Active Directory Concepts and Management Quiz

<p>Each action results in a corresponding PowerShell command. (B)</p> Signup and view all the answers

<p>It enables the recovery of deleted objects without requiring backup. (D)</p> Signup and view all the answers

<p>Click the notifications flag in Server Manager (B)</p> Signup and view all the answers

<p>Add a new forest (D)</p> Signup and view all the answers

<p>To perform restore operations on Active Directory (D)</p> Signup and view all the answers

<p>DNS delegation (A)</p> Signup and view all the answers

<p>Active Directory Integrated DNS (B)</p> Signup and view all the answers

<p>Lightweight Directory Access Protocol (LDAP) (B)</p> Signup and view all the answers

<p>NetBIOS domain name (D)</p> Signup and view all the answers

<p>For fault tolerance and load balancing (B)</p> Signup and view all the answers

<p>Domain (D)</p> Signup and view all the answers

<p>Cloud Integration (B)</p> Signup and view all the answers

<p>You select 'Add a domain controller to an existing domain' (D)</p> Signup and view all the answers

<p>Store and replicate domain data (C)</p> Signup and view all the answers

<p>A collection of one or more Active Directory trees (B)</p> Signup and view all the answers

<p>OUs can contain users, computers, and other directory objects. (A)</p> Signup and view all the answers

<p>Install the DNS Server Role (B)</p> Signup and view all the answers

<p>Domains sharing a common naming structure (C)</p> Signup and view all the answers

<p>It includes sites and servers configured as domain controllers. (C)</p> Signup and view all the answers

<p>Trees may have parent-child domain relationships. (C)</p> Signup and view all the answers

<p>To describe the types and structure of data in the AD database (A)</p> Signup and view all the answers

<p>User Groups (A)</p> Signup and view all the answers

<p>OUs organize multiple objects into logical groups with specific policies. (D)</p> Signup and view all the answers

<p>Computer accounts and default user accounts (C)</p> Signup and view all the answers

<p>An object representing a security account or network resource (A)</p> Signup and view all the answers

<p>Users (D)</p> Signup and view all the answers

<p>The domain is the core logical structure and holds container and leaf objects. (A)</p> Signup and view all the answers

<p>It simplifies the management of policies and groups. (D)</p> Signup and view all the answers

<p>The information stored in a schema attribute (C)</p> Signup and view all the answers

<p>To allow services to access domain resources securely (B)</p> Signup and view all the answers

<p>The order of GPO application is Local Computer, Site, Domain, and Organizational Unit. (B)</p> Signup and view all the answers

<p>Leaf objects typically represent security accounts and resources. (A)</p> Signup and view all the answers

<p>Software Settings (B)</p> Signup and view all the answers

<p>Administrative templates (B)</p> Signup and view all the answers

<p>Provides a method to recover deleted objects. (C)</p> Signup and view all the answers

<p>An administrative unit that identifies resources and policies. (A)</p> Signup and view all the answers

<p>They manage different types of data within Active Directory. (C)</p> Signup and view all the answers

<p>Controlling and managing users’ computer and network environments. (A)</p> Signup and view all the answers

<p>They allow centralized management of user and computer environments. (C)</p> Signup and view all the answers

<p>They are ignored and not applied. (C)</p> Signup and view all the answers

<p>To provide a remote configuration for user and computer environments. (B)</p> Signup and view all the answers

<p>Primary zone (C)</p> Signup and view all the answers

<p>Domain accounts provide access to resources throughout the entire domain. (D)</p> Signup and view all the answers

<p>Intersite replication (B)</p> Signup and view all the answers

<p>Domain directory partition holds all objects in a specific domain. (A)</p> Signup and view all the answers

<p>Domain Naming master (B)</p> Signup and view all the answers

<p>Access across domains is completely restricted. (B)</p> Signup and view all the answers

<p>Determines the replication topology for Active Directory. (C)</p> Signup and view all the answers

<p>Facilitates domain and forest-wide searches. (B)</p> Signup and view all the answers

<p>Policies settings (C)</p> Signup and view all the answers

<p>To configure settings for Control Panel, Network, and System components. (A)</p> Signup and view all the answers

<p>Get-AD Forest (B)</p> Signup and view all the answers

<p>It is not considered authoritative. (B)</p> Signup and view all the answers

Adding a domain to an existing forest that shares the top-level and second-level domain name structure with an existing domain.

Adding a new domain to an existing forest using a separate naming structure.

Tool for managing Active Directory objects, like users, computers, and organizational units.

Setting the compatibility level of the domain controlling which features are available.

Domain controller that does not store any writable data; it is only for reading.

A directory service used to manage and store information about a computer network.

A server running Windows Server with Active Directory Domain Services, responsible for storing and replicating domain data.

An Active Directory container that groups users and resources logically for management.

The core structural unit of Active Directory, providing administrative, security, and policy boundaries.

A grouping of domains sharing the same active directory naming structure.

A collection of Active Directory trees, providing a common Active Directory environment.

Lightweight Directory Access Protocol: A protocol for accessing directory services.

A physical location where domain controllers communicate.

The Windows Active Directory service that manages and provides network resources.

The standard that defines, stores, and accesses Active Directory objects.

Setting up Active Directory on a server to manage users, computers, and resources in a network.

Converting a server to a Domain Controller (DC) in Active Directory.

Choices when setting up the first or subsequent domain controllers in Active Directory.

A complete domain name including all sub-domains, and the top-level domain (e.g. example.com).

Determines the features and capabilities supported in the network hierarchy, affecting compatibility among domain controllers.

Features like DNS, Global Catalog (GC), and read-only domain controllers are chosen when installing domain controllers.

A special boot mode in Active Directory to recover from malfunctions or accidental deletions of active directory objects if they are corrupted or damaged.

Installing more domain controllers to increase reliability, availability, and load balancing in an existing domain.

Defines the structure, type, and organization of data in an Active Directory database.

An object that manages and groups network resources and users.

Pre-defined container objects in Active Directory holding specific types of objects (e.g., users, computers).

The core structure in Active Directory; contains other objects like OUs and folder objects.

An object that holds data but does not contain other objects; often represents a resource or account.

Defines the types of objects that can be stored in Active Directory.

Specifies the specific information stored within each object.

The specific data stored in a particular attribute of an object.

A leaf object in Active Directory representing a user, group or computer.

User Configuration sets policies for users logging into a domain, affecting individual users. Computer Configuration sets policies for all computers within the container, affecting devices directly.

The 'Software Settings' node allows administrators to assign or publish application packages to users or computers within the GPO's scope.

GPOs can be applied at the Local Computer, Site, Domain, or Organizational Unit level, applying policies progressively from these levels.

The 'Security Settings' subtree within the User Configuration/Windows Settings nodes lets administrators control users' access to resources and set security policies.

The 'Administrative Templates' node under User Configuration lets administrators adjust user settings, controlling their environment and network access.

If a GPO setting is not defined or configured, it's not applied at all; the default setting will be used.

GPOs are applied in this order: Local Computer, Site, Domain, and Organizational Unit, with the last defined policy taking precedence.

A directory service is a database that stores information about network resources, used to manage users, computers, and other assets.

Active Directory is built on the X.500 standard and LDAP protocol, providing a standardized way to manage and access information.

Installing the first Domain Controller (DC) on a network creates a new forest and the domain is called the forest root domain.

A Group Policy Object (GPO) is a collection of settings that administrators use to configure user and computer operating environments remotely.

The two default GPOs in Active Directory are the 'Default Domain Policy' and the 'Default Domain Controllers Policy'.

The User Configuration node in a GPO is used to set policies that apply to users within the GPO's scope.

The Computer Configuration node in a GPO is used to set policies that apply to computers within the GPO's scope.

Policies are applied to users or computers and cannot be overridden by users, while Preferences can be overridden.

The Software Settings node allows administrators to install and manage applications remotely.

The Windows Settings node contains various components, including Name Resolution Policy, Scripts, Security Settings, and Policy-based QoS.

Administrative Templates provide settings for various system aspects, including Control Panel, Network, Printers, System, and Windows Components.

A primary zone is a DNS zone that contains a read/write master copy of all resource records for the zone.

A secondary zone is a DNS zone that contains a read-only copy of all resource records for the zone.

A stub zone is a DNS zone that contains a read-only copy of only the SOA and NS records for a zone.

Replication ensures that all domain controllers have an identical copy of the Active Directory database.

There are two types: intrasite replication within the same site and intersite replication across different sites.

The KCC runs on all domain controllers to determine the optimal replication topology.

Directory Partitions are sections of the Active Directory database that contain different types of information.

There's a specific domain controller responsible for each critical function in a forest, called an Operations Master.