Lesson 3: Planning an Active Directory Deployment

Question 1

1. Active Directory was first introduced in which operating system?
   a) Windows 2000 Server
   b) Windows XP SP2
   c) Windows 2003 Server
   d) Windows Vista

Answer 1

a) Windows 2000 Server

Question 2

2. Where do users log in when joining an Active Directory domain?
   a) application
   b) individual computer
   c) domain
   d) server

Answer 2

c) domain

Question 3

3. There are two basic classes of objects in an Active Directory domain. Which of the following is an object?
   a) logical
   b) leaf
   c) tree
   d) attribute

Answer 3

b) leaf

Question 4

4. Which of the following is a main group type found in Active Directory?
   a) security
   b) domain
   c) global
   d) universal

Answer 4

a) security

Question 5

5. Which group is used most often when designing an Active Directory infrastructure?
   a) distribution
   b) universal
   c) global
   d) security

Answer 5

d) security

Question 6

6. Which group is used for nonsecurity-related functions, such as sending email messages to a collection of users?
   a) distribution
   b) universal
   c) global
   d) security

Answer 6

a) distribution

Question 7

7. DNS naming limitations call for a maximum of how many characters per domain name?
   a) 32
   b) 63
   c) 128
   d) 255

Answer 7

b) 63

Question 8

8. What type of compatibility are functional levels designed to provide in Active Directory installations running domain controllers with various versions of the Windows Server operating system?
   a) functional
   b) forward
   c) backward
   d) existing

Answer 8

c) backward

Question 9

9. What is the name of the communications protocol called for by the original X.500 standard?
   a) Directory Access Protocol
   b) Data Access Protocol
   c) Lightweight Directory Access Protocol
   d) Lightweight Data Access Protocol

Answer 9

a) Directory Access Protocol

Question 10

10. The Read-Only Domain Controller (RODC) supports only incoming replication traffic. As a result, what is it possible to do when using a Read-Only Domain Controller?
    a) create Active Directory objects
    b) modify Active Directory objects
    c) delete Active Directory objects
    d) none of the above

Answer 10

d) none of the above

Question 11

11. A site topology consists of all of the following Active Directory object types except __________.
    a) Sites
    b) Subnets
    c) Subnet Links
    d) Site Links

Answer 11

c) Subnet Links

Question 12

12. When using the subzone method, you can leave the Internet DNS servers in place and use Windows Server 2008 DNS servers to host the zone for the subdomain. Which of the following is a configuration change that you must make?
    a) You must use your domain controllers as your DNS servers.
    b) You must use your Internet DNS servers to host your Active Directory domains.
    c) You must turn on dynamic updates on the DNS servers.
    d) You must configure Internet DNS servers to delegate the Active Directory subdomain to the Windows Server 2008 DNS servers.

Answer 12

d) You must configure Internet DNS servers to delegate the Active Directory subdomain to the Windows Server 2008 DNS servers.

Question 13

13. Which of the following is not a reason for creating an organizational unit?
    a) assigning Group Policy settings
    b) duplicating organizational divisions
    c) implementing domains
    d) delegating administration

Answer 13

c) implementing domains

Question 14

14. Which of the following is not a variable that can affect the performance of an Active Directory installation?
    a) length of the domain name you create
    b) hardware you select for your domain controllers
    c) capabilities of your network
    d) types of WAN links connecting your remote sites

Answer 14

a) length of the domain name you create

Question 15

15. To use a Windows Server 2008 computer as a domain controller, you must configure it to use a(n) __________.
    a) APIPA address
    b) address supplied by a DHCP server
    c) static IP address
    d) none of the above

Answer 15

c) static IP address

Question 16

16. Every Active Directory domain should have a minimum of __________ domain controllers.
    a) one
    b) two
    c) three
    d) four

Answer 16

b) two

Question 17

17. An Active Directory domain controller can verify a user’s identity by which of the following methods?
    a) smart cards
    b) passwords
    c) biometrics
    d) all of the above

Answer 17

d) all of the above

Question 18

18. Which of the following is not a reason why you should try to create as few domains as possible when designing an Active Directory infrastructure?
    a) A license must be purchased from Microsoft for each domain you create.
    b) Additional domains increase the overall hardware and maintenance costs of the deployment.
    c) Some applications might present security issues when working in a forest with multiple domains.
    d) Additional domains increase the number of administrative tasks that must be performed.

Answer 18

a) A license must be purchased from Microsoft for each domain you create.

Question 19

19. Which of the following Active Directory elements provides a true security boundary?
    a) organizational units
    b) domains
    c) domain trees
    d) forests

Answer 19

d) forests

Question 20

20. What is the primary difference between global and universal groups?
    a) Global groups decrease the amount of replication traffic between sites.
    b) Universal groups add more data to the global catalog.
    c) You can use universal groups across the board if your network consists of multiple sites.
    d) Global groups add more data to the universal catalog.

Answer 20

b) Universal groups add more data to the global catalog.

Question 21

21. Which of the following are reasons for creating more than one domain in a forest? (Choose all that apply.)
    a) Security
    b) Administration
    c) Namespaces
    d) Coordination

Answer 21

a) Security
b) Administration
c) Namespaces

Question 22

22. Which of the following are reasons you should try to create as few domains as possible when designing an Active Directory infrastructure? (Choose all that apply.)
    a) A license must be purchased from Microsoft for each domain you create.
    b) Additional domains increase the overall hardware and maintenance costs of the deployment.
    c) Some applications might present security issues when working in a forest with multiple domains.
    d) Additional domains increase the number of administrative tasks that must be performed.

Answer 22

b) Additional domains increase the overall hardware and maintenance costs of the deployment.
c) Some applications might present security issues when working in a forest with multiple domains.
d) Additional domains increase the number of administrative tasks that must be performed.

Question 23

23. Which of the following Active Directory elements provides a true security boundary?
    a) organizational units
    b) domains
    c) domain trees
    d) forests

Answer 23

d) forests

Question 24

24. Which of the following is not a disadvantage of creating multiple domains?
    a) Group policies are not shared between domains.
    b) Moving objects are more difficult to move between domains.
    c) Access control is more difficult across domains.
    d) You can have only one global catalog.

Answer 24

d) You can have only one global catalog.