Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

70-742 > Install and configure Active Directory Domain Services > Flashcards

Install and configure Active Directory Domain Services Flashcards

1
Q

What components is Active Directory made up of?

A

Domains, Forests, Sites, Domain Controllers, Organizational Units, FSMO (Flexible single master operation) Roles.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What command sequence is used to transfer a FSMO role?

A
  1. ntdsutil.exe
  2. roles
  3. connections
  4. connect to server
  5. quit
  6. transfer role_name
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Which feature requires raising the forest and domain function levels to Server 2016?

A

Group Membership Expriation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Which command creates the file required to deploy a new domain controller using the Install From Media (IFM) option?

A

ntdsutil

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Your Active Directory environment consists of two forests. Each forest contains two domains.

How many Active Directory schemas exist in this configuration?

A

2

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Which command configures Active Directory of Server Core?

A

Install-ADDSDomainController

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Which two Domain Controller options are enabled by default?

A

DNS

Global Catalog

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Which are two valid fields within a DNS SRV record?

A

Weight

Port

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Which Domain Controller attribute shows that a Global Catalog is active?

A

isGlobalCatalogReady

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Which FSMO role allocates blocks of uniquie IDs to Domain Controllers?

A

RID Master

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What commands would a create IFM data file?

A
  1. ntdsutil
  2. activate instance ntds
  3. ifm
  4. create sysvol full C:\IFM
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is the max numbers of RODC that should be deployed in a site?

A

One

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What tool can be used to verify the Global Catalog?

A

ldp.exe

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What command will show which servers currently hold the FSMO role

A

netdom query fsmo

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

You are attempting to prepopulate user credentials for users at a remote branch office where a RODC is deployed, however the credentials never replicate to the RODC.

Whay should you check?

A

Allowed RODC Passwrod Replication Group

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Which Forest Functional Level is required to deploy a RODC?

A

Server 20018

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What are the two Forest level FSMO roles

A

Schema master - responsible for having a single copy of the schema shared by all domains in the forest.

Domain naming master - ensures that unique domain names are used through the forest.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What are the the three Domain level FSMO roles?

A

Relative identifier (RID) master - used to provide RID pools to domain controllers which in turn are used when creating new security principals.

Primary domain controller (PDC) emulator - responsible for time synchronization and password replication.

Infrastructure master - responsible for the consistency of references to objects between domains within a forest.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What doe the Schema master do?

A

Responsible for having a single copy of the schema shared by all domains in the forest.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What does the Domain naming master do?

A

Ensures that unique domain names are used through the forest.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What does the Relative identifier (RID) master do?

A

Used to provide RID pools to domain controllers which in turn are used when creating new security principals.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What does the Primary domain controller (PDC) emulator do?

A

Responsible for time synchronization and password replication.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What does the Infrastructure master do?

A

Responsible for the consistency of references to objects between domains within a forest.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Which cmdlet can be used to view inactive user accounts?

A

Search-ADAccount

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What cmdlet is used to install a RODC?

A

Install-ADDSDomainController -ReadOnly

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What PowerShell commands will create a first domain controller?

A
  1. Install-WindowsFeature -Name ad-domain-services -IncludeManagementTools
  2. Install-ADDSForest -DomainName “company.pri”
  3. Enter a safe mode password
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

What PowerShell command add another domain controller to a domain?

A
  1. Install-WindowsFeature -Name ad-domain-services
  2. Install-ADDSDomainController -DomainName “company.pri” -Credential (Get-Credential company\administrator)
  3. Enter a safe mode password
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

What PowerShell command will remove a domain controller from a domain?

A

Uninstall-ADDSDOmainController

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

What are the steps for creating IFM media?

A
  1. Launch NTDSUTIL
  2. Enter: activate instance ntds
  3. Enter ifm
  4. Enter create sysvol full <target></target>
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

What cmdlet will install ADDS from an IFM file?

A

Install-ADDSDomainController with the -InstallationMediaPath switch

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

What is an Active Directory forest?

A

A forest is a collestion of AD Domains that share a common schema and are bound by an automatically created two-way trust relationship.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

What is an AD Domain?

A

A domain is a logical unit that contains users, groups, computers and other objects..

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

What group can manage multiple domains in a forest?

A

Enterprise Admins

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

What is a Tree?

A

A collection AD DS domains that share a common root domain and have a contigous namespace.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

What is the AD DS schema?

A

A collection of objects types and their properties (aka attributes), that define what sort of objects you can create and manage within your AD DS forest.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

What is an OU?

A

A container within a domain that contains users, groups, computers and other OU.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

What is a container?

A

A collection of objects or collections grouped together. Cannot be linked to GPOs.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

What is a site?

A

A logical representation of a physical location within your organisation.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

What site is created when you install AD DS and create a forest?

A

Default-First-Site-Name

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

Why should you define subnets?

A

It makes it possible for the AD DS forest to determine the physical location of a computer in relation to services offered in the forest.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

What are the three partitions in a domain?

A

Schema

Configuration

Domain

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

What is the Schema partition?

A

A forest-level partition, which changes rarely.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

What does the schema partition contain?

A

The AD DS forest schema.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

What is the Configuration partition?

A

A forest-level partition that changes rarely.

45
Q

What does the Configuration partation contain?

A

Configuration data for the forest.

46
Q

What is the Domain partition?

A

A writable copy of the domain which is stored on all domain controllers. It changes frequently.

47
Q

What does the domain partition contain?

A

The actual objects , such as users and computers, which exist within your forest.

48
Q

What is a Trust Relationship?

A

A sceurity agreement between two domains in an AD DS forest, or between a forest and an external security realm.

49
Q

What cmdlet will install the necessary files for AD DS?

A

Install-WindowsFeature AD-Domain-Services

50
Q

What cmdlet will perform AD DS promotion?

A

Install-ADDSDomainController -InstallDNS -DomainName <fqdn></fqdn>

51
Q

What is the default location for the AD DS Database?

A

C:\Windows\NTDS

52
Q

What is the default location for the AD DS log files?

A

C:\Windows\NTDS

53
Q

What is the default location for the SYSVOL folder?

A

C:\Windows\SYSVOL

54
Q

What level of permission is required to add a new domain controller to an existing domain?

A

Domain Admin

55
Q

What level of permission is required to add a new domain controller in a new domain as part of an existing domain tree or as part of a new domain tree?

A

Enterprise Admins

56
Q

How do you remove a domain controller from a domain?

A

Remove the Active Directory Domain Services feature from the computer.

57
Q

What cmdlets will remove a domain controller from a domain?

A

Uninstall-ADDSDomainController

Uninstall-WindowsFeature AD-Domain-Services

58
Q

What is the Global Catalog?

A

A partial read only copy of all objects in the forestand it hosts a subset of all AD DS account schema attributes

59
Q

Where is adprep.exe located?

A

Server 2016 media in directory:

\Support\Adprep

60
Q

What cmdlets will retrieve information about the current Schema and Domain naming master role holders?

A

Get-ADForest

Get-ADDomain

61
Q

What does the PDC emulator role do?

A

Acts as a time source in the domain.

Propagates password changes

Provides a primary source for GPOs for editing purposes

62
Q

What does the Infrastructure master role do?

A

Maintains inter-domain references, and consequently, this role is only relevant in multidomain forests.

63
Q

What does the RID master role do?

A

Provides blocks of IDs to each of the domain controllers in its domain.

64
Q

What cmdlet will move an operations master role

A

Move-ADDirectoryServiceOperationsRole -Identity - OperationMasterRole <identifier></identifier>

Use -Force is DC hosting role is offline

NTDSUTIL.exe

65
Q

What are the identifier numbers of the operations master role

A

0 - PDC Emulator

1 - RID Master

2 - Infrastructure Master

3 - Schema Master

4 - Domain Naming Master

66
Q

What AD group can be used instead of Administrators to create users and computers?

A

Account Operators group

67
Q

Define UPN?

A

User Principal Name.

The user name.

68
Q

What is best practice when it comes to template accounts?

A

Prevent use of the account by:

Disable the account

Set: User Cannot Change Password.

69
Q

What cmdlet will reset a users password

A

Set-ADAccountPassword -Identity ‘Path to user object’

-Reset -NewPassword (Password)

70
Q

What cmdlet will move an object?

A

Move-ADObject -Identity <container> -TargetPath -<path></path></container>

71
Q

What command line tool can be used to mange users and computers other than PowerShell

72
Q

What cmdlet creates user accounts?

A

New-ADUser

73
Q

What cmdlet modifies the properties of user accounts?

A

Set-ADUser

74
Q

What cmdlet deletes user accounts?

A

Remove-ADUser

75
Q

What cmdlet resets the password of a user account?

A

Set-ADAccountPassword

76
Q

What cmdlet modifies the expiration date of a user account?

A

Set-ADAccountExpiration

77
Q

What cmdlet unlocks a user account?

A

Unlock-ADAccount

78
Q

What cmdlet enables a user account?

A

Enable-ADAccount

79
Q

What cmdlet disables a user account?

A

Disable-ADAccount

80
Q

What groups have permissions to create computers in any OU?

A

Enterprise Admins

Domain Admins

Administrators

Account Operators

81
Q

Where would you change the maximum numbers of computers a standard user can add to a domain?

A

Active Directory Services Interfaces Editor

ADSI Edit

82
Q

What cmdlet creates a new computer account?

A

New-ADComputer

83
Q

What cmdlet displays the properties of a computer account?

A

Get-ADComputer

84
Q

What cmdlet modifies the properties of a computer account?

A

Set-ADComputer

85
Q

What cmdlet deletes a computer account?

A

Remove-ADComputer

86
Q

What cmdlet verifies or repairs the trust relationship between a compter and the domain?

A

Test-ComputerSecureChannel

87
Q

What cmdlet resets the password for a computer account?

A

Reset-ComputerMachinePassword -Repair

88
Q

Where are universal groups membership lists maintained?

A

Global Catalog

89
Q

What cmdlet creates a new group?

A

New-ADGroup

90
Q

What cmdlet modifies the properties of groups?

A

Set-ADGroup

91
Q

What cmdlet displays the properties of groups?

A

Get-ADGroup

92
Q

What cmdlet deletes groups?

A

Remove-ADGroup

93
Q

What cmdlet adds members to groups?

A

Add-ADGroupMember

94
Q

What cmdlet displays the members of a group?

A

Get-ADGroupMember

95
Q

What cmdlet removes members from a group?

A

Remove-ADGroupMember

96
Q

What cmdlet adds group membership to objects?

A

Add-ADPrincipalGroupMembership

97
Q

What cmdlet displays group membership of objects?

A

Get-ADPrincipalGroupMembership

98
Q

What cmdlet removes group membership from an object?

A

Remove-ADPrincipalGroupMembership

99
Q

What cmdlet will create OUs?

A

New-ADOrganizationalUnit

100
Q

What cmdlet modifies the properties of OUs?

A

Set-ADOrganizationalUnit

101
Q

What cmdlet displays the properties of OUs?

A

Get-ADOrganizationalUnit

102
Q

What cmdlet will delete OUs?

A

Remove-ADOrganizationalUnit

103
Q

What three accounts should be used for services instead of a standard account

A

NT AUTHORITY\SYSTEM

NT AUTHORITY\LOCAL SERVICE

NT AUTHORITY\NETWORK SERVICE

104
Q

Where are MSAs stored in ActiveDirectory

A

Managed Service Accounts container.

Advanced Feature view must be enbaled.

105
Q

What is a SPN?

A

Service Principal Name

A unique identifier for a specific service instance and are used to associate a service instance with a service account.

106
Q

What do you need to create a gMSA

A
  • Client computers must run at least Windows 8
  • You must create a key distribution services (KDS) root key for your domain
  • At least one domain controller must be running Windows Server 2012 or later
107
Q

What cmdlet will create a key distribution services (KDS) root key.

A

Add-KdsRootKey –EffectiveImmediately

108
Q

How long before a key distribution services (KDS) becomes active?

A

10 hours.

This is to allow AD DS to replicate the change throughout your forest.

109
Q

What site is created when you first install AD DS and create your forest?

A

Default-First-Site-Name

70-742 (2 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions