Client Systems Block 4, Unit 2 - Ntwk Acct Mgmt

Front 1

Alookup table that allows users to associate a name with specific data pointsabout that name.

Example: Domain Name Service (DNS)

Back 1

Directory

Front 2

TheInternational Telecommunication Union’s directory format.

Back 2

ITU X.500

Front 3

Usesa Directory Information Tree (DIT) to represent a hierarchical structure ofDistinguished Names (DNs) of entities.

Back 3

ITU X.500

Front 4

Nearly everything on the Internet uses some form of ____ guidance for naming and organization. Therefore a full X.500 DIT is _____.

Back 4

X.500; unwieldy

Front 5

The most common directory structure. Designedto provide a “lightweight” alternative to X.500.

Most common directory structure.

Uses a localized DIT to arrange DNs in a logical hierarchy

Back 5

Lightweight Directory Access Protocol (LDAP)

Front 6

Microsoft's directory service implementation with LDAP.

Allows administrators to create Domains of objects controlled by the Domain Controller server.

Back 6

Active Directory

Front 7

What product provides:

- Central authentication service (Kerberos)

- Access control/auditing mechanisms

- Ntwk info/naming standards through DNS

- Infrastructure access/config. through LDAP

Back 7

Active Directory

Front 8

CSTs primarily use what two tools to manage Active Directory?

Back 8

1) Directory and Resource Administrator (DRA)

2) Active Directory Usersand Computers (ADUC)

Front 9

What is the Air Force’s primary web-based tool for CST administration ofan Active Directory domain?

Back 9

Directory and Resource Administrator (DRA)

Front 10

In regards to Active Directory, the _______ is a server object that must be activated on a Windows installation. While it is considered to be a powerful tool, its reduced availability has pushed the Air Force towards the easier-to-access, web-based DRA.

Back 10

Active Directory Users and Computers (ADUC)

Front 11

What Active Directory component has the following characteristics?

- Web-based management interface; only one object ismanipulated at a time

- Designed tominimize potential accidents by making mass actions more difficult to carry out

Back 11

Directory and Resource Administrator (DRA)

Front 12

In DRA, all user accounts can be grouped into one of two categories: ______ and ______.

Back 12

Local and domain

Front 13

True/False

Only Domain Accounts can be managed within DRA.

Back 13

True

Front 14

An object shell that represents a set of attributes for a user or computer object that will interact with and authenticate to a domain.

Back 14

Domain account

Front 15

Accounts unassociated with a domain, called ____ ____, are most commonly used for troubleshooting purposes are created exclusively for use within the metal confines of the machine to which they are localized.

Back 15

Local accounts

Front 16

______ accounts are created on a Domain Controller and have access to the full enterprise domain.

______ accounts can only affect hardware.

Back 16

Domain; Local

Front 17

True/False

Every Microsoft Windows-based client will have built-in local accounts.

Back 17

True

Front 18

A local computer account will have a default local group account called _______.

Back 18

WORKGROUP

Front 19

True/False

Computers do not necessarily require an account to function.

Back 19

FALSE

ALL computers require an account to function.

Front 20

What two accounts are necessary for access to domain resources?

Back 20

1) Valid domain computer

2) Valid domain user

Front 21

Domain accounts are created and stored on a central server called the _____ ______.

Back 21

Domain Controller

Front 22

Local computer accounts are not recognized on the _____ until a corresponding computer ______ has been created and associated with the host machine.

Back 22

Domain; object

Front 23

CSTs must add computer accounts to the domain by using the computer's _____.

Back 23

name

Front 24

User accounts set up on a Domain Controller for the purpose of providing network access are also called ______ _______.

Back 24

network accounts

Front 25

Each user account must be given a name and is identified internally by a unique ______ ______.

Back 25

Security Identifier (SID)

Front 26

Used for tracking rights and permission assignments throughout the domain.

Stored in the object's Access Control List (ACL) along with the specific permission information.

Back 26

Security Identifier (SID)

Front 27

______ control access to an object, such as a folder or file. Determines whether you can access/modify an object.

Back 27

Permissions

Front 28

_____ enable a user account or group to perform predefined tasks.

Examples: ability to access server, authority to create accounts and manage server functions.

Back 28

Rights

Front 29

All _____ accounts are stored in a _____ database on the Domain Controller server for that domain.

Back 29

Domain; central

Front 30

True/False

As a CST, you may interact with multiple Domain Controllers while working within a single domain.

Back 30

True

Front 31

______ ______ typically provide a common username shared among multiple users who perform a common function.

Back 31

Group accounts

Front 32

Name the two built-in local user accounts created when first installing an Operating System.

Back 32

1) Local administrator

2) Guest

Front 33

Due to inherent vulnerabilities, the ______ account must be disabled on Air Force computers as a security best practice.

Back 33

Guest

Front 34

A ____ is a collection of objects: a collection of user and computer accounts, contacts, etc. that can be managed as a single unit.

Back 34

Group

Front 35

Users and computers that belong to a particular group are referred to as ____ _____.

Back 35

group members

Front 36

True/False

Any rights or permissions assigned to a group are inherited by its ____ _____.

Back 36

group members

Front 37

Groups in Active Directory are directory _____ that reside within a domain or an organizational unit container object, and are called _____ _____.

Back 37

objects; domain groups

Front 38

True/False

User accounts, Admin accounts, Computer accounts, and Security Groupsall have the same SID.

Back 38

FALSE

User accounts, Admin accounts, Computer accounts, and Security Groupsall have unique SIDs

Front 39

Similar to local users, ____ ____ can be created on computers configured as domain member servers, workgroup member servers, domain workstations, and stand-alone computers (unaffiliated with a domain)

Back 39

local groups

Front 40

_____ groups reside on the local computer and provide access to only its resources.

_____ groups reside on a Domain Controller and provide access to network resources throughout the domain.

Back 40

Local; Domain

Front 41

When creating a group, a CST must consider that groups are characterized by their ____ and ____.

Back 41

Scope and type

Front 42

The _____ of a group determines the extent to which the group is applied within a domain.

The group ____ determines whether a group can be used to assign permissions to a shared resource (security groups) or if I group can be used for e-mail distribution lists only (distribution groups)

Back 42

Scope; type

Front 43

What are the two types of Domain Groups?

Back 43

1) Distribution Groups

2) Security Groups

Front 44

This type of Domain Group is used to define collections of users for non-security purposes.

Applications designed to be used in an Active Directory environment can use this group for their own purpose. For example: distribution group for e-mail to send email to all group members

Back 44

Distribution Group

Front 45

This type of Domain Group is used by Windows Server to manage user rights assignments and access permissions.

Rights and permissions assigned to this type of group are inherited by the group's members.

Back 45

Security Groups

Front 46

_____ _____ is when you add a group as a member of another group in order to reduce security management overhead.

Back 46

Group nesting

Front 47

A user account without a user.

This type of account exists on the domain to be shared as an email resource for multiple users from a specific organization. All members of a workcenter can send/receive email as that account w/o using their specific identities.

Back 47

Organizational account

Front 48

To support email security, organizational accounts must be ___-enabled. An organizational account requires its own _____ certificate and corresponding _____ key.

Back 48

PKI

digital

private

Front 49

Group accounts on a domain must be _____ ______ in scope and ability.

Back 49

severely limited

Front 50

A user account with no additional rights assigned.

It is a security feature that prevents exploitation of accounts before proper rights have been assigned.

Back 50

Limited access account

Front 51

Modifications can be made to a user's account by updating the _____ _______.

Back 51

Users properties

Front 52

Containers used to logically organize accounts into specialized groups for various purposes.

Back 52

Organizational Units (OUs)

Front 53

The creation, management, and maintenance of an end-user's objects and characteristics in relation to accessing resources available in one or more systems.

Basically, the management of user rights and privileges.

Back 53

Account provisioning

Front 54

As a CST, your role when it comes to Guest account is to make sure they are ______.

Back 54

Disabled

Front 55

What is a Distribution Group's sole purpose?

Back 55

Grouping users for sending messages that do not have a Security Identifier (SID)