Install and Admin Active Directory

Question 1

Why can you not use distribution groups to assign permissions explicitly or implicitly through membership in other groups for resources?

Answer 1

Unlike security groups, distribution groups are not security principals.

Question 2

Which command can be used to redirect newly created computer accounts from the default container named CN=Computers to a specified container?

Answer 2

The redircmp command.

Question 3

Which command can be used to redirect newly created users from the default container named CN=Users to a specified container?

Answer 3

The redirusr command.

Question 4

When creating a template user account, why should you set the Account is Disabled property on the account?

Answer 4

So no one can use it to log in.

Question 5

Which type of Windows servers responds to forest-wide Lightweight Directory Access Protocol (LDAP) queries over port3268?

Answer 5

The global catalog server.

Question 6

What feature in a Group Policy policies allow you to control the membership of sensitive groups through Active Directory rather than through traditional group membership editing tools, such as Active Directory Users and Computers or PowerShell?

Answer 6

Restricted Groups

Question 7

Which PowerShell cmdlet adds members to groups?

Answer 7

Add-ADGroupMember

Question 8

What permissions are assigned to the parent OU and child OU when you create a child OU that has theProtect object from accidental deletion setting enabled?

Answer 8

• An explicit Deny ACEs for the Delete and Delete Subtree advanced permissions for the Everyone group is applied to the child OU.
• An explicit Deny ACE for the Delete All Child Objects permission for the Everyone group is applied to the parent container OU.

Question 9

How would you grant a group of users the authority to reset user’s passwords for the OUs located in the domain?

Answer 9

On the OU, use the Delegation of Control Wizard to delegate the Reset user passwords and force password change at next logon task to the group.

Question 10

Which PowerShell cmdlet modifies properties of OU?

Answer 10

Set-ADOrganizationalUnit

Question 11

How many domain controllers can have the PDC emulator role?

Answer 11

Only one domain controller per domain.

Question 12

Which installation method can reduce the replication traffic that is initiated during the installation of an additional domain controller in an ActiveDirectory domain?

Answer 12

The install from media (IFM) method.

Question 13

To create installation media for a full (writable) domain controller, what command must you run on a writable domain controller that is running Windows Server2012?

Answer 13

Thentdsutilifmcommand.

Question 14

Which user right gives a user permissions to change the time and date on the internal clock of the computer?

Answer 14

The Change the system time local policy.

Question 15

How many domain controllers can have the domain naming master role?

Answer 15

Only one domain controller per forest.

Question 16

In Active Directory Users and Computers, how do you display the Security and Object tab in the properties of an OU?

Answer 16

You need to click View and thenAdvanced Features in Active Directory Users and Computers before clicking on the properties of the OU.

Question 17

Which file on a domain controller contains all resource records for the Active Directory domain controller, including its SRV records?

Answer 17

Netlogon.dns in the %systemroot%\System32\Config folder.

Question 18

How many domain controllers can have the schema master role?

Answer 18

Only one domain controller per forest.

Question 19

Which PowerShell cmdlet deletes user accounts?

Answer 19

Remove-ADUser

Question 20

Which PowerShell cmdlet modifies the properties of groups?

Answer 20

Set-ADGroup

Question 21

What must an Enterprise Administrator do in Active Directory Users and Computers before moving a newly created child OU to a different parent OU?

Answer 21

On the properties of the child OU, under the Object tab, clear theProtect object from accidental deletion checkbox.

Question 22

What comprises the membership list of a global group?

Answer 22

• Users and computers from the same domain as the global group.
• Global groups from the same domain.

Question 23

What comprises the membership list of a local group?

Answer 23

• Users and computers from any trusted domain.
• Global groups from any trusted domain.
• Universal groups from any trusted domain.

Question 24

Which PowerShell cmdlet modifies the properties of a computer account?

Answer 24

Set-ADComputer

Question 25

Which user right allows a user to add workstations to the domain?

Answer 25

The Add workstations to domain local policy.

Question 26

Which command can be used to join a computer to a domain without contacting a domain controller?

Answer 26

djoin.exe

Question 27

Which operations master role is responsible for assigning Security Identifiers (SIDs) to objects such as users and groups?

Answer 27

RID Master

Question 28

How can you ensure that Alice and John are members of the Backup Operators group on every computer in domain?

Answer 28

Configure Backup Operators as a restricted group in a GPO at the domain level with Alice and John as members.

Question 29

What type of group can include users from any domain within a forest, and can be assigned permissions for in any domain in the forest?

Answer 29

A universal group.

Question 30

Which user right gives a user permissions to back up files and folders on a computer, but not restore them?

Answer 30

The Back up files and directories local policy.

Question 31

Which domain controller should be the source of the media that you use to create additional domain controllers with the install from media (IFM) method?

Answer 31

A domain controller in the same domain as the new domain controller.

Question 32

Which service should you restart to re-register all SRV records for a domain controller?

Answer 32

The NetLogon service.

Question 33

Which operating system should be the source of the media that you use to create additional domain controllers with the install from media (IFM) method?

Answer 33

The operating system should be copied from a domain controller running the same operating system version in the same domain as the new controller.

Question 34

Which operations master role is responsible for updating references from local objects to objects in other domains?

Answer 34

infrastructure master

Question 35

What comprises the membership list of a domain local group?

Answer 35

• Users and computers from any trusted domain.
• Global groups from any trusted domain.
• Universal groups from within the forest.
• Domain local groups from the same domain.

Question 36

Which type of domain controller contains a partial, read-only replica of every domain in the forest other than its own domain?

Answer 36

global catalog server

Question 37

Which PowerShell cmdlet deletes groups?

Answer 37

Remove-ADGroup