70-413: Chapter 26: Designing Active Directory Sites

Front 1

This Repadmin command Initiates recalculation of the incoming replication topology by the KCC on the specified domain controllers

Back 1

/kcc

Front 2

This Repadmin command specifies the Password Replication Policy (PRP) for read-only domain controllers (RODCs)

Back 2

/prp

Front 3

This Repadmin command shows inbound replication requests that must be processed by the domain controller tobecome current with its replication partners

Back 3

/queue

Front 4

This Repadmin command initiates replication of a directory partition between the two specified domain controllers

Back 4

/replicate

Front 5

This repadmin command Performs replication of a single object between two domain controllers with a common directory partition

Back 5

/replsingleobj

Front 6

This repadmin command provides a summary report of domain controllers that fail incoming or outbound replication

Back 6

/replsummary

Front 7

This repadmin command begins replication of passwords belonging to specified users from a source domain controller to an RODC

Back 7

/rodepwdrepl

Front 8

This repadmin command shows an object's attributes

Back 8

/showattr

Front 9

This repadmin command displays replication information about an object such as the attribute ID, version number, update sequence numbers (USNs), globally unique identifier (GUID) of the originating server, and date and time stamps

Back 9

/showobjmeta

Front 10

This repadmin command shows the replication status of the specified domain controller, including when it last attempted inbound replication

Back 10

/showrepl

Front 11

This repadmin command Provides the highest USN (Update Sequence Number) that Active Directory has committed on the specified domain controller

Back 11

/showutdvec

Front 12

This repadmin command synchronizes the domain controller with each of its replication partners

Back 12

/syncall

Front 13

This command-line tool tool enables you to perform a number of tests related to DNS name resolution and replication.

Back 13

DcDiag

• dcdiag /test:VerifyReplicas

Front 14

Thought Experiment: Your consulting firm has been asked to review the physical Active Directory topology of a client and make adjustments to its replication strategy to meet some new requirements. The client company has offices throughout the country, with multiple offices in most states.

Your client wants to limit replication traffic to an hour before and an hour after business hours. Due to time zone differences, the client has not been able to implement this requirement without a high amount of management workload. How could the client implement these changes with minimal effort?

Back 14

• Configuring site links that include the sites for a specific time zone and then configuring the replication schedule for these site links enable you to configure replication based on office hours.
  

Front 15

Thought Experiment: Your consulting firm has been asked to review the physical Active Directory topology of a client and make adjustments to its replication strategy to meet some new requirements. The client company has offices throughout the country, with multiple offices in most states.

Any changes to the Active Directory domain structure or schema are managed by an administrative team at corporate headquarters. The client wants to ensure that these types of changes occur as efficiently as possible. How could you ensure that the administrative team at corporate headquarters can make changes to the Active Directory domain and schema structure with the greatest eficiency

Back 15

• Changes to the schema should be made in the same location as the domain controllerperforming the schema operations master role.
  

Front 16

Which scenario is the best it for a shortcut trust?

Back 16

Shortcut trusts are used to facilitate authentication requests from one domainto another. Rather than having to traverse the forest hierarchy, authenticationrequests can be referred directly to the appropriate domain controllers.

Front 17

After configuring site links between three sites (with only one site being contained in both site links), you notice that objects are not being replicated between the two sites that aren’t directly connected, even after multiple replication intervals. How could this happen?

Back 17

If replication to one site is dependent on another, each directory partition should be represented in the site acting as the intermediary.

Front 18

Which option best describes replication within a single site?

Back 18

Replication within a single site uses a ring topology for each directory partition whether it is a domain, application directory, schema, or configuration partition

Front 19

Users complain that they cannot use their accounts after password resets by thecorporate help desk. They state that their accounts become usable after a period ofapproximately one hour. What might cause this?

Back 19

When an object is modified on a domain controller in one site, the changes must be replicated to be reflected on other domain controllers. With intersite replication, this process can take some time. This replication latency can occasionally cause authentication or authorization issues.

Front 20

How can latency in intersite replication be reduced?

Back 20

• Reducing the number of steps in the replication process, either throughnew site links or site link bridges, should help reduce replication latency.
  
• Although more frequent replication helps reduce latency, it can increasethe workload on bridgehead servers’ network utilization over WAN links.
  

Front 21

After selecting two domain controllers as preferred bridgehead servers, you notice that some objects within the site are not being updated properly when changes are made in another site. What might be causing this behavior?

Back 21

• If the preferred bridgehead servers do not host a copy of all directorypartitions within the site, the domain controllers containing other domain partitionscannot receive updates from other sites.
  

Front 22

What conditions must be met for replication to occur across a site link bridge?

Back 22

• Sites that perform replication through a site link bridge must share adirectory partition.
  
• Replication across a site link bridge can occur only if both site links havea simultaneous replication period.
  

Front 23

After you configure site links and site link bridges, what other step must you complete to constrain replication traffic to these defined site links and site link bridges?

Back 23

Selecting the Bridge All Site Links check box results in replication beingunconstrained between all sites in the forest.

Front 24

What command is used to show inbound replication requests?

Back 24

The /queue switch for repadmin shows inbound replication requests for a domain controller.

Front 25

Which command can be used to force replication of an object between two domaincontrollers?

Back 25

The /replsingleobj option enables you to specify an object and two domain controllers, replicating the object between the source and target domain controllers.