Active Directory 3

Question 1

Using ntdsutil.exe, what is the correct series of commands to move the Active Directory database on a domain controller named DC2 to a new and larger volume on the same server?

Answer 1

net stop ntds
Ntdsutil
activate instance ntds
files
move db to f:\NewDirectory

Question 2

What additional step is required to view deleted objects after setting the Base DN to in the Search box of the ldp.exe tool when performing tombstone reanimation of a user account?

Answer 2

Use the Return deleted objects control to view deleted objects and perform operations on the objects.

Question 3

Besides using a GUI tool, what command-line utility can you use to clean up server metadata?

Answer 3

ntdsutil

Question 4

Which Kerberos policy setting determines whether the KDC validates a session ticket request against the user rights policy of the account?

Answer 4

Enforce user login restrictions

Question 5

What setspn.exe command will list all SPNs of services on the Web server?

Answer 5

setspn -l

Question 6

What tool is used to perform tombstone reanimation?

Answer 6

the ldp.exe tool

Question 7

Which Kerberos policy setting determines the maximum time that a user’s ticket-granting ticket can be used?

Answer 7

Maximum lifetime for user ticket

Question 8

Which type of account in Windows Server 2008 R2 and above is a managed domain account that provides simplified SPN management and automatic password management?

Answer 8

Managed service account

Question 9

What PowerShell cmdlet generates a password for a user, given all the policies that have been applied?

Answer 9

the Get-Random cmdlet

Question 10

What utility is used to expose a mounted snapshot to LDAP services?

Answer 10

dsamain