Mcts 70-640 Chapter 2

Front 1

What is the Microsoft Management Console (MMC)?

Back 1

A tool that allows you to have customizable windows for easy management.

Front 2

What are the four AD admin tools?

Back 2

1.) Active Directory Users and Computers
2.) Active Directory Sites and Services
3.) Active Directory Domain and Trusts
4.) Active Directory Schema

Front 3

What is the function of Active Directory Users and computers?

Back 3

Manages users, groups, computers, printers and shared folders.

Front 4

What is the function of Active Directory Sites and Services?

Back 4

Manage replication, network topology, and related services.

Front 5

What is the function of Active Directory Domain and Trusts?

Back 5

Configure and maintain trust relationships and the domain and forest functional levels.

Front 6

What is the function of Active Directory Schema?

Back 6

View and change definition of AD attributes and object classes. Essentially the blueprint for AD.

Front 7

What are the four console modes that you can save the MMC to?

Back 7

1.) Author
2.) User Mode - Full Access
3.) User Mode - Limited Access, multiple window
4.) User Mode - Limited Access, single window

Front 8

When should you save the MMC in Author mode?

Back 8

When you want to continue customizing the console.

Front 9

When should you save the MMC in User Mode - Full Access?

Back 9

When you want users to be able to navigate between and use all snap-ins, but not be able to add, remove or change the properties of snap-ins or the console.

Front 10

When should you save the MMC in User Mode - Limited Access, multiple window?

Back 10

When you want users to only navigate the snap-ins that you made visible in the console tree, and preconfigure multiple windows that focus on specific snap-ins. Users will not be able to open new windows.

Front 11

When should you save the MMC in User Mode - Limited Access, single window?

Back 11

When you want users to only navigate the snap-ins that you have made visible in the console true within a single window.

Front 12

In an attempt to delete an OU, you receive an insufficient privileges error even though you are logged in as an admin on the domain. What is happening and what do you need to do to delete the OU?

Back 12

The OU has the checkbox checked that protects it from accidental deletion. To fix it, you must first click View in AD UC, then select Advanced Features. Afterwards right click the OU and select properties. In the properties window under the object tab, you need to uncheck the option that prevents accidental deletion.

Front 13

What are the two types of group objects you can create?

Back 13

1.) Security group
2.) Distribution group

Front 14

What is the purpose of the security group?

Back 14

The security group can be given permission to resources, and also acts as a distribution group for email.

Front 15

What is the purpose of the distribution group?

Back 15

Can only be used as a distribution group for email.

Front 16

What are the three options for the scope of a group object?

Back 16

1.) Global Group
2.) Domain Local Group
3.) Universal Group

Front 17

What is the purpose of the Global Group?

Back 17

Used to identify users based on their job function, location, etc.

Front 18

What is the purpose of the Domain Local Group?

Back 18

Collection of users who share the same resource access needs, such as a group of people working on the same project.

Front 19

What is the purpose of the Universal Group?

Back 19

Collects users and groups from multiple domains.

Front 20

You want to utilize the Dsquery command to find a user in Active Directory. The only info you have is the user's name: James Fine. What would the command line look like if you were trying to find James?

Back 20

dsquery user -name jam*

Front 21

What would the command line look like if it you didn't want the result as a DN?

Back 21

dsquery -o user -name jam*

Front 22

What is a Distinguished Name (DN)?

Back 22

In a sense, a DN is the name of an object that looks like a path that starts at the object and works its way up to the top-level domain.

Front 23

What is a Common Name (CN)?

Back 23

The "full name" you specify when creating a user account.

Front 24

If the user object "James Fine" is located in the contoso.com domain, underneath the People OU, what would his DN look like?

Back 24

"CN=James Fine,OU=People,DC=contoso,DC=com"

Front 25

What is the Relative Distinguished Name (RDN)?

Back 25

Everything in a DN that is before the first OU. If there isn't anything before the first OU, then it is the OU itself.

Front 26

What are Access Control Entries (ACEs)?

Back 26

Permissions on an object assigned to users, groups or computers.

Front 27

When trying to view the permissions assigned to an OU, you open the properties and find the Security tab is not visible. What should you do?

Back 27

Go to view and select Advanced Features. Afterwards you can go to the OU's properties again and see the Security tab.

Front 28

What are Control Access Rights?

Back 28

Actions such as changing and resetting passwords.

Front 29

Explain the contents of an ACL.

Back 29

An ACL contains a Discretionary Access Control List (DACL) and a System Access Control List (SACL). The SACL includes auditing settings. The DACL contains ACEs.

Front 30

True or False: All child objects, by default, do not inherit inheritable permissions from the parent container or OU.

Back 30

False

Front 31

What are two ways to make a child object an exception to inheritable permissions set forth by a parent object?

Back 31

1.) Deselect the "Include Inheritable Permissions From This Object's Parent" option from the Advanced Security Settings dialog box (which is not considered good practice).
2.) Set explicit permissions on that child object.

Front 32

What is the command Dsacls.exe used for?

Back 32

Viewing and changing permissions on an object specified by the object's DN.

Front 33

True or False: If a user is in a group that has an ACE set to allow users to reset passwords, while also being in a group that has an ACE set to deny users from resetting passwords, the user will not be able to reset passwords.

Back 33

True