F04 Physical Structure Flashcards

1
Q

Define Domain Controller

A
  • A server in an AD Forest that is running Window Server 2003 or better network operating system and actively providing directory services is known as a domain controller.
  • A DC has a complete copy of every object in the domain.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Flexible Single Operations Master

A
  • FSMO

- Each domain controller can have multiple roles.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Schema Master

A
  • First DC in the forest
  • Controls the master list of objects and attributes in the AD Structure.
  • AD Schema cannot be modified unless SM is available.
  • Forest level role
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Domain Naming Master

A
  • Forest level role
  • The DNM records the additions and deletions of domains in the forest.
  • Domain cannot be added/deleted if DNM is not available.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

RID Master

A
  • Objects have unique Security Identifier (SID)
  • 1st Part: domain specific 2nd Part: uniquetoobject
  • RID master creates SID blocks and assigned them to Dc.
  • DC uses block of RID to complete SID object.
  • If RID master is not available then object cannot be added to domain if all RID are used.
  • Domain Level Role
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Primary Domain Controller (PDC) Emulator (1st function)

A
  • Process password changes IOT ensure all DC know of PW changes.
  • All PW changes get recorded on PDC first.
  • this ensure users can lon on to domain if replication has not occured between DC.
  • If different DC have different user password then PDC emulator resolves this issues.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Primary Domain Controller (PDC) Emulator (2nd function)

A

-Manage group policy updates within a domain.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Primary Domain Controller (PDC) Emulator (3rd function)

A
  • Provides a master time source for the domain.
  • PDC in the forest root domain is the time master for the entire forest.
  • Important because because AD relies on time stamps to manage objects.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Infrastructure Master

A
  • The IM master is the master catalog of all objects in the domain.
  • All changes are reported first to the IM and then replicated out to the other DC.
  • Domain level role.
  • Without IM object cannot be added to the domain.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

3 DC partition

A
  • Schema Partition
  • Configuration Partition
  • Domain Partition
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

DC Schema Partition

A

-Has a copy of the schema of the forest

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

DC Configuration Partition

A
  • Defines the physical sturucture of AD.

- The Servers and the roels that they play

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

DC Domain Partition

A

-Domain partition is where they keep a copy of all of the objects in the domain.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

IP Bridgehead

A
  • IP bridgehead control replication into and out of the site.
  • DC replicate freel within a site.
  • All changes are sent to the IPB and then sent over the WAN.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Replication connections

A
  • Replication connections across the WAN are configured between sites and contain costs and interval.
  • Cost is the available bandwidth and delay.
  • Replication interval is set by adminitrator.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Knowledge Consistency Checker

A
  • Replication topology is controlled by the KCC.

- KCC is a service in AD and determined how AD replicates both inter and intra site

17
Q

KCC replication interval

A

KCC service repliactes this topology to all DC every 15 minutes.

18
Q

KCC protocol

A

Directory Service Remote Procedure Call (DS-RPC)

-Inter-site messaging Simple Mail Transfer Protocol Call (ISM-SMTP)

19
Q

DS-RPC

A

Intra-site replication utilizes DS-RPC and is the default protocol in DC runing W2K8R2
-DS-RPC is not dispicted in the diagram.

20
Q

ISM-SMTP

A
  • Can be used for inter-site replication.

- USMC uses DS-RPC because its easier

21
Q

DNS Configuration

A
  • Primary Zone
  • Secondary Zone
  • Active Directory Integrated
  • Stub DNS Zone
22
Q

DNS Primary Zone

A

-as