Active Directory Configuration Quiz

False (B)

Administrative Templates

<p>True (A)</p> Signup and view all the answers

<p>True (A)</p> Signup and view all the answers

<p>False (B)</p> Signup and view all the answers

<p>False (B)</p> Signup and view all the answers

<p>True (A)</p> Signup and view all the answers

<p>False (B)</p> Signup and view all the answers

<p>Schema</p> Signup and view all the answers

<p>Infrastructure Master (A), RID Master (B)</p> Signup and view all the answers

<p>Service Pack</p> Signup and view all the answers

<p>Shared Folders (B)</p> Signup and view all the answers

<p>Member Server (B)</p> Signup and view all the answers

<p>True (A)</p> Signup and view all the answers

<p>Scope</p> Signup and view all the answers

<p>DNS</p> Signup and view all the answers

<p>A large organization with multiple locations (D)</p> Signup and view all the answers

<p>Remove-ADDSDnsServer</p> Signup and view all the answers

<p>Power User (C)</p> Signup and view all the answers

<p>Clean Install</p> Signup and view all the answers

<p>Directory Services Restore Mode (DSRM)</p> Signup and view all the answers

<p>Global Catalog Servers</p> Signup and view all the answers

<p><code>Rename-Computer Pittsburgh -NewName Chicago</code></p> Signup and view all the answers

<p>When the organization has a small number of users and computers (C)</p> Signup and view all the answers

<p>Organizational Unit (OU)</p> Signup and view all the answers

<p>PDC Emulator</p> Signup and view all the answers

<p>Active Directory Domain Services (AD DS)</p> Signup and view all the answers

<p>Add-Computer</p> Signup and view all the answers

<p>Install-ADDSForest</p> Signup and view all the answers

<p>Organizational Unit (OU)</p> Signup and view all the answers

<p>MSI package</p> Signup and view all the answers

<p>SYSVOL</p> Signup and view all the answers

<p>Intrasite replication</p> Signup and view all the answers

<p>Installing Active Directory Domain Services (A)</p> Signup and view all the answers

<p>It depends on several factors, including the size of the change and the network traffic.</p> Signup and view all the answers

<p>They are applied in the order that they are listed in the Group Policy Object (GPO).</p> Signup and view all the answers

<p>Schema (C)</p> Signup and view all the answers

<p>True (A)</p> Signup and view all the answers

<p>A record</p> Signup and view all the answers

<p>It specifies the amount of time that a DNS server should cache the information about an IP address.</p> Signup and view all the answers

<p>Forward Lookup Zone</p> Signup and view all the answers

<p>C:\Windows\System32\dns</p> Signup and view all the answers

<p>SOA (Start of Authority) record</p> Signup and view all the answers

<p>Secondary DNS servers (B)</p> Signup and view all the answers

<p>True (A)</p> Signup and view all the answers

<p>A primary domain controller (D)</p> Signup and view all the answers

<p>Directory Services Restore Mode (DSRM)</p> Signup and view all the answers

<p>It stores partial data of Active Directory objects across all domains. (C)</p> Signup and view all the answers

<p>Caching DNS servers for quicker access to recent queries. (B)</p> Signup and view all the answers

<p>Remove-WindowsFeature (B)</p> Signup and view all the answers

<p>Clean Installation (A)</p> Signup and view all the answers

<p>Multimaster replication (B)</p> Signup and view all the answers

<p>Windows Components (A)</p> Signup and view all the answers

<p>Organizational Unit (B)</p> Signup and view all the answers

<p>Infrastructure Master (C)</p> Signup and view all the answers

<p>Rename-Computer -NewName Chicago (D)</p> Signup and view all the answers

<p>Assigned Applications (B)</p> Signup and view all the answers

<p>To establish the replication topology for domain controllers (A)</p> Signup and view all the answers

<p>Disabled by default and needs to be enabled (D)</p> Signup and view all the answers

<p>dcpromo.exe (D)</p> Signup and view all the answers

<p>Multi-master replication (B)</p> Signup and view all the answers

<p>Global Catalog role (B)</p> Signup and view all the answers

<p>DISM /Online /Set-Edition (B)</p> Signup and view all the answers

<p>It is primarily used in remote locations for security reasons (B)</p> Signup and view all the answers

<p>User's first name (C)</p> Signup and view all the answers

Holds configuration info like domain controller replication details.

Windows Server installation without the GUI.

Define data types (like first name, last name) in AD objects.

Define user access levels and resources.

Administrator and User accounts created by Windows.

Ensures AD object changes are replicated to all DCs automatically

Best way to update servers and clients in Windows Domain

Determines replication topology on every domain controller

A server that has a copy of basic information for all AD objects

Disabled by default; lets you recover deleted AD objects

Preferred tool to install AD on Server Core.

The default protocol suite in Windows Server 2019.

Doesn't block ICMP Echo Request.

Collection of multiple domains.

An organizational unit within a forest.

A read-only domain controller that can log on.

Defines which users/computers Group Policy affects

Serves as a central repository for information.

A collection of bug fixes and updates in an OS.

Organizing elements in AD

Joining a server to an existing network without running AD

First computer with Active Directory

Mapping Domain Name to IP Address

Time a DNS record is cached

Tasks executed after software installation, like configuring services, applying security settings, or testing functionality.

Intrasite replication within a domain typically occurs very quickly, usually within seconds or minutes.

Group Policy settings are applied in a specific order, starting with local settings and progressing to domain and site settings.

The Active Directory Schema defines the objects and attributes within a directory.

A special directory server that contains basic information about all objects in the Active Directory forest.

A special role that affects the entire Active Directory forest, such as the Schema Master or Domain Naming Master.

The dism.exe command can be used to change the edition of a Windows Server installation without reinstalling the entire operating system.

This Active Directory partition contains information about object types and attributes for all domains within the forest.

Server Core installations are ideal for situations where minimizing resource usage and attack surface is crucial.

A feature that allows recovering deleted Active Directory objects within a specific time frame.

These objects are automatically created: Users, Computers, Shared Folders, Groups, and Organizational Units.

Group Policy offers centralized control over updates for all computers in a Windows domain.

A Read-Only Domain Controller that can authenticate users but cannot make changes to Active Directory objects.

Group Policy Objects (GPOs) use security filtering to determine which users and computers they apply to. This filtering is based on security groups, which are defined in Active Directory. For example, a GPO could be specifically targeted to members of the 'Administrators' group, or to all users within a particular organizational unit. This enables granular control over policy application, impacting only the intended users and machines.

If you install Active Directory Domain Services (AD DS) on a server without any other domain controllers, it automatically installs the DNS Server role. This is because AD DS relies heavily on DNS for name resolution and communication within the domain.

A single domain structure can be challenging when you have multiple geographically dispersed locations or need to isolate certain departments or resources. This is because a single domain structure can become complex and difficult to manage as the organization grows.

To remove the DNS Server role from a server, the administrator should use the PowerShell cmdlet: Remove-WindowsFeature DNS. This command directly targets the DNS Server role, allowing for efficient removal.

A new operating system installation on a disk without upgrading from a previous version is known as a Clean Installation. This means you're starting from scratch on a fresh partition.

If critical Active Directory components are deleted, you can use Directory Services Restore Mode (DSRM). This special boot mode provides access to restore tools necessary to recover your domain.

The Administrative Templates folder within the Computer Configuration Node of a GPO contains the Control Panel, Network, Printers, System, and Windows Component folders. These folders are where you'll find pre-configured policy settings that can be applied to users and computers.

Only domain controllers in a domain can hold universal group membership information. This is because universal groups provide access to resources across the entire Active Directory forest, and these domain controllers have the authoritative data on these groups.