2008 R2 ADS Vocabulary - Session 4 Flashcards

You may prefer our related Brainscape-certified flashcards:
1
Q

Monitor Active Directory
Windows Server 2008 R2 provides various tools for managing system and network events and resources. These tools include the following:

A
Network Monitor
Windows Task Manager
Event Viewer
Windows System Resource Manager (WSRM)
Windows Reliability and Performance Manager
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Network Monitor

A

The Network Monitor enables you to monitor and troubleshoot network performance by capturing data frames transferred between networked computers.
The latest version of Network Monitor, Microsoft Network Monitor 3.1, includes new technologies that enable you to capture and monitor wireless data transfers so that you can monitor a wireless network.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Windows Task Manager

A

The Windows Task Manager enables you to manage running programs and processes, and analyze system performance on a local computer or server.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Event Viewer

A

The Event Viewer enables you to identify and track events that indicate possible performance problems.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Windows System Resource Manager

A

WSRM

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Windows System Resource Manager (WSRM)

A

The WSRM enables you to manage the allocation of system resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Windows Reliability and Performance Manager

A

The Windows Reliability and Performance Manager enables you to analyze and monitor the performance of a system, including its hardware and software.

This tool replaces the Server Performance Advisor and System Monitor in earlier versions of Windows, because it provides the functionalities of both of these tools.
The Microsoft Network Monitor 3.1 utility is a protocol analyzer. It collects data relating to a network using a process known as capturing. It captures traffic, data, and management frames transferred between computers that share a specified network connection, and it displays information about these frames. You can use the Network Monitor to monitor network traffic, identify unwanted connections or protocol traffic, maintain statistics on network performance, and troubleshoot network problems such as malfunctioning servers.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

The Windows Task Manager includes six tabbed pages:

A
Applications
Processes
Services
Performance
Networking
Users
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Applications

A

The Applications tabbed page displays information about all applications running in the current Windows session. You can change the order in which entries are displayed by clicking the Task or Status column headers. Using this tabbed page, you can choose to end an application that is not responding, switch tasks, or create new tasks.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Processes

A

The Processes tabbed page displays details of each process that is currently running. You can use this information to identify processes that are holding system resources or that are causing applications to not respond. Using the Processes tabbed page, you can right-click a process and then choose to end it or to view its properties.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Services

A

The Services tabbed page is a new feature of the Task Manager in Windows Server 2008 R2. It displays details of all Windows services. Using this tabbed page, you can right-click a service and then choose to start or stop it, or to view the processes associated with it. The page also includes a Services button, which you can click to open the Services Microsoft Management Console (MMC) snap-in.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Performance

A

The Performance tabbed page displays information about the system’s current memory and CPU performance, in graphical form and as listed statistics. It also contains a Resource Monitor button, which you can click to access the Resource Monitor

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Networking

A

The Networking tabbed page displays an analysis of the computer’s network connection. A graph on this tabbed page indicates the percentage utilization of the network.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Users

A

The Users tabbed page lists details of currently logged in users of the local Windows Server 2008 R2 system. You can choose to manage the properties of a user, to disconnect or log off a user, or to send a message to a selected user.
In Windows Server 2008 R2, you can access two categories of event logs:
• Windows Logs, which are created for applications that affect the operating system
• Applications and Services Logs, which are new to Windows Server 2008 R2 and store events from a single application or component

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

There are five types of Windows Logs:

A
Application
Security
Setup
System
Forwarded Events
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Application

A

The Application log contains events that are logged by applications or programs. For example, a database program may log a file error in the application log. Program developers decide on the events that need to be logged in the Application log.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Security

A

The Security log contains events such as valid and invalid logon attempts, and events related to the use of resources, such as creating, opening, and deleting files or other objects. System administrators can specify the events that must be recorded in the Security log. For example, if logon auditing has been enabled on the system, then all attempts to log on to the system are recorded in the Security log.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Setup

A

The Setup log contains events related to the installation of new applications.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

System

A

The System log contains events that are logged by Windows system components, such as the failure of a driver or other system components that load during system startup.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Forwarded Events

A

The Forwarded Events log stores events that are collected from remote computers.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

The Reliability and Performance Monitor collects and logs performance-specific data in Data Collector Sets using three tools:

A

Resource Overview
Performance Monitor
Reliability Monitor

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Resource Overview

A

The Resource Overview screen is the home page of the Windows Reliability and Performance Monitor. After logging in with the local administrator account, you can use the Resource Overview screen to monitor the performance of resources such as disk space, memory, and CPU capacity. You can also determine the processes that occupy these resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Performance Monitor

A

The Performance Monitor provides a graphical representation of system performance, using various performance counters. Each performance counter provides details relating to the performance of a particular component. You can add performance counters directly or you can create customized Data Collector Sets to add specified performance counters to the Performance Monitor.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Reliability Monitor

A

The Reliability Monitor continuously checks the stability of the system and displays a warning if it detects any hardware or software that represents a potential threat to the functioning of the system. This tool starts functioning at the time of the installation of the system. It analyzes all programs to determine their impact on system stability. If a warning message related to the possible impact of software or hardware installation is displayed, you need to take the appropriate actions to prevent system problems or failure.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Resultant Set of Policy

A

(RSoP)

26
Q

Resultant Set of Policy (RSoP)

A

In an AD environment, several Group Policies may apply to the same users and computers. Because of the way policies interact, it can be difficult to determine their cumulative effect, known as the RSoP.

27
Q

The RSoP snap-in can be run in one of two modes:

A

Logging Mode

Planning Mode

28
Q

Logging Mode

A

In Logging mode, you can view and analyze policy settings only for users that are logged on and the computers they are logged on to.

29
Q

Planning Mode

A

In Planning mode, you can use simulations to view the RSoP for policy settings to apply to users and computers. This enables you to test the effects of policies before you apply them.

30
Q

Offline Maintenance

A

As an administrator, you will need to perform maintenance tasks, such as backing up data and defragmenting storage media, on each DC in a Windows Server 2008 R2 network environment. The AD database is managed through automatic maintenance procedures, such as creating routine backups. However, you need to manage AD database settings to prevent problems such as low storage space or hardware failure from affecting it. Maintenance tasks that you perform when AD DS is running are known as online maintenance tasks, and those performed when AD DS is stopped are known as offline maintenance tasks.

31
Q

Performing Offline Defragmentation

A

Fragmentation is the presence of empty spaces, which are known as white spaces, between contiguously allocated blocks of data. These white spaces occur in the AD database when data is deleted. When you delete data from AD DS, the storage space allocated to it is vacated and an empty space is left between two contiguous blocks of data.

32
Q

You can defragment the AD data on a DC in either of the following ways:

A

Online

Offline

33
Q

Online

A

Online defragmentation of the AD database occurs automatically, by default every 12 hours, on all servers running AD DS. This process manages disposed objects and increases the usable storage space in the AD database. However, it does not defragment the AD file system, which includes the ntds.dit file.

34
Q

Offline

A

Offline defragmentation, also known as compaction, removes white space from the AD database and file system, including the ntds.dit file. This file is a different size on each DC because changes are regularly made to it through automated updates.
Because offline defragmentation removes white space from both database and file system data, it can free a considerable amount of storage space. (use ntdsutil.exe)

35
Q

use ntdsutil.exe

A

Because offline defragmentation removes white space from both database and file system data, it can free a considerable amount of storage space

36
Q

ntds.dit database file stores the

A

directory data for AD DS

37
Q

Moving a Database File

A

The ntds.dit database file stores the directory data for AD DS. However, any changes made to the AD are saved to the transaction log files before they are saved to the directory data database and the ntds.dit file. When AD DS is installed on a DC running Windows Server 2008 R2, the ntds.dit file and the transaction logs are stored on the same hard disk. By default, this is in the %systemroot%\ntds folder. For more efficient read/write performance, it is preferable that you store the transaction log files and the ntds.dit file on different hard disks.
If you move the ntds.dit file and transaction logs, you need to ensure that enough free space is available to store the files at the destination location. (use ntdsutil.exe)

38
Q

Disk space requirements depend on whether you move the file and transaction logs to:

A

Separate Hard Drive Partitions
The Same Hard Drive Partition
DSRM or net stop ntds

39
Q

The Same Hard Drive Partition

A

If you store the ntds.dit file and the transaction log files on the same hard drive partition, you will need to maintain 1 GB or 20% of the combined file sizes, whichever is higher, as free space in the partition.

40
Q

DSRM or net stop ntds

A

In order to perform offline maintenance the AD DS database must by definition be offline. In the past this required the server to reboot into the special safe mode known as Directory Services Restore Mode, based upon logging on using the DSRM password defined at logon. In 2008 and later, however, the NTDS service can be stopped in the services console, or using the sc stop ntds command, the net stop ntds command, or the PowerShell cmdlet Stop-Service ntds –Force command. Then the Defragmentation or database movement can be performed, then the database service can be simply started again. Other server services that do not depend on AD running on this server (especially) if other DCs are running on the network) will continue to function

41
Q

Configure Backups

Windows Server Backup

A

Windows Server 2008 R2 provides the Windows Server Backup feature, which enables you to back up the entire system, specific volumes, files, and application data.
Backing up the contents of a server is important because it enables you to recover essential data if it is damaged or lost (for example, after a hardware failure).

42
Q

Using Windows Server Backup, you can choose to back up

A
  • The full contents of all volumes, including all applications, files, data, and the system state
  • Only specified volumes on a server
43
Q

A backup of critical volumes on a DC includes

A

data about boot files, the Windows operating system and registry, the SYSVOL tree, and AD database and log files.

44
Q

You can choose to back up your data to the following locations:

A

A Shared Folder
A DVD or Other Removable or Optical Media
An Internal Hard Disk
An External Hard Disk

45
Q

A Shared Folder

A

You can back up server data to a remote shared folder. However, new backups to the same folder will automatically overwrite existing ones. If the backup procedure fails and an old backup has been overwritten, all backup data will be lost.
To prevent this, you need to organize the shared folder carefully, ensuring that each backup is saved to a separate subfolder.

46
Q

A DVD or Other Removable or Optical Media

A

You can choose to back up server data to a DVD or other removable or optical media, provided 1 GB or more of free disk space is available on the media. If less than this amount of disk space is available, a disk will not be detected as an available backup destination.
You can recover full volumes of data from backups on DVD or other removable media. However, you cannot recover individual applications or files.

47
Q

An Internal Hard Disk

A

You can save backups to an internal hard disk and then use them to recover files, folders, applications, and volumes. You can also perform critical system state and operating system recoveries from the backups.
However, recovery of the operating system is not possible if the backup is on the same physical disk as one or more original, critical volumes.

48
Q

An External Hard Disk

A

You can save backups to an external hard disk and use these backups to recover files, folders, applications, and volumes. You can also perform critical system state and operating system recoveries from these backups.
The backup stored in an external hard disk can be easily moved to an offsite location for disaster protection.
The new Windows Server Backup provides several enhancements to the backup features in earlier versions of Windows Server.
Some of these enhancements include the following:
• Faster backup technologies
• Improved scheduling
• Automatic compression and volume recognition
• Automatic management of disk use
• Support for DVDs as backup media
• Extensive command-line support
• Better support for rotating backups
• Remote administration

49
Q

The limitations of Windows Server Backup are as follows:

A

Support Only for NTFS

50
Q

Support Only for NTFS

A

Windows Server Backup works only with NTFS; it does not support the File Allocation Table (FAT) and exFAT file systems. NTFS has several advantages over the FAT file system, such as support of metadata and advanced data structures. An advanced data structure improves performance, reliability, and disk space utilization.

51
Q

The three Windows RE tools are as follows:

A
  • The Windows Complete PC Restore tool enables you to recover all applications, data, and settings after a hardware failure
  • The Windows Memory Diagnostic Tool enables you to detect RAM problems on a system
  • The Command Prompt tool enables you to access the command prompt window from where you can use the Wbadmin command-line utility to recover data from a backup
52
Q

Directory Services Snapshots

A

Windows Server 2008 allows administrators to create snapshots of the AD database for offline use: Snapshots can be mounted under a different set of ports and have read-only and accessed via LDAP. Then when values of AD objects change and administrators need to revert to the previous values, a previous snapshot can be mounted to an alternate port and the required attributes of the changed objects easily exported. Then the values could be imported into the production instance of AD DS. An administrator could similarly use this technique to restore deleted objects or audit the system at a point in time. Snapshots are taken using ntdsutil.exe. Snapshots can be mounted to an available path and port using dsamain.exe. Snapshots can be viewed using the Idap viewer of Idp.exe, adsiedit, or even dsa.msc.

53
Q

Snapshots are taken using

A

ntdsutil.exe

54
Q

Snapshots can be mounted to an available path and port using

A

dsamain.exe

55
Q

Snapshots can be viewed using the

A

Idap viewer of Idp.exe, adsiedit, or even dsa.msc

56
Q

Directory Services Recovery Mode
Using a nonauthoritative restore (a restore from backup), you can recover data from the following three types of backups:

A

System State Backups
Critical Volume Backups
Full Server Backups

57
Q

System State Backups

A

A system state backup of a DC includes at least the Active Directory Certificate Services (AD CS) database, registry, AD database (Ntds.dit), boot files, SYSVOL directory, Cluster Service information, COM+ class registration database, Microsoft Internet Information Services (IIS) meta directory, and system files under Windows Resource Protection. It also includes data for additional components, depending on which server roles are installed.

58
Q

Critical Volume Backups

A

A critical volume backup stores all data for a critical volume. This includes an AD database (Ntds.dit), AD database log files, boot files (including the bootmgr file and the Boot Configuration Data (BCD) store), the SYSVOL tree, and the Windows operating system and registry.

59
Q

Full Server Backups

A

A full server backup contains all data for a server; therefore, it is larger than a system state or critical volume backup. This type of backup enables you to recover all AD DS data and all volumes.
After a nonauthoritative restore an administrator can bring the server online and it will download any new updates from other online domain controllers. If the goal of the restore from backup was to overwrite the current AD database with the older version, you must perform an authoritative restore (this is a process of marking data as a higher version number so that it will overwrite more current data on other domain controllers) The authoritative AD DS restore is done from ntdsutil and can be done for the entire database or just a portion (an OU that was deleted, for example)

60
Q

authoritative restore

A

(this is a process of marking data as a higher version number so that it will overwrite more current data on other domain controllers)

61
Q

The authoritative AD DS restore is done from

A

ntdsutil and can be done for the entire database or just a portion (an OU that was deleted, for example)

62
Q

Directory Services Recycle Bin

A

Instead of performing an authoritative restore, Server 2008R2 allows administrators to configure and use the AD DS Recycle bin to rescue deleted objects within the 180 day period after they have been deleted but before they have been recycled. This feature requires a Server 2008 R2 Forest Functionality and the use of Idp.exe and PowerShell. Restored objects will retain their pre-existing SIDs.