
When replacing computer hardware.
When logging in.
When registering another user.
What group must you be a member of to
configure the site link schedule?
The Realm Admins group in Active Directory.
The Network Admins group in Active Directory.
The Forest Admins group in Active Directory.
The Enterprise Admins group in Active Directory.
Five people in Accounting have the need to
print checks on a network computer. No one else should have access to this
printer. What is the best way to set this up?
Include the printer as an object in Active
Directory Users and Groups, create a security group of those users who can
print to that printer, then give them exclusive rights to print.
Set up a subnet on the corporate switch for the
port that is attached to the printer. Give the printer an IP address on that
subnet, then set up routes on the computers of the users who will print to that
printer.
Setup a new resource domain, add those users to
that need to print to that printer and the printer in Active Directory Users
and Groups, then create a one way forest-to-forest trust in Active Directory
Domains and Trusts to allow only those users to print to that printer.
Make sure that the printer can be reached by name
on the network. In Active Directory Group Policy Manager create a group policy
that hides the printer name for all users except for the group in Accounting.
Members of which of the following groups can
perform actions in multiple domains within a forest?
Enterprise Admins
Power Users
Forest Admins
Domain Admins
What is an alternative to disabling
administrative and guest accounts on domains for security purposes?
Deleting them.
Moving them.
Encrypting them.
Renaming them.
If you need to change the default file size of
the staging folder, where do you change the staging space limit registry entry?
HKEY_Local_Machine\NtFrs\Parameters
System\CurrentControlSet\Services\NtFrs\Parameters\HKEY_Local_Machine
HKEY_Local_Machine\System\CurrentControlSet\Services\NtFrs\Parameters
HKEY_Local_Machine\User\Share\Etc\NtFrs\Parameters
What best practice ensures that all trust
relationships are preserved within a domain?
Rebuilding the system every year.
Performing regular backups.
Keeping the system running.
Performing annual backups.
What two ways can trust relationships be
defined?
Open, or closed.
Four-way, or two-way.
Inside, or outside.
One-way, or two-way.
What is SYSVOL referring to in the context of
Active Directory?
The Active Directory SYSVOL system.
The Active Directory SYSVOL shared folder.
The Active Directory shared network.
What does it mean when a “trust” exists?
Two domains block each other so only users can
access the computer.
The authentication coming from each domain trusts
the authentications coming from the other domain.
Authentication is allowed for all users.
Authentication is only allowed for administrators.
The ADSIEDIT tool is used to:
Edit DNS records of Active Directory members.
Filter SID components in the DHCP registry.
Remove inactive objects in the Active Directory.
Directly add, delete or modify components in the
Active Directory.
To add a new user via Windows PowerShell you
would use the following cmdlet:
New-ADUser
New-Item
Set-ADUser
New-DSObj
Which one of the following is NOT one of the 5
Operation Master (FSMO) Roles?
RID Master Role
NTLM Master Role
Domain Naming Master Role
Infrastructure Master Role
When creating a domain for the first time,
what must be configured properly to easily join computers to your domain?
DNS Server and services
LDAP
Default Domain Policy (GPO)
IIS
DCHP Server
How are multiple sites connected for
replication in Active Directory?
They are connected by Link Bot objects.
They are connected by Network objects.
They are connected by Site Link objects.
They are connected by Connection objects.
One can change the Active Directory Path while
creation of the Active Directory
Yes
No
Which of the following is NOT a DNS Zone?
Forward Lookup Zone
Stub Zone
Primary Zone
Internal Lookup Zone
What is Windows Time Service responsible for?
Synchronizing the system clock so the system runs
better.
Synchronizing the time of all the computers running
on the network.
Setting the system time to the appropriate time
zone.
Setting Active Directory's clock timing.
What two operations masters roles exist in
each forest?
The schema master, and the domain naming master.
The operations master, and the domain controlling
master.
The system master, and the user master.
The super master, and the user master.
Which one is NOT FSMO role?
Flexible Master
Schema Master
Infrastructure Master
RID Master
When is it necessary to manage domain and
forest trusts?
When your organization needs to collaborate with
users or resources in other domains, forest trusts, or realms.
Never. They are automatically managed.
Only when your organization needs to access other
domains.
When your organization needs to access other forest
trusts only.
What is a Global Catalog?
The listing of all Group Policies in an Active
Directory domain and their implementation schema.
An historical catalog of all authentication traffic
in the entire forest.
A listing of all users information that is
published by intervals from the Active Directory to Microsoft Exchange.
A database of every object in an active directory
tree, containing the most frequently used object attributes.
What version of Windows Server was the Read
Only Domain Controller (RODC) introduced?
Windows 2008
Windows 2000
Windows 2003 R
Windows 2012
An Active Directory Forest is
___________________
a collection of different domains connected via two
way trusts that don't share the same DNS name space, but share authentication
and policy management.
the sum total of all the objects both physical and
logical including their properties in an Active Directory domain and managed
from a PDC.
the different databases and their interactions that
comprise the Active Directory for the management of objects, domain security
and policy.
a method for visualizing autonomous sites that are
connected via high speed networks but independent of domain hierarchies.
The Active Directory database is stored in the
______ directory.
%windir%\etc
%windir%\sysvol
%windir&\ntds
%windir%\inf
What security practice does not involve the
configuration of software or hardware?
Computer security.
Domain security.
Physical security.
Network security.
What is a DSRM password used for?
It is used to log onto a domain controller that has
been rebooted into DSRM mode to take its copy of Active Directory off-line.
It is used to log into Active Directory in the case
that DSRM needs to be taken off-line.
It is used to log onto a domain controller that has
been rebooted into DSRM mode to delete its copy of Active Directory.
It is used to log into the system.
Which of the following is NOT an Active
Directory role?
Active Directory Domain Services
Active Directory Network Object Services
Active Directory Federated Services
Active Directory Certificate Services
What benefit is gained from using global or
universal groups when specifying permissions on domain directory objects?
Permissions are transparent across the system,
leaving less opportunities for intrusion.
Permissions are granted to fewer users.
Permissions are totally deleted.
Access is allowed to all users.
What is KCC?
It is the Knowledge Consistency Checker used to
generate the replication topology in Active Directory Domains and Trusts.
It is the Key Collection Center, the database used
in conjunction with Key Distribution Center for exchange Kerberos keys during
authentication.
It is the Knowledge Capture Client, used by the
Schema Manager in mapping and maintaining domain morphology.
It is the Kerberos Consignment Client, which checks
and passes Kerberos authentication packets between clients.
When you move the database file, where are
registry entries that Ntdsutil.exe edits located?
MACHINE\SYSTEM\SET\Services\NTDS\
\SYSTEM\CurrentControlSet\Services\NTDS\HKEY_LOCAL_MACHINE
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet\Utilities\NTDS\
Are the different types of trusts set
automatically, or must they be set manually?
All trusts are set automatically.
All trusts are set automatically, and they cannot
be changed.
All trusts must be set manually.
The trusts that need manual configuration are
contingent upon how Active Directory is organized, and whether different
versions of Windows coexist on the network.
You are trying to determine the name of a host
but only have the IP Address, what command can you run to finds it's name?
ping -h (IP Address)
tracert (IP Address)
ping -a (IP Address)
ping (IP Address)
Should you log in to your computer as an
administrator to complete administrative tasks?
Yes. You should always log in as an administrator,
but log out after you are finished.
Yes.
No. Use “Run as” to complete them.
Yes, and stay logged in continually.
What kind of trust is a parent-child trust?
One-way trust.
Four-way trust.
Forest trust.
Two-way trust.
Command to create / run Active Directory
Services
tracert
Fixboot
dcpromo.exe
ADSI
traceroute
Fred in Marketing needs to share files with
his small team on a confidential project. What should you do to help?
Create and share a folder on Fred's PC and write a
login script that will map a drive to that folder for each member of Fred's
team.
Create an Active Directory Security Group and
assign Fred and his team to it. Create a directory on the file server and give
that group exclusive rights to the directory. Share that folder with Fred's
team.
Dedicate a computer to Fred's group and give each
person local rights to the computer .
Create a Group policy that identifies each member
of Fred's team that will redirect and map a drive to a hidden folder on the
server.
A domain computer is no longer authenticating
on the domain. How do you fix the problem?
Rename the computer and reboot it.
From the computer, change the computer's login
password in Local Security Manager, then reboot.
From the computer, remove from the computer from
the domain reboot, and rejoin it to the domain
From the Active Directory Users and Groups Manager
find the computer in the directory and delete it.
What is Kerberos?
A security protocol used for authentication in
Active Directory.
A messaging protocol used in Active Directory for
intersite transport in multi-site domains.
The script complier used for parsing and
interpreting SYSVOL scripts.
The program that underlies Active Directory Group
Policy management.
Why is documentation one of the most critical
aspects of Active Directory security administration?
It is essential for security audits.
It is essential for performance audits.
It is essential for network administration.
It is essential for domain audits.
You are deploying a new web based application
that only company personnel will use to submit their hours when out of the
office. What Active Directory Service would you deploy to enable login
security.
Deploy an RDP server accessible via a URL on the
internet that will allow users to login to a Window's session to access a
secure browser.
Set up a nightly scheduled process that executes
the Active Directory Users and Groups Directory Export Services (DE) to create
a secure text file that is uploaded into the application's database.
Deploy Active Directory Federated Services (FS) via
IIS to extend and integrate Windows Login within the application and make it
available on the internet.
Deploy the replication feature in Active Directory
Domains and Trusts that will allow the users PC to automatically exchange
certificate tokens when opening the applications URL and securing the users
login.
In relation to backup and restore procedures,
what provides a default location for files that must be shared for common
access throughout a domain?
HKEY
SYSKEY
SYSVOL
VOLSYS
Which of the following is NOT an Active
Directory object?
Domain Server
Email Address
Computer
Domain user
Which of the following are NOT a logical
component of Active Directory?
OU
Domain
Branch
Forest
How must drives containing database files, or
log files, be formatted?
FAT12
FAT32
ext2
NTFS
You update a GPO and return to the users
computer to see the results but they don't show up. What is the least
disruptive way to see the results?
Perform a warm boot of the computer
Run the command: ipconfig /flushdns
Run the command: gpupdate /force
Run the command: nbtstat /R
What is LDAP?
Local Directory Application Programming Interface.
Local Domain Administration Protocol.
Logical Directory Access Protocol.
Lightweight Directory Access Protocol.
What do Domain Controllers do?
Store the database, maintain the policies and
provide the authentication of domain logons
Assign IP addresses to domain computers
Control granular settings in a domain environment
Receive and relay domain commands
A user is complaining that they can't login to
the domain because they have tried to login too many times with their password
In the Active Domain Domains andTrusts, find the
users login server right click and choose Replicate Now, then ask the user to
login
Ask the user to get someone else to login for them.
In the Active Directory Users and Computers, find
and open the user object, choose the Account tab and unlock the account.
Tell the user to turn off the computer and restart
it, then log in.
What is an OU?
Operational Unit
Organizational Unit
Optional Upgrade
Organizational Utility Services
Your company and its partner want to share
files on servers in both of their laboratories. What's the easiest way to make
this happen?
Utilize Active Directory Cloud Authentication
Services (CA) to create user groups from both companies to access shared data.
Set up a server on the internet and utilize Windows
R-Sync to replicate data from the servers from each partners servers. Set up a
Radius Server with user accounts then provide the users with VPN access to the
data.
Create a group in your company's Active Directory
Users and Groups, then create user accounts for the people who will need access
to resources in your domain, restrict resources to that group. Have your
partner do the same on their domain.
Set up a Two Way External Trust via Active
Directory Domains and Trusts, then setup security groups to share directories.
An Active Directory Forest comprised of
Windows 2008 R2 domain controllers will need to incorporate a Windows 2003 R2
Domain controller. What version level will the Forest function?
It will function at the Windows 2003 R2 level.
All domain objects created on the 2008 R2 domain
controllers will function as 2008 R2 those from the incorporated 2003 R2
servers will continue to operate as 2003 objects.
It will function at the 2008 R2 level.
It depends on the site the 2003 R2 domain
controller is located.
To protect the Active Directory schema, how
should users be managed?
All users have full access to Active Directory's
schema.
There is no schema in Active Directory.
No one has access to Active Directory's schema.
Users should only be added when changes to the
schema need to be made.
What command line tool can you use to remove
and object from the Active Directory
rmdr.exe
rmdsob.exe
obdel.exe
dsrm.exe
In the following list, which methods can NOT
be used to manage Active Directory tasks?
Active Directory Web Interface
Command Line
Windows PowerShell
Microsoft Management Console
How much maintenance does the Active Directory
database require on a daily basis?
It has to be debugged and backed up hourly.
It has to be backed up hourly.
It has to be backed up daily.
None besides backups during ordinary operations.
With the launch of Windows Server 2003, comes
a tool to make trust configuration easier. What is it?
The Authentication Wizard.
The Configuration Wizard.
The Trust Tool.
The Trust Wizard.
What happens if the global catalog is removed?
The domain controller immediately stops trusting in
DNS as a global forest server.
The domain controller immediately stops advertising
in trusts as a global realm server.
The domain controller immediately stops advertising
in DNS as a global catalog server.
The domain controller immediately stops advertising
in the system as a global hardware server.
What tool is required to make any changes in
Windows Time Service?
TIMEnt.exe
T32v.exe
ntp.exe
W32tm.exe
What is used to enable and optimize
replication traffic?
The Knowledge Consistency Optimizer.
The Knowledge Consistency Checker.
The Knowledge Replication Checker.
The Knowledge Network Checker.
What does Windows Time Service use to manage
time settings?
System Time Protocol.
Greenwich Time Protocol.
Windows Time Protocol.
Network Time Protocol.
If you want to see a list of users from the
command line or in a script you would use the ______ utility.
dsadd.exe
adfind.exe
adquery.exe
dsget.exe
What is a NetBIOS name?
A legacy naming convention used under Lan Manager.
A legacy naming convention used to differentiate
hardware and software resources.
A name used to differentiate performance
characteristics of NICs.
The corresponding name of the first 4 dactyls in a
MAC address.
What is Active Directory's global catalog used
for?
Forest-wide directory searching and facilitating
domain client logons when universal groups are available.
Global directory searching and facilitating domain
client logons when universal groups are available.
System-wide directory searching and facilitating
domain client logons when universal groups are available.
Network-wide directory searching and facilitating
domain client logons when universal groups are available.
You are having difficulty with remote domain
controllers not syncing. What tool would you use to investigate the problem?
Active Directory Domains and Trusts
DNS Manager
Windows Remote Server Manager
Active Directory Federated Services
If you needed to know the default number of
days that a domain controller preserves knowledge of a deleted object, how
would you find the answer?
Check the value of the systemLifetime attribute in
the ForestTreeDomain object.
Check the value of the deletedLifetime attribute in
the RecycleBinDomain object.
Check the value of the tombstoneLifetime attribute
in the ForestRootDomain object.
Check the value of the treeherderLifetime attribute
in the ShepardOfTheForestDomain object.
Should all system state components be backed
up together?
No. They cannot be backed up.
Yes. It is impossible to back them up otherwise
because their relationship is contingent upon each other.
No.
Yes, though it is impossible to back them up
together, they can be scheduled at similar times.
What does FSMO stand for?
Flexible Single Master Operations
File Share Master Operations
Family Services Master Operations
Flexible Schema Master Operations
What is unique about the tasks that operations
masters perform?
Any domain controllers are permitted to perform
them.
No other domain controllers are permitted to
perform them.
They are encrypted.
They can operate any other system.
What database engine is used to house the
Active Directory?
JET database
MS SQL Server
T-SQL
rebase
Which of the following protocols are NOT
needed for Replication?
SMB
RPC
IRC
SMTP
What command line tool can you use to manage
Domain Trusts?
netdom.exe
dfsutil.exe
dcdiag.exe
replmon.exe
You have need to check on a security property
in the Systems folder in Active Directory Users and Groups but you are having a
hard time finding it.
There is no Systems folder in the Active Directory
Users and Groups manager
On the View menu check Advanced Features
Log out of the server and log back in as a Domain
Administrator then reopen Active Directory Users and Groups
Right click on the Domain icon and choose Show
Hidden Features.
What does the ISTG do?
The ISTG manages and assigns GUIDs to objects in
the Active Directory.
The ISTG is the database that stores all Group
Policy Objects and the hierarchy schema.
The ISTG is used to publish Federation Services via
an internet proxy.
The ISTG is responsible for managing connections
between different domain sites.
A Schema Partition in Active Directory is the:
Partition that contains all of the information
about the structure of the entire forest including sites and trusts.
Partition that contains all of the information in a
Domain about users, groups and OUs.
Partition that contains all of the definitions of
the objects that can be created in the Active Directory and there rules for
creating and managing them.
Partition that contains all of the information that
is used and collected by applications and utilities in the Active Directory
such as DNS
Why should default users be granted equal
rights across the system?
Only administrators should be granted equal rights
on the server.
Default users are granted varying degrees of
rights. Equality in the varied degrees of granted rights reduces the occurrence
of discontinuities that may allow security breaches.
Granting rights equally means that there are no
variations in rights granted.
Default users should never be granted rights on the
system.
When Windows Server receives a file through
replication, or prior to being replicated, where must it be stored?
In the Windows area.
In the sandbox area.
In the replication area.
In the staging area.
What policy would you implement to rid the
system of LM hashes?
“Do Not Store LAN Hash Value on Next Password
Change”
“Do Not Store LAN Manager Hash Value on Next
Startup”
“Do Not Store Hash Value on Next Password Change”
“Do Not Store LAN Manager Hash Value on Next
Password Change”
Which of the following protocols is used for
communications in Active Directory Domains and Trusts?
FTP
SMTP
UDP
SMS
Which virus scanning software is known to
cause problems when installed on an Active Directory domain controller?
McAfee VirusScan 8.0.
AVG Virus Scan.
VirusScan2000.
Norton System Works.
For which of the following reasons would you
NOT deploy a Read Only Domain Controller (RODC)?
Your remote office is complaining about login
times.
The network connection to a remote office is
tenuous.
Your remote office is in a high crime neighborhood.
Marketing tells you they want their own Domain
Controller.
You need to remove a large number of user
accounts in the Active Directory because of an acquisition. Which utility would
you use?
CSVDE
RMDsob
LDIFDE
DSMoD
To install a new Active Directory Domain
Services (AD DS) Forest you need to be a:
A member of the Domain Admins group.
A local administrator on the server.
A member of the Domain Network Services group.
A member of the Enterprise Admins group.
How many operations masters roles are
allocated to each domain?
4
5
2
3
An application you are installing has a
service that needs to run on a server where it will interact and modify other
network services and components. How do you set it up?
Create a new user in Active Directory Users and
Groups. Then on the server add the new domain user you created into the Local
Admins group. Use this account to install the application.
Create a new user in Active Directory Users and
Groups. Add the users to the Network Services group. Use this account when
installing the service on the server where the application is to run.
Create a new user in Active Directory Users and
Groups. Add the users to the Network Configuration Operators group. Use this
account when installing the service on the server where the application is to
run.
You need to do nothing since it is a network
application and will be installed on a network server, those functions are
already built in.
What are Group Policies?
Group Policies are used to manage and segregate
domain resources based on rules in the OU defined by group membership.
Group Policies are ways to normalize the behavior
of controllable applications and procedures on the domain.
Group Policies are used to provide security as well
as filter and manage content from the internet.
Group Policies are used to maximize login
efficiency by creating a hierarchies based on user profiles.
How many levels of readiness are allocated for
the global catalog?
6
4
2
10
Subscribe to:
Posts (Atom)
