F03 Active Directory Logical Structure

Question 1

Define an Object

Answer 1

• The basic building block of AD.
• Users, computers, printers, servers, and other network resources are all objects.
• Objects defined by their attributes.
• Attributes are name, pw, phone number, email address etc.

Question 2

Define Active Directory Schema

Answer 2

• AD Schema is the collection of objects and their attributes in an instance of AD.
• There is only 1 schema per AD instance.

Question 3

Define Security Groups

Answer 3

• Security groups are objects in AD just like individual users.
• Individual can be added to a group and then permission applied to the group vice doing each individual.

Question 4

Define Organizational Units

Answer 4

• OU are containers for objects.
• They are like file or folders.
• Administrative boudaries

Question 5

Define Domains

Answer 5

• The grouping of all objects that share common resources, services, and administration.
• All of the computers, users, groups and OUs within a domain share a common security database and permission.

Question 6

Define Domain Tree

Answer 6

Multiple domains are arrange into a hierarchical structure called a tree.

Question 7

Define Forest

Answer 7

• The largest category of organizing objects and domains is called a n Active Directory Forest.
• Multiple Domains and domain trees in a forest.

Question 8

Purpose of a Trust Relationship

Answer 8

A trust is defined as a link in AD between two domains and/or forests that allows users to access resources and services in another domain.

Question 9

Object Attributes

Answer 9

• User Objects could include name, password, phone number, email number, email address, group number.
• Just like we use biometrics to categorize a person, AD use attributes to define an objects.

Question 10

AD Schema Intances

Answer 10

• All users in the NMCI AD structure are defined with the same attributes.
• All printers in an instance of AD in the Iraq AD structure share the same attributes.
• User from Iraq AD cannot see attributes of NMCI users.

Question 11

Domain Tree Structure

Answer 11

• The first domain created is known as the root domain.
• Any created after the root domain is called the child domain.
• Each domain has a separate seuciryt boundary but shares the same object classes and schema because they share the same instance of AD.