Active Directory 2 Flashcards

1
Q

When cloning a virtual domain controller, what XML files MUST be present on the source domain controller in %windir%\system32?

A

The DefaultDCCloneAllowList.xml files must be located in %windir%\system32.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What parameter of the Install-ADDSDomainController cmdlet is used to prevent the replication of certain passwords to the domain controller?

A

the -DenyPasswordReplicationAccountName parameter

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is a prerequisite for performing a cloning of a virtual domain controller?

A

the PDC emulator role must be running on domain controller running Windows Server 2012 or higher

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What PowerShell cmdlet is used to create an additional domain controller?

A

the Install-ADDSDomainController cmdlet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What would you run from the command line to list the currently registered SPNs for a Windows Server 2012 R2 server named srv55?

A

setspn -l srv55

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

When specifying an account to be used as the security context of a service, what is the correct syntax for the account name in the This account dialog box on the Log On tab of the properties of the service?

A

You must append a $ to it or you will receive an error message.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

When cloning a virtual domain controller, what XML file MUST be present in one of three locations: the directory where the directory information tree resides, %windir%\NTDS, or the root of a removable media drive?

A

The DCCloneConfig.xml file

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Which container in the verigon.com forest is called the Recycle Bin and contains objects that have been deleted from Active Directory?

A

the CN=Deleted Objects, DC=verigon, DC=com container

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What PowerShell cmdlet gets the members of the allowed list or denied list of a read-only domain controller’s password replication policy?

A

the Get-ADDomainControllerPasswordReplicationPolicy cmdlet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Which parameter of the Move-ADDirectoryServerOperationMasterRole cmdlet will allow you to seize a master operations role?

A

-Force

How well did you know this?
1
Not at all
2
3
4
5
Perfectly