CHAPTER 2.1 Flashcards

1
Q

what is active directory

A

A directory service is a customizable information store
that functions as a single point from which users can
locate resources and services in the network.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

what is active directory

A

Active Directory is Microsoft’s implementation of directory
service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

benefits of acitve directory

A

Centralized control of network resources
* Centralized and decentralized resource management
* Stores objects securely in a logical structure
* Optimizes network traffic

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Logical components

A

Partitions
* Schema
* Domains
* Domain trees

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Physical components

A

domain controllers
* Data stores
* Global catalog servers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

AD Object

A

Represent physical entities
that exists in a network

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

organizational unit

A

Are containers
Used to group objects
within a domain

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Create OUs to

A

Organize Objects
⁻ Configure objects
by assigning
GPOs
⁻ Delegate
administrative
permissions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

what is AD Domains

A

Provides a structure for the
management
of user accounts, computers
accounts and groups

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

what is Domain Tree

A

A domain tree is a hierarchy
of domains
Each tree share a
contiguous namespace to
its parent domain

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

what is a forest

A

A collection of one or more trees

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

what is forest shares

A

Common schema of the AD database.
* Global catalog to enable searching

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

what is tree in forest

A

Created with the first domain.
* Can grow to include child domains or new domain trees.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

what is schema

A

Types of objects that
can be stored in AD DS
* The properties
associated with the
objects

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

what is domain controller

A

Servers that host the AD DS database (Ntds.dit) and
SYSVOL

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Best practices for domain controllor

A

For availability: At least two domain controllers in a domain
 For security: Implement Read Only DC (RODC) and BitLocker

17
Q

what is AD
Replication

A

Ensures that all domain
controllers have the same
information

18
Q

what does AD replication

A

AD replication copies all updates of the AD
database to all domain controllers in a domain
or forest

19
Q

Requirements for Installing AD

A

A computer running Windows Server
* Administrative privileges for creating a domain
* TCP/IP is installed and configured to use DNS

20
Q

what is the two step process to install ad ds

A
  1. Install the Active Directory Domain Service role
  2. Install the Domain Controller role
21
Q

Methods to install domain controllor

A
  1. Use Server Manager
  2. Use Windows PowerShell
  3. Install from media
22
Q

Read-Only Domain Controllers

A

A domain controller that supports only incoming
replication traffic.
* Use for authentication purpose

23
Q

For use in locations for Read-Only Domain Controllers

A

require a domain controller, but with no or minimal physical
security
* No need to update the Active Directory database.

24
Q

To manage AD DS objects, you can use the following
graphical tools

A

Active Directory Administration snap-ins
* Active Directory Administrative Center

25
Q

You can also use the following command-line tools

A

Directory Service commands
* Active Directory module in Windows PowerShell

26
Q

what is Delegation of
Control

A

Assigning management of an
organizational unit to another
user or group

27
Q

Benefits of delegation

A

Eases administration by
distributing routine
administrative tasks
* Provides users or groups
more control over local
network resources
Eliminates the need for
multiple administrative
accounts

28
Q

best practice for Effective
AD DS
Permissions

A

Assign permissions to
groups, not to individual
users

29
Q

how to evaluate effective perimssion

A

use the Effective Permissions
tab
* Manual analysis