MCTS - Net II - Chapter 4

Question 1

The protocol for accessing Active Directory objects and services is based on which of the following standards?

Answer 1

LDAP

Question 2

Which MMC do you use to create OUs?

Answer 2

Active Directory Users and Computers

Question 3

User, computer and group accounts can be referred to as which of the following?

Answer 3

Security principals

Question 4

Which of the following must you modify if you want to change and Active Directory object’s permissions?

Answer 4

DACL

Question 5

An object’s owner automatically has Full control permission for the object. True or False?

Answer 5

False

Question 6

J.Doe is a member of a group that has Full control permission for an OU, which the groups inherited from a parent OU. What is the best way to stop J. Doe from having Write permission to this OU without affecting any other permissions?

Answer 6

Add an explicit Deny ACE for J.Doe to the OU

Question 7

You’re logged on as Admin to a domain controller and are trying to troubleshoot a problem with a user’s access to Active Directory objects. You can open Active Directory Users and Computers to access an object’s properties. However, you can’t view the object’s permissions. What is most likely the problem?

Answer 7

You need to enable Advanced Features.

Question 8

A user’s permissions to an object that are a combination of inherited and explicit permissions assigned the user’s account and groups the user belong to are referred to as which of the following?

Answer 8

Effective permissions

Question 9

Inherited permissions always override explicit permissions. True or False?

Answer 9

False

Question 10

You’re viewing the DACL for an OU and notice an inherited ACE for a user account from the OU, but you get an error message when you attempt to do so. What do you need to do?

Answer 10

Disable inheritance on the OU

Question 11

Which of the following is a directory partition?

Answer 11

Configuration partition, Schema directory partition and Domain directory partition

Question 12

Which is responsible for management of adding, removing and renaming domains in a forest?

Answer 12

Domain naming master

Question 13

Which is responsible for determining the replication topology?

Answer 13

KCC

Question 14

Which of the following do all domains in the forest have in common?

Answer 14

The same schema and the same global catalog

Question 15

Which of the following is not a function of the global catalog?

Answer 15

Facilitates intersite replication

Question 16

You have an Active Directory forest of two trees and eight domains. You haven’t changed any of the operation master domain controllers. On which domain controller is the schema master?

Answer 16

The first domain controller in the forest root domain

Question 17

Which of the following is a valid reason for using multiple forests?

Answer 17

Need for different schemas

Question 18

What can you do to reduce the delay caused by authentication referral?

Answer 18

Create a shortcut trust

Question 19

What can you do to integrate user authentication between Linux and Active Directory?

Answer 19

Create a realm trust

Question 20

Trust relationships between all domains in a forest are two-way transitive trusts. True or False?

Answer 20

True

Question 21

Which of the following is a reason to use multiple domains?

Answer 21

Need for differing account policies, Need for different name identities, and replication control

Question 22

Which of the following is a reason for establishing multiple sites?

Answer 22

Improving authentication efficiency and reducing traffic on the WAN