Chapter 4: Introduction to Active Directory and Account Management

Question 1

A Windows Server 2003 0r 2008 Server that contains a full copy of the Active Directory infornation, is used to add a new object to Active Directory, and replicates all changes made to it so the changes are updated on every DC in the same domain.

Answer 1

Directory Service

Question 2

A Windows Server 2003 0r 2008 Server that contains a full copy of the Active Directory infornation, is used to add a new object to Active Directory, and replicates all changes made to it so the changes are updated on every DC in the same domain.

Answer 2

Domain Controller (DC)

Question 3

A server on an Active Directory managed network that is not installed to have Active Directory.

Answer 3

Member Server

Question 4

Windows Server 2003 and 2008 networks can have multiple servers called DCs that store Active Directory information and replicate it to each other. Because each DC acts as a master, replication does not stop when one DC is down, and updates to Active Directory continue, for example creating a new account.

Answer 4

Multimaster Replication

Question 5

A network resource, such as a server or user account, that has distinct attributes or properties, is defined in a domain, and exists in Active Directory.

Answer 5

Object

Question 6

Elements used in the definition of each object contained in Active Directory, including the object class and it’s attributes.

Answer 6

Schema

Question 7

A repository for all objects and the most frequently used attributes for each object in all domains. Each forest has a single global catalog that can be replicated on multiple servers.

Answer 7

Global Catalog

Question 8

A unique number, up to 16 characters long, that is associated with an Active Directory object.

Answer 8

Globally Unique Identifier (GUID)

Question 9

A namespace in which every child object has a portion of it’s name from it’s parent object

Answer 9

Contiguous Namespace

Question 10

A namespace in which the child object name does not resemble the parent object name.

Answer 10

Disjointed Namespace

Question 11

A process used to translate a computer’s logical or host name into a network address, such as to a dotted decimal address associated with a computer - and vice versa.

Answer 11

Name Resolution

Question 12

A logical area on a network that contains directory services and named objects, and that has the ability to perform name resolution.

Answer 12

Namespace

Question 13

An active directory object that houses other objects, such as a tree that houses domains or a domain that houses organizational units.

Answer 13

Container

Question 14

A grouping of Active Directory trees that each have contiguous namespaces within their own domain structure, but that have disjointed namespaces between trees. The trees and their domains use the same schema and global catalog.

Answer 14

Forest

Question 15

A forest-wide setting that refers to the types of domain controllers in a forest, which can be any combination of Windows 2000 Server, Windows Server 2003, or Windows Server 2008. The level also reflects the types of Active Directory services and functions supported.

Answer 15

Forest Functional Level

Question 16

Set of two-way trusts between two or more domains
(or forests in a forest trust) in which Kerberos security is used.

Answer 16

Kerberos Transitive Trust Relationship

Question 17

A trust relationship between 2 or more domains in a tree, in which each domain has access to objects in others.

Answer 17

Transitive Trust

Question 18

Related domains that use a contiguous namespace, share the same schema, and have 2 way transitive trust relationships.

Answer 18

Tree

Question 19

A domain relationship in which both domains are trusted and trusting, enabling one to have have access to objects in the other.

Answer 19

Two-Way Trust

Question 20

A grouping of objects that typically exists as a logical Partition and primary container within Active Directory

Answer 20

Domain

Question 21

Refers to the Windows Server operating systems on domain controllers and the domain-specific functions they support. Depending on the functional level, one, two, or all of the following operating systems are supported: Windows 2000 Server, Windows Server 2003, and Windows Server 2008.

Answer 21

Domain Functional Level

Question 22

A grouping of objects within a domain that provides a means to establish specific policies for governing those objects, and that enables object management to be delagated.

Answer 22

Organizational Unit (OU)

Question 23

An option in Active Directory to interconnect IP subnets so that the server can determine the fastest route to connect clients for authentication and to connect DCs for replication of Active Directory. _____ information also enables Active Directory to create redundant routes for DC replication.

Answer 23

Site

Question 24

A domain controller at each Active Directory site with access to a site network link, which is designated as the DC to exchange replication information. There is only 1 _____ _____ per site.

Answer 24

Bridgehead Server

Question 25

Establishes a one or two-way trust between a domain outside a forest and a domain within a forest.

Answer 25

External Trust

Question 25

Creates a one or two-way trust between a domain in a Windows Server forest and a group of non-Windows Server computers such as UNIX/Linux computers. The Windows Server and non-Windows Server computers must all be configured for Kerberos version 5 (or above) authentication services.

Answer 25

Realm Trust

Question 27

A list of users that enables one email message to be sent to all users on the list. A _____ _____ is not used for security and thus cannot appear in an access control list (ACL).

Answer 27

Distribution Group

Question 27

Creates a trust between 2 domains in 2 different forests and is typically used to enable faster access between lower level or child domains in different forests.

Answer 27

Shortcut Trust

Question 28

The reach of a type of group, such as access to resources in a single domain or access to all resources in all domains in a forest (see domain local, global, and universal security groups). (Another meaning for the word _____ in the beginning through ending IP addresses defined in a DHCP server for use by DHCP clients; See chapter 8).

Answer 28

Scope of Influence (Scope)

Question 29

Used to assign a group of users permission to access network resources.

Answer 29

Security Group

Question 30

A group of user accounts that is used to manage resources on a stand alone computer.

Answer 30

Local Security Group

Question 31

A list of all security descriptors (privelages) that have been set up for a particular object, such as for a shared folder or a shared printer.

Answer 31

Access Control List (ACL)

Question 32

A group that is used to manage resources - shared folders and printers, for example - in it’s home domain, and that is primarily used to give global groups access to those resources.

Answer 32

Domain Local Security Group

Question 33

A group that typically contains user accounts for it’s home domain, and that is a member of domain local groups in the same or other domains, so as to give that global group’s member accounts access to the resources defined to the domain local groups.

Answer 33

Global Security Group

Question 35

A desktop setup that is associated with one or more accounts to determine what startup programs are used, additional desktop icons, and other customizations. A user profile is local to the computer on which it is stored.

Answer 35

Local User Profile

Question 36

A user profile set up by the server administrator that is loaded from the server to the client each time the user logs on; changes that the user makes to the profile are not saved.

Answer 36

Mandatory User Profile

Question 37

A domain controller that houses Active Directory information, but cannot be updated, such as to create a new account. This specialized domain controller receives updates from regular DCs, but does not replicate to any DCs because it is read-only by design.

Answer 37

Read-Only Domain Controller (RODC)

Question 38

Desktop settings that are associated with an account so that the same settings are employed no matter which server is used to access the account (the profile is downloaded to the client from a server).

Answer 38

Roaming Profile

Question 39

A group that is used to provide access to resources in any domain within a forest. A common implementation is to make global groups that contain accounts members of a universal group that has access to resources.

Answer 39

Universal Security Group