Module 4 Review Quiz

Question 1

Domain controllers store local user accounts within a SAM database and domain user accounts within Active Directory.
a. True
b. False

Answer 1

b. False

Question 2

Which of the following occurs when you join a computer to an Active Directory domain? (Choose all that apply.)

a. The Domain Users group is added to the local Users group

b. A computer account is created within Active Directory, if one has not been prestaged

c. The Domain Admins group is added to the local Administrators group

d. The SAM database is replaced by the Active Directory database

Answer 2

a. The Domain Users group is added to the local Users group

b. A computer account is created within Active Directory, if one has not been prestaged

c. The Domain Admins group is added to the local Administrators group

Question 3

You can use the Install-ADDSDomain cmdlet within Windows PowerShell to configure a new forest root domain.
a. True
b. False

Answer 3

b. False

Question 4

Which of the following trust relationships can be created between two domains in separate Active Directory forests?

a. Forest trust	
b. Shortcut trust	
c. Realm trust	
d. External trusts

Answer 4

d. External trusts

Question 5

Which of the following group scopes can contain objects from any domain within the forest? (Choose all that apply.)

a. Global
b. Domain local
c. Distribution
d. Universal

Answer 5

b. Domain local
d. Universal

Question 6

You must be a member of the Enterprise Admins group in order to add a trust relationship.
a. True
b. False

Answer 6

a. True

Question 7

Which of the following domain functional levels provides Kerberos armoring? (Choose all that apply.)

a. Windows Server 2008 R2
b. Windows Server 2012
c. Windows Server 2012 R2
d. Windows Server 2016

Answer 7

b. Windows Server 2012
c. Windows Server 2012 R2
d. Windows Server 2016

Question 8

The schema and configuration partitions of the Active Directory database are replicated forest-wide.
a. True
b. False

Answer 8

a. True

Question 9

Your domain consists of two separate physical locations. Each location contains several domain controllers, and you have noticed that domain controller replication traffic consumes a large amount of your Internet bandwidth. What can you do within Active Directory Sites and Services to ensure that replication occurs outside of business hours? (Choose all that apply.)

a. Create a site object for each physical location and ensure that domain controller objects are placed within the correct site object.

b. Create subnet objects for each site. Ensure that the properties of each subnet object contains a schedule that excludes business hours.

c. In the properties of a site link object, configure a replication schedule that excludes business hours.

d. Modify the NTDS Site Settings for each site to include a replication schedule that excludes business hours.

Answer 9

a. Create a site object for each physical location and ensure that domain controller objects are placed within the correct site object.

c. In the properties of a site link object, configure a replication schedule that excludes business hours.

Question 10

Which functions does the global catalog provide? (Choose all that apply.)

a. Fast object searching
b. Time synchronization
c. Universal group membership
d. Domain authentication using UPNs

Answer 10

a. Fast object searching
c. Universal group membership
d. Domain authentication using UPNs

Question 11

If a global catalog cannot be placed within a branch office site, you can enable UGMC on the site to ensure branch office domain controllers provide fast authentication.
a. True
b. False

Answer 11

a. True

Question 12

Which of the following FSMO roles are stored on one domain controller within each domain? (Choose all that apply.)
a. Schema Master
b. PDC Emulator
c. RID Master
d. Domain Naming Master

Answer 12

b. PDC Emulator
c. RID Master

Question 13

Before installing Active Directory on a Windows Server system to function as an additional domain controller within a forest, you must first ensure that the Windows Server is configured to contact a DNS server that contains the appropriate service records for the forest.

a. True
b. False

Answer 13

a. True

Question 14

You wish to add a copy of the global catalog to a domain controller within Active Directory Sites and Services. For which object must you right-click and select Properties?

a. Server
b. NTDS Settings
c. NTDS Site Settings
d. Site link

Answer 14

b. NTDS Settings

Question 15

The Active Directory Recycle Bin can be enabled using the Active Directory Domains and Trusts tool.
a. True
b. False

Answer 15

b. False

Question 16

Which default folder under a domain within Active Directory Users and Computers contains the Administrator user account and Domain Admins group?

a. Builtin
b. Default
c. Users
d. ForeignSecurityPrinciples

Answer 16

c. Users

Question 17

Which of the following PowerShell cmdlets can be used to move or seize a FSMO role?
a. Move-FSMORole

b. Move-ADDirectoryServerOperationMasterRole

c. Transfer-ADOperationMasterRole

d. Set-DirectoryServerOperationMaster

Answer 17

b. Move-ADDirectoryServerOperationMasterRole

Question 18

Creating OUs within the Active Directory database is also called prestaging.
a. True
b. False

Answer 18

b. False

Question 19

You have created a template user account within Active Directory Users and Computers. What must you do to create additional user accounts based on this template user account?

a. Create a new user account and select the template user account when prompted

b. Create a new user account and specify the name of the template user account in the User Principle Name text box

c. Right-click the template user account, and click Copy

d. Right-click the template user account, and click Import

Answer 19

c. Right-click the template user account, and click Copy

Question 20

If a RODC is stolen, you can delete the computer account to reset affected user and computer accounts.
a. True
b. False

Answer 20

a. True