Net Admin 91-120

If a DNS server has a ____, it can authoritatively answer queries for hosts in that zone or with that common namespace.

DNS file

DNS zone

DNS slave

DNS stub

The ____ command-line tool is used to seize a role.

IPConfig

ADSIEdit

NTDSUtil

DCpromo

A NetBIOS name is ____ bytes long.

255

A(n) ___________________ record is used to find mail servers.

Mail exchange

Clients use the ____ service to log on to a domain

Netlogon

RPC

LSASS

DFS

Distributed File System (DFS) is not site-aware.

True

False

The infrastructure master works most efficiently if it is on a DC designated as a global catalog server.

True

False

GPOs can be linked to either the Users container or the Computers container.

True

False

In Universal Group Membership Caching, cached data will expire in ____.

30 minutes

8 hours

24 hours

7 days

In Universal Group Membership Caching, the cached data is automatically renewed every ____ by default.

30 minutes

8 hours

24 hours

7 days

When global groups are added to other global groups it is commonly called ____.

Aggregating

Concatenating

Nesting

____ dynamic updates require that the DNS server is hosted on a domain controller and that a primary ADI zone is being used.

GSSAPI

TDS

Reverse

Secure

You must be a member of the Domain Admins group to create a PSO.

True

False

The ____ manages the pool of available RIDs and issues banks of RIDs to other domain controllers.

Schema master

RID master

Domain naming master

PDC emulator

If zone transfers are not authorized to the server where you’re logged on, the response will be “____” when performing NSLookup.

Query Refused

Access Refused

An Active Directory ____________________ includes one or more trees comprised of one or more domains.

Forest

Froest

A host name can be up to ____ characters, all of which are readable.

255

The ____ authentication option can be used to prevent users in another forest from automatically being authenticated.

Selective

Filtered

The ____ setting is useful to control the membership of any group in Active Directory.

Restrict Group Membership

Lock Group Membership

The full DNSCmd command for GlobalNames is ____

Dnscmd ServerName /config /Enableglobalnamessupport 1

Dnscmd ZoneName /config /Enable:GlobalNameSupport=1

The ____________________ Policy includes the account lockout duration, threshold, and the time to reset the account lockout counter.

Account Lockout

_____________ is used when objects are migrated between domains in the same forest.

Intraforest migration

Normally, only the ____ group is in the Security Filtering area.

Authenticated Users

Security Policy Administrators

It’s possible to create a delegated subdomain manually without running DCpromo.

True

False

Group Policy is normally applied every ____ minutes.

90 - 120

30 - 45

Universal group membership information is only contained in the ____.

True

False

Cached credentials only provide ____________________ access.

Local

A ____ is a computer account that is created in Active Directory and designated as an RODC.

Prestaged RODC

Cached RODC

Forest trusts are possible once the forest functional level has been raised to ____.

Windows NT

Windows Server 2000 Native Correctc. Windows Server 2003 d. Windows Server 2008

Windows Server 2003

Windows Server 2008

Unlock and Upgrade

Remove all limits from your Quizzes

Net Admin 91-120

More Quizzes