70-284-C1L1 - Active Directory Overview

Front 1

The primary security boundary for Active Directory is the _, which contains
_ _.

Back 1

forest
domain trees

Front 2

There can be _ _ _domain trees in a forest, though the first
domain is designated as the forest _ _.

Back 2

one or more
root domain

Front 3

Each forest has an _ _ group as well as a _ _group.

Back 3

Enterprise Admins
Schema Admins

Front 4

Members of Enterprise Admins and Schema Admins have
authority over _ _ _ _ in the forest.

Back 4

all the domain trees

Front 5

Each domain has a _ _ group, and administrators in a _ _ automatically have administrative permissions
to all child domains through automatic transitive trust relationships.

Back 5

Domain Admins
parent domain

Front 6

Active Directory is a _ _ database that replaced the _ structure
of Windows NT domains.

Back 6

hierarchical structured
flat

Front 7

_ _ _ are used to allow Active Directory queries to _ domains.

Back 7

Global catalog servers
cross

Front 8

There are _ operations masters roles. The Schema Master and Domain Naming
Master roles are _-_, while the PDC Emulator, Infrastructure Master, and
RID Master roles are _ _.

Back 8

five
forest-wide
domain-wide

Front 9

Sites are used to control the _ _ by defining whether resources in
Active Directory are connected by _ _ or _ _ links.

Back 9

replication topology
high-speed
low-speed

Front 10

The _ defines the _ of objects that are allowed in Active Directory, as
well as the _ the objects can have.

Back 10

schema
types
attributes

Front 11

Each domain has a Domain Admins
group, and administrators in a parent domain automatically have administrative permissions
to all child domains through automatic _ _ _.

Back 11

transitive trust relationships

Front 12

Active directory structure is known as a _ structure, since there can be multiple
levels. This differs from the _ structure of Windows NT domains

Back 12

hierarchical
flat

Front 13

With the amount of replication that takes place between domain controllers and the amount of querying of data that is done in Active Directory, it is important for computers
and services to have a way of identifying Active Directory resources that are located
on the same _ versus resources that are on a different LAN separated
by a wide area network _.
This is enabled by the use of _.

Back 13

LAN
WAN
Sites

Front 14

Sites contain Active Directory resources that are all connected
by _ _ _ _.

Back 14

reliable high-speed bandwidth

Front 15

Site
membership is used in the logon process as a computer attempts to locate a domain_ _ in its own site first;

Back 15

controller

Front 16

The schema is a definition
of the _ _ _that are allowed within a directory and the _ that
are associated with those objects.

Back 16

types of objects
attributes

Front 17

There are two types of definitions within the schema:_ and _, also
known as schema objects and metadata.

Back 17

attributes and classes

Front 18

Attributes are defined _ _, and then can
be applied to multiple classes as needed.

Back 18

only once

Front 19

The object classes, or _, are used to
define _

Back 19

metadata,
objects

Front 20

A class is simply a generic _ for objects. It is a collection of _, such asattributes
Logon Name and Home Directory for user accounts or Description and Network
Address for computer accounts.

Back 20

framework

Front 21

Active Directory uses a special container known as an _ _ to organize
objects within a domain for the purpose of administration.

Back 21

organizational unit

Front 22

An OU is the _ _to which you can assign administrative rights.

Back 22

smallest element

Front 23

This
means that OUs can be used to _ _ and control within a domain; in
essence, OUs function as _ without the creation of additional domains.

Back 23

delegate authority
subdomains

Front 24

The _ _ stores partial replicas of the directories
of other domains.

Back 24

global catalog

Front 25

The catalog is stored on _ _ that have been designated
as global catalog servers.

Back 25

domain controllers

Front 26

a global catalog is required for _ _

Back 26

logging on to
the network.

Front 27

The global catalog provides _ group membership information
for the user account that is attempting to log on to the network. If the global catalog
is _ _ during the logon attempt and the user account is_ to the local
domain, the user will only be allowed to log on to the _ _.

Back 27

universal
not available
external
local machine

Front 28

The _ _is required only when a user
account or object needs to be authenticated by another _.

Back 28

global catalog
domain

Front 29

The global catalog maintains a subset of the _ _ available within
every domain in the forest. This allows queries to be handled by the nearest _ _,
saving time and _.

Back 29

directory information
global catalog
bandwidth

Front 30

The global catalog is a _ _- database, unlike the normal Active Directory database.

Back 30

read-only

Front 31

Active Directory automatically creates a global catalog on the first _ _
within a forest.

Back 31

domain controller

Front 32

As the number of global catalog servers _, the response time to user inquiries_. However, the replication requirements within the environment _ as
the number of global catalog servers _.

Back 32

increases
decreases
increase
increases

Front 33

Much of the replication within an Active Directory environment is _ _,
which means that the domain controllers are all peers.

Back 33

multimaster replication

Front 34

There are five
different operations master roles in Active Directory: _, _ , _, _, AND _.

Back 34

Schema Master, Domain Naming
Master, Relative ID Master, PDC Emulator, and Infrastructure Master

Front 35

The Schema Master
and Domain Naming Master roles function at the _ level and exist _ _in
a forest.

Back 35

forest
only once

Front 36

The Relative ID Master, PDC Emulator, and Infrastructure Master roles function
at the _ level and exist in each _ _ _ _.

Back 36

domain
domain in the forest

Front 37

The _ _ role controls all the updates and modifications to the schema
itself. The schema controls the _ of each _ in the directory and the
object’s associated _.

Back 37

Schema Master
definition
object
attributes

Front 38

The _ _ _ role controls the addition or removal of domains from
the forest.

Back 38

Domain Naming Master

Front 39

The _ _ _role controls the sequence number for the domain
controllers within the domain.

Back 39

Relative ID (RID) Master

Front 40

The SID must be unique within
the domain and is generated by combining a_ _and a _.

Back 40

domain SID
RID

Front 41

When the domain controller uses all the RIDs that the RID
Master has assigned, the domain controller receives _ _ _ _
from the RID Master

Back 41

another sequence of RIDs

Front 42

If the RID Master is unavailable and a domain controller
exhausts its pool, it will be _ _ _ _ _.

Back 42

unable to create additional objects.

Front 43

The _ _ _is used whenever a domain contains non–Active Directory
computers.

Back 43

PDC Emulator role

Front 44

The PDC Emulator Role acts as a _ _ _for legacy client operating systems, as
well as for Windows NT BDCs

Back 44

Windows NT PDC

Front 45

The _ _ role is responsible for maintaining all inter-domain object references.

Back 45

Infrastructure Master

Front 46

the Infrastructure Master informs certain objects
(such as _) that other objects (such as _ in another domain) have been
_, _, , or otherwise modified.

Back 46

groups
users
moved, changed

Front 47

The _ _role is necessary only when there are multiple domains in the forest. If there is only a single domain, then all domain controllers
already know of the update, and this role is _

Back 47

Infrastructure Master
unnecessary.

Front 48

By default, Active Directory assigns all five of these operations master roles to the _ _ _installed in a forest.

Back 48

first domain controller