Chapter 11/12: Active Directory Services - Part 01/02 Flashcards
Define an “AD Site”
Sites can be explained as physical locations that contain various AD objects. We
should be able to describe these objects using their boundaries
What are the main AD site topologies?
- Single domain-single site
- Single domain-multiple sites - Sites are
interconnected using physical network links - Multiple domains-single site - Replications between domains will depend on the logical topology
- Multiple domains-multiple sites - replication will depend on the logical topology as well as the physical topology.
What is the first step after deciding the AD site topology?
Configure subnets in each site
Define a “Site Link”
Site links represent the physical connection between sites; however, site links don’t control the network level routing or connectivity between sites
Define a “Site Link Bridge”
Site link bridges contain multiple site links. These allow transitive communication
between each site link under the bridge
What are the two ways to manage AD sites?
One option is to use the AD Sites and Services MMC, and the other one is to use PowerShell cmdlets
Once an AD Site is set, what is the next step?
Create site links
Define “Site link cost”
defines the nearest resources if the on-site resource is not available
How is “Site link cost” determined?
In a physical network, the quality of inter-site links is measured based on link speed,
latency, and availability; The site link that holds the lowest site cost value will be the first preference
What is the equation to determine site cost?
Bandwidth(Kbps/Mbps) / (log10(bandwidth))
Might have to divide the outcome by the number of GB once above 1GB
What are the two transport protocols that can be used for replication via site links?
- The default is IP with synchronous replication
- SMTP - only can be used between sites if the DCs are in different domains
What is the default replication interval on a site link?
Every 180 minutes
If the link between sites is slow, how should replication be implemented?
it is best to set the replication
after operating hours and during lunch hours. This will minimize the replication
traffic impact on slow links and allow the organization to use the link bandwidth
for other mission-critical traffic.
Define “ Knowledge Consistency Checker (KCC)”
a built-in process that runs on
domain controllers and is responsible for generating replication topology. It will
configure the replication connection between domain controllers
How does “Knowledge Consistency Checker (KCC)” manage replicaiton?
the KCC selects a domain controller as a bridgehead server, which sends and receives replication traffic for its site
How does the Knowledge Consistency Checker (KCC) behave in a topology with multiple sites and domains?
If you have multiple domains in multiple sites, each domain should have its own bridgehead server
How/Where is the bridgehead server seleted?
By opening the properties of the domain controller in AD sites and services
After the sites and site links are setup, what is the next step?
Assign the subnets to each site.
What are the two types of replication between sites?
- Intra-site replication
- Inter-site replication
Describe “intra-site” replication
Replications happening within an AD site; ADs will be aware of a change within 15 seconds and an update will be replicated in less than a minute
Describe “inter-site” replicaiton
Replication between two separate AD sites;
Define an “Update Sequence Number (USN)”
a 64-bit number that is allocated to the domain controller during the DCPromo process
What is the purpose of an “Update Sequence Number (USN)”?
When there is any object update, the USN allocated to the domain controller will be increased; As an example, let’s assume that domain controller A had an initial USN value of 2,000 assigned to it. If we add 5 user objects, the new USN will be 2,005. This number can only increase;
it cannot decrease.
What is the purpose of an active directory trust?
An Active Directory trust allows you to connect two different Active Directory domains/forests together and allows users to share resources among them
