Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Amazon - Cloud Support Engineer > FSMO Roles > Flashcards

FSMO Roles Flashcards

1
Q

Which server role is responsible for the following? ____________manages authentication of users and devices on the network, enforces security policies assigned to those users and devices, and allows for management and administration of the network. Many other services and applications are dependent on this role.

A

Active Directory Domain services (Domain Controller)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Because of the critical and foundational nature of AD, organizations tend to set up redundant

A

Domain Controllers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

____ is a role in Windows Server that leases IP addresses to devices that want to connect to the network.

A

DHCP (Dynamic Host Configuration Protocol) Server

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

While many organizations use Windows Server as a ____ server, some organizations prefer to let their firewall, network switch, or all-in-one router handle ____.

A

DHCP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What role helps translate a human-readable web address that looks like www.microsoft.com into an IP address a machine can resolve, such as 131.107.0.89.

A

DNS server

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

___ is important because it is one of the industry standards that allow people to browse the internet, and it plays a role in filtering out malicious websites.

A

DNS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What role provides services that allow users to store and share files on a given network. Permissions on shares can be configured to allow only certain groups or individuals to access or modify files.

A

File and Storage services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What role in Windows Server provides a virtualization platform that allows organizations to run many virtual machines on a single physical computer in order to more efficiently utilize resources and isolate workloads.

A

Hyper-V

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What Windows Server role provides centralized management of and access to networked printers, so that everyone on the network with the right permissions can connect to these devices.

A

Print and document services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Similar to roles, ________ are optional Windows Server components that provide helper functionality.

A

features

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Microsoft defines ________ as “software programs that, although they are not directly parts of roles, can support or augment the functionality of one or more roles, or improve the functionality of the server.”

A

features

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Windows PowerShell, BitLocker, and SNMP are examples of ________ in Windows Server.

A

features

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What are the 5 FISMO roles in Active Directory

A
  1. Schema Master 2. Domain Naming Master 3. RID Master 4. Infrastructure Master 5. PDC Emulator
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

The Schema Master is an ________-level FSMO role

A

enterprise.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

How many Schema Master roles can there be in an Active Directory forest

A

One

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

The Schema Master role owner is the only domain controller in an Active Directory forest that contains a

A

writable schema partition

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

the domain controller that owns the Schema Master FSMO role must be available to modify its ______ _____

A

forest’s schema.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

raising the functional level of the forest and upgrading the operating system of a domain controller to a higher version than currently exists in the forest will introduce updates to _____ ________ ______

A

Active Directory schema.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Can the Schema Master role be lost with little to no immediate operational impact? Yes or No? and Why?

A

Yes. Because the Schema Master role has little overhead and unless schema changes are needed, it can remain offline indefinitely without noticeable effect

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

The Schema Master role should only be seized when ?

A

The domain controller that owns the role cannot be brought back online

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

The Domain Naming Master is an ________-level role

A

enterprise

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

There can be more than one Domain Naming Master in the Active Directory forest True or False?

A

False There can only be one Domain Naming Master in the Active Directory forest

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Which FSMO (Operations Master) Role is capable of adding & removing domains and applications partitions to the forest?

A

Domain Naming Master - the DNM role owner is the only domain controller in a forest that can add new domains or app partitions or remove them.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Can you remove a domain or application partitions from the forest without the Domain Naming Master? Yes or No?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

The Domain Naming Master role has little overhead and its loss can be expected to result in little to no operational impact, why is that?

A

Because the addition and removal of domains and partitions are performed infrequently and are rarely time-critical operations.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

When should the Domain Naming Master role be seized?

A

Only when the domain controller that owns the role cannot be brought back online.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

What does RID stand for?

A

Relative Identifier Master

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

Is the RID Master a domain-level or enterprise-level role

A

Domain-level

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

How many RID Masters are there.

A

One for each domain in an Active Directory forest

30
Q

What is the RID Master role owner is responsible for?

A

Assigning blocks of Security Identifiers (SID) to different DCs they can use for newly created objects.

31
Q

___ _____ consist of a unique, contiguous range of RIDs

A

RID Pools

32
Q

When are RIDs used?

A

during object creation to generate the new object’s unique Security Identifier (“SID”)

33
Q

Which role master is responsible for moving objects from one domain to another within a forest?

A

RID Master

34
Q

As the PDC in a domain typically receives the most attention from administrators, leaving this role, _______ , assigned to the domain PDC helps ensure reliable availability.

A

RID Master

35
Q

The loss of a domain’s __________ will eventually lead to result in an inability to create new objects within the domain

A

RID Master

36
Q

Bringing a RID Master back online after having seized its role can has no possibility of introducing duplicate RIDs into the domain. True or False

A

False Bringing a RID Master back online after having seized its role can potentially introduce duplicate RIDs into the domain.

37
Q

What does the PDC stand for?

A

Primary domain controller

38
Q

Is the PDC Emulator a domain-level or forest-level role?

A

domain

39
Q

How many PDC Emulators are there in an AD Forest?

A

One

40
Q

While role owner is responsible for backwards compatibility?

A

PDCE

41
Q

______ mimics the single-master behavior of a Windows NT primary domain controller.

A

PDCE

42
Q

To address backward compatibility concerns, the ___________ registers as the target domain controller for legacy applications that perform writable operations and certain administrative tools that are unaware of the multi-master behavior of Active Directory domain controllers.

A

PDCE

43
Q

Each ___________ serves as the master time source within it’s domain.

A

PDCE

44
Q

The PDCE in forest root domain serves as the preferred ___________ server in the forest

A

Network Time Protocol (“NTP”)

45
Q

The PDCE in every other domain within the forest synchronizes its clock to the ______________

A

forest root PDCE

46
Q

non-PDCE domain controllers synchronize their clocks to their domain’s _____, and domain-joined hosts synchronize their clocks to their preferred ___________.

A

PDCE

domain controller

47
Q

Kerberos authentication will fail if the difference between a requesting host’s clock and the clock of the authenticating domain controller exceeds _________

A

5 minutes

48
Q

Processing. When computer and user passwords are changed or reset by a non-PDCE domain controller, the committed update is immediately replicated to the __________

A

domain’s PDCE

49
Q

If an account attempts to authenticate against a domain controller that has not yet received a recent password change through scheduled replication, the request is passed through to the

A

domain PDCE

50
Q

The ______ will attempt to process the authentication request and instruct the requesting domain controller to either accept or reject the authentication request.

A

PDCE

51
Q

All Group Policy Object (“GPO”) updates are committed to the ______________

A

domain PDCE

52
Q

Committing Group Group Policy Object (“GPO”) updates to the domain PDCE prevents what?

A

potential for versioning conflicts that could occur if a GPO was modified on two domain controllers at approximately the same time

53
Q

Domain-level roles can only be transferred to domain controllers in the same domain True or False

A

True

54
Q

Where can enterprise-level roles be transferred to?

A

any suitable domain controller in the forest.

55
Q

When a domain controller is demoted you can control where the FSMO roles will be transferred. True or False

A

False While there are rules that govern how the domain controller being demoted will decide where to transfer its FSMO roles, there is no way to directly control where its FSMO roles will be transferred.

56
Q

What are the 3 ideal methods of moving a FSMO role

A
  1. Management Console 2. PowerShell 3. ntdsutil.exe
57
Q

In order to keep multiple objects from having the same SID, the _________ grants each DC the privilege of assigning certain SIDs.

A

RID Master

58
Q

How many Schema masters can there be?

A

One per forest

59
Q

How many Domain Naming Masters can there be.

A

One per forest

60
Q

How many Relative ID (RID) Masters can there be?

A

One per domain

61
Q

How many Primary Domain Controller (PDC) Emulators can there be

A

One per domain

62
Q

How many Infrastructure Masters can there be?

A

One per domain

63
Q

What role synchronizes the time across DCs in a domain

A

PDCE (Primary Domain Controller)

64
Q

When a user enters a wrong password to login, it’s the DC with which role that is consulted to check if the password has really been changed without partner DC knowledge?

A

PDC Emulator role

65
Q
A
66
Q

In order to keep multiple objects from having the same SID, the __________ grants each DC the privilege of assigning certain SIDs.

A

RID Master

67
Q

The DC with the ________________ role is the authoritative DC in the domain.

A

Primary Domain Controller Emulator

68
Q

How many RIDs does a RID master give every DC at a time.

A

A pool of 500 RIDs

69
Q

When a new domain account or group is created, the DC assigns the new account a ___ and a ____ that’s taken from its local allocated RID pool.

A

SID and a RID

70
Q

_______________. is a blueprint which describes the rules about the type of objects that can be stored in the AD as well as the attributes related to these objects.

A

Active Directory (AD) Schema

Amazon - Cloud Support Engineer (7 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions