Net admin quiz 61-90

If your organization has a DNS server hosting a standard primary server and you want to add more DNS servers in the zone, they must host ____.

Active Directory Integrated zones

Standard secondary DNS zones

Standard stub DNS zones

Active Directory Integrated secondary zones

The ____ property of the _ldap record identifies the server as a password change server.

_ldap

_kerberos

_gc

_kpasswd

The ____ for Active Directory defines the objects that can be created in Active Directory.

Database

Template

Directory

Schema

When you see the forest functional level is Windows Server 2008, you also know that every domain and domain controller in the forest must be running at least ____.

Windows NT

Windows Server 2000 Native

Windows Server 2003

Windows Server 2008

A(n) ____________________ application can determine its own Active Directory site membership (and location) and connect to other servers in the same site.

Site-aware

____________________ are used to store information about other zones hosted by other

Stub zones

One easy way to check whether zone transfers are allowed to a server is to use the ____ command.

NSLookup

Dcdiag

IPConfig

Dig

Fine-grained password policies can be implemented if the domain functional level is set to at least ____.

Windows NT

Windows Server 2000 Native

Windows Server 2003

Windows Server 2008

You can easily determine what servers hold all the roles by opening a command prompt and entering the following command: ____

Netdom query fsmo

Netdom query dc

Netdom query pdc

Netdom query trust

A benefit of a secondary DNS server is the ability to provide ____ for clients in the network.

Faster access

Improved security

Fault tolerance

Anonymous logon

In group policy settings, ____ allow you to set and configure different settings on users’ computers.

Standards

Configurations

Preferences

Options

Among the most risky devices in an organization are ____________________ flash drives.

USB

To view how many RIDs are available in the current RID pool for a DC, execute the following command from the command prompt on the DC: ____.

Dcdiag /test: dcpromo /v

Dcdiag /test: ridpool /v

Dcdiag /test: tsgetdc /v

Dcdiag /test: ridmanager /v

A(n) ____ record is used to resolve a name to an IPv4 address

Service location (SRV)

Name server (NS)

AAAA

It’s often said that 75 percent of Active Directory problems can be directly attributed to ___________________.

DNS

RPC over IP uses ____ port mapping to communicate with domain controllers over the IP site link.

Dynamic

Aggregate

Static

Pre-defined

Internet Protocol Security (IPSec) provides confidentiality by encrypting the data using ____.

Internet Key Exchange

Encapsulated Security Payload

Authentication Header

Encrypted Security Header

To determine which server has been designated as the bridgehead server, you can execute the ____ command from the command prompt on a domain controller in the site.

Repadmin /bridgeheads

Repadmin /options

Repadmin /sync

Repadmin /server

The acceptable values for the PSO “mustHave” attribute msDS-msDS-LockoutThreshold are ____.

through 65,535 (values of 3 and 5 commonly used)

Anything greater than 0 (only used if more than one PSO applies)

0 through 255 values of 8 to 15 often used

0 through 1024 (24 commonly used)

It’s possible to create alternative UPN suffixes and assign these to users in the domain.

True

False

NTDSUtil can be used to seize a role without the need to log on to the target DC.

True

False

Stub zones are most commonly used to store information about a child zone associated with a child domain to reduce administrative effort.

True

False

____ is an Active Directory preparation tool that can modify the schema by adding objects and properties needed to support Windows Server 2008 domain controllers.

ADPrep

ADSIEdit

DCPromo

GPUpdate

The only technical reasons to design OUs are ____.

To delegate control or manage objects using Group Policy

Administrative control and well-organized structure

To delegate control or manage security policy

Administrative control and software distribution

You can disable SID filtering using the ____ command on the trusting domain

Netsh

Netdom

Wscript

Netf

____ is used when objects are migrated between domains in separate forests

Interdomain migration

Intraforest migration

Interforest migration

Intradomain migration

The ____ updates cross-domain group-to-user references

PDC emulator

Domain naming master

RID master

Infrastructure master

If your organization includes multiple locations, you can add the sites, subnets, and site links using ____.

Active Directory Sites and Services

Active Directory Users and Computers

Active Directory Site Editor

Active Directory Sites and Linkages

Data replicated between domain controllers includes all the additions, changes, and modifications of objects, such as when a user is added or a password is changed.

True

False

The acceptable values for the PSO “mustHave” attribute msDS-PasswordSettingsPrecedence are ____.

0 through 1024 (24 commonly used)

0 through 65,535 (values of 3 and 5 commonly used)

0 through 255 values of 8 to 15 often used

Anything greater than 0 (only used if more than one PSO applies)

Unlock and Upgrade

Remove all limits from your Quizzes

Net admin quiz 61-90

More Quizzes