NOS 2

Members of the backup operators group can log on locally to and shut down domain controlers

Explicit permissions never override inherited permissions

By default, user account names are case sensitive

The administrator account can be renamed or disabled but cannot be deleted

All computers assigned an address in a subnet require a router to communicate with one another

A schema can be changed by an admin or an application to best suit an organizations needs

A site link is needed to connect two or more sites for replication purposes

A dedicated forest root domain contains only the forestwide administrative accounts and domain controllers needed to run the forestwide operations master roles

The ability to force a user to be disconnected after logon hours expire is a group policy setting

User account names in AD need only be unique inside their container

Which of the following is not an advantage of running a dedicated forest root domain?

Which directory partition contains all objects in a domain, including users, groups, computers, OUs, and other objects?

Match a term below to the following description: The process for replicating AD objects in which changes to the database can occur on any domain controller and are propagated or replicated to all other domain controllers

Which command line tool displays an objects properties onscreen by default, but can redirect output to a file?

Which operations master role is responsible for ensuring that changes made to object names in one domain are updated in references to these objects in other domains?

What is the name of the default site link that is created when active directory is first installed

A _____ is a one-way or two-way nontransitive trust between two domains that aren't in the same forest

18. Which command line tool finds and displays objects in Active Directory that meet specified criteria?

19. Which of the following answers is not a task that can be delegated

Which of the following is not a benefit of using roaming profiles?

21. Each entry in the Discretionary access control list is referred to as an ACE. What does ACE stand for?

You have received a call from an employee about permissions on a shared folder, having found he can no longer access the resource. After checking the folder, you find that the group the employee is in is part of the resource's DACL, but seems to have no effect on the group's permissions. The group's permission entry is the only entry in the DACL. What is wrong?

What is microsofts best practices recommendation for the structure of a group scope nesting?

The Lightweight Directory Access Protocol is based on which of the following technologies?

What directory partition contains information needed to define Active Directory objects and object attributes for all domains in the forest

If the Unlock Account checkbox is selected under a user account's Properties dialog box, what does this mean?

This command line tool modifies existing AD objects

To verify who has been delegated control of an OU, you must ____?

Where are local groups stored?

A process called _ runs on every domain controller to determine the replication topology which defines the domain controller path that Active Directory changes flow through.

In order to ensure no one uses public computer terminals after 5 pm, you've set the log on hours for the guest user accounts to deny log on after 5. However, you've noticed that users are still using the terminals after 5 pm, while other users are denied the ability to log in. Why are some users denied to log on, while other users are still using the terminals?

Select a character that CAN be used in a user account name

Employees in your office have recently been changing desktop wallpapers against company policy. You want to be able to lock down this ability, while preventing other profile changes as well. What is your best option?

Which of the following statements about operations master roles is correct

A seasoned intern, Sally, has been given a new assignment. She must be able to log on locally to DCs, manage some services, manage shared resources, back up and restore files, shutdown DCs, format hard drives, and change the system time. In order to give her only the rights and permissions necessary to complete these tasks, what domain local group will you add her to?

A discretionary access control list (DACL) ________.

The group "TestGroup" has been added to an objects DACL and assigned the Allow Full control permission. TestUserA is a member of TestGroup, which has been assigned Deny Write permission for the object. What is TestUserA's effective permissions?

Which operations master role is responsible for providing backwards compatibility with Windows NT servers configured as Windows NT backup domain controllers or member servers?

Where are user profiles stored by default in windows server 2008?

Which of the below utilities uses comma-separated values to bulk or export AD data?

A ____ is configured manually between domains to bypass the normal referral process

What is a super mandatory profile?

Which of the following is not a valid directory partition type?

How do you change a profile into a mandatory profile?

By default a user's profile is created...

Inherited permissions can't be changed or removed without

Which group matches the following description: This universal group is found only on DCs in the forest root domain. Members have full control over fore twide operations. This group is a member of the Administrators group on all DCs

Which command line tool removes, or deletes objects from AD?

Which of the following is not a valid operation master role?

At about what interval does a computer change its computer account password?

Which statement is false?

The user "TestUserA" has been added to an objects DACL and assigned the Allow Full control permission. However, "TestUserA" has inherited the Deny Full Control permission for the object from its parent container. What is "TestUserA"'s effective permissions?