Identify Infrastructure Flashcards
1
Q
What is Active Directory Domain Services?
A
A directory service that is the central store for all domain objects.
2
Q
(AD DS) Logical or physical?
Partition
A
Logical
3
Q
(AD DS) Logical or physical?
Schema
A
Logical
4
Q
(AD DS) Logical or physical?
Domain
A
Logical
5
Q
(AD DS) Logical or physical?
Domain tree
A
Logical
6
Q
(AD DS) Logical or physical?
Forest
A
Logical
7
Q
(AD DS) Logical or physical?
OU
A
Logical
8
Q
(AD DS) Logical or physical?
Container
A
Logical
9
Q
(AD DS) Logical or physical?
Domain controller
A
Physical
10
Q
(AD DS) Logical or physical?
Data store
A
Physical
11
Q
(AD DS) Logical or physical?
Global catalog server
A
Physical
12
Q
(AD DS) Logical or physical?
Read-only domain controller
A
Physical
13
Q
(AD DS) Logical or physical?
Site
A
Physical
14
Q
(AD DS) Logical or physical?
Subnet
A
Physical
15
Q
What is an AD DS partition?
A
A portion (or naming context) of the AD DS database
16
Q
What is the default Active Directory database file location?
A
C:\Windows\NTDS
17
Q
What is the Active Directory database file name?
A
Ntds.dit
18
Q
What is the AD DS schema?
A
A set of definitions of the object types and attributes that you use to define the objects created in AD
19
Q
What is an AD domain?
A
A logical administrative container for storing and managing objects
20
Q
What is an AD DS domain tree?
A
A hierarchical collection of domains sharing a common root domain and a contiguous DNS namespace
21
Q
What is an AD DS forest?
A
A collection of one or more domains with a common AD DS root, schema, and global catalog
22
Q
What is an AD DS OU?
A
A container object for users, groups, and computers that provides framework for assigning administrative rights and administration by linking Group Policy Objects (GPOs)
23
Q
What is an AD DS container?
A
An object that provides an organization framework for use in AD DS
24
Q
What AD DS logical component cannot be linked to a container?
A
GPOs
25
What is an AD domain controller?
A server that contains a copy of the AD DS database
26
What is an AD DS data store?
The data stored on each domain controller
27
What is an AD DS Global catalog server?
A domain controller that hosts the global catalog
28
What is the name of a partial, read-only copy of all of the objects in a multiple-domain forest?
AD DS global catalog
29
What purpose does a global catalog serve?
It speeds up searches for objects that might be stored on domain controllers in a different domain in the forest
30
What is a special, read-only installation of AD DS?
Read-only domain controller (RODC)
31
Where are read-only domain controllers commonly found?
Branch offices lacking optimal physical security and IT support
32
What is an AD DS site?
A container for AD DS objects and services that are specific to a physical location
33
What is an AD DS subnet?
A portion of the network IP addresses
34
What is an AD DS managed service account (MSA)?
An object class used to facilitate service-account management
35
What enables you to extend the capabilities of standard managed service accounts (MSA) to more than one server in your domain?
Group Managed Service Accounts (gMSA)
36
For what does the acronym SPN stand?
Service Principal Name
37
What is a managed domain account that provides provided automatic password management, simplified SPN management, and the ability to delegate this management to other admins?
Standalone Managed Service Account (sMSA)
38
What are the two group types in a Windows Server enterprise network?
Security and distribution
39
What are the four group scopes in Windows Server?
Local, domain-local, global, and universal
40
What is a group object?
A representation of a group in AD DS.
41
What is a group in AD DS?
A logical grouping of objects
42
Which AD DS group type is security-enabled, and allows you to assign permissions to various resources?
Security group
43
Which AD DS group type is not security-enabled?
Distribution group
44
Which AD DS group type is commonly used by email applications?
Distribution group
45
Based on scope, which Windows Server group is available only to the computer where they exist?
Local group
46
Which Windows Server group scope only allows for the assignment of abilities and permissions for local resources?
Local group
47
Which Windows Server group scope only allows for the assignment of abilities and permissions for domain-local resources?
Domain-local group
48
Which Windows Server group scope is used for 1) standalone servers or workstations, 2) domain-member servers that are not domain controllers, or on 3) domain-member workstations?
Local group
49
Which Windows Server group scope is used primarily for managing access to resources or to assign management rights and responsibilities?
Domain-local group
50
Which Windows Server group scope is used primarily for consolidation of users who have similar characteristics?
Global group
51
Which Windows Server group scope is used mostly in multidomain networks?
Universal group
52
Which Windows Server group scope would you use to join users who are part of the same department or geographic location?
Global group
53
What is a AD computer object?
A representation of a computer in AD
54
Where is the default location for computers in AD?
The Computers container
55
All the domains within a _____ share a contiguous namespace.
Tree
56
All of the root domains within a _____ do not share a contiguous namespace.
Forest
57
What four objects exist in the forest root domain?
The schema master role
The domain naming master role
The Enterprise Admins group
The Schema Admins group
58
Which domain contains the schema master role, the domain naming master role, the Enterprise Admins group, and the Scheme Admins group?
Forest root domain
59
An AD DS forest in often described to be serving as what two boundaries?
Security boundary and replication boundary
60
Which objects exist in each domain (including the forest root)?
The RID master role
The Infrastructure master role
The PDC emulator master role
The Domain Admins group
61
Which type of trust relationship is automatically generated between domains within a multiple-domain AD DS forest?
Two-way transitive trust
62
Where does Windows Server store the trusted domain objects in AD DS?
The System container
63
For what does the acronym "RSAT" stand?
Remote Server Administration Tools
64
_______ ________ authenticate all users and computers in a domain.
Domain controllers
65
For what does the acronym "FQDN" stand?
Fully Qualified Domain Name
66
What is the default Active Directory SYSVOL folder location?
C:\Windows\SYSVOL
67
This physical component of AD DS does not cache any user passwords by default.
Read-Only Domain Controller (RODC)
68
_____ ______ is a collection of critical OS and server role files that include AD DS database and registry.
System state
69
For what does the acronym "DSRM" stand?
Directory Services Restore Mode
70
What is Directory Services Restore Mode (DSRM)?
A special boot mode for repairing or recovering Active Directory
71
An operations master role is also known as a _____ ______ ______ ______ role.
Flexible Single Master Operation (FSMO) role
72
Regarding operations master roles, which two roles does each forest have?
Schema master
| Domain naming master
73
Regarding operations master roles, which three roles does each AD DS domain have?
```
Relative ID (RID) master
Infrastructure master
Primary domain controller (PDC) emulator master
```
74
Which domain controller do is contacted to add or remove a domain, or make domain name changes?
Domain naming master
75
Which domain controller is contacted to make schema changes?
Schema master
76
Which domain controller allocates blocks of relative IDs (RIDs) to each domain controller within a domain to use when building security IDs (SIDs)
RID master
77
What is an AD DS security ID (SID)?
A unique identifying number assigned by the domain controller to a security principal object
78
Which domain controller maintains interdomain object refernces?
Infrastructure master
79
Which domain controller serves as the time source for the domain, as well as receives any urgent password changes?
Primary domain controller (PDC) emulator master
80
A planned move of a DC role between two online domain controllers is known as _____ ___ ____.
"Transferring the role"
81
A emergency move of a DC role from one domain controller to another is known as
"Seizing the role"
82
Should you need to seize a DC role, which two tools can you use?
ntdsutil.exe CLI tool or Windows PowerShell
83
What result will running "netdom query fsmo" yield?
A list of where the FSMO roles reside
84
An AD DS _____ is the component that defines all the object classes and attributes that AD DS uses to store data.
schema
85
Any changes to the AD DS schema originate at the schema ______.
master
86
You define Group Policy settings within a ____ _____ _____.
Group Policy Object (GPO)
87
______ _______ is a framework in Windows OSs that allow you to manage configurations in an AD DS domain.
Group Policy
88
What are the two main nodes in the Group Policy Management Editor?
Computer Configuration
User Configuration
89
The _____ of a GPO is the collection of users and computers that will apply the settings in the GPO.
scope
90
To what three things can you link a GPO?
Sites
Domains
OUs
91
You can further narrow the scope of a GPO with these two filter types:
Security
Windows Management Instrumentation (WMI)
92
Arrange the following GPOs in the correct processing order:
```
Domain-linked GPOs
Local GPOs
Site-linked GPOs
Child OU-linked GPOs
OU-linked GPOs
```
1. Local GPOs
2. Site-linked GPOs
3. Domain-linked GPOs
4. OU-linked GPOs
5. Child OU-linked GPOs
Remember: "LSD, oh see!"
93
In regards to GPO inheritance, the (higher/lower) the number, the (higher/lower) the precedence.
Lower, higher
94
You can configure a domain or OU to prevent the inheritance of policy settings, which is known as ______ __________.
Block inheritance
95
To evaluate the GPO precedence for an OU or domain, which tab would you select?
Group Policy Inheritence
96
When AD DS is installed, which two default GPOs does Windows Server create?
Default Domain Policy GPO
Default Domain Controllers Policy GPO
97
Which default GPO specifies password settings, account lockout settings, and Kerberos v5 authentication protocol policies?
Default Domain Policy GPO
98
Which default GPO would you modify to implement auditing policies and to assign user rights that are required on domain controllers?
Default Domain Controllers Policy GPO
99
Within both the Computer Configuration and User Configuration nodes are the ______ and __________ nodes.
Policy
Preference
100
For what does the acronym "RSoP" stand?
Resultant Set of Policy
101
In AD DS, it is best practice in a multi-domain enterprise to create a _____ _____ for .admx files.
Central Store
