Windows Server Quiz #2 Study Guide

Front 1

What are the 3 types of objects that can be assigned permission to access Active Directory?

Back 1

-Users
-Groups
-Computers

Front 2

The active directory objects; Users, Groups, and Computers, are collectively referred to as what?

Back 2

Security Principles

Front 3

A list of security principals, with each having a set of permissions that define access to the object is known as what?

Back 3

DACL (Discretionary access control list)

Front 4

Each entry in the DACL is referred to as what?

Back 4

ACE (Access control entry)

Front 5

If a security principal or a group the security principal belongs to isn't in the DACL, does the security principal have access to the object?

Back 5

No

Front 6

If the owner of an object isn't in the object's DACL can the owner still assign permissions to that object?

Back 6

Yes

Front 7

What are the 5 standard permissions available for most objects?

Back 7

-Full Control
-Read
-Write
-Create all child objects
-Delete all child objects

Front 8

What are the 3 different ways users can be assigned permission to an object?

Back 8

-Explicit permission (user account is added to the DACL)
-A group the user belongs to is added to the object's DACL
-The permission is inherited from a parent object's DACL to which the user or group account has been added

Front 9

What term describes a combination of the of the assigned permissions?

Back 9

Effective permissions

Front 10

What permission overrides Allow permissions?

Back 10

Deny permissions

Front 11

What is the exception to the deny permission?

Back 11

When the deny permission is inherited from a parent object and the Allow permission is explicitly added to the DACL

Front 12

By default, all objects in active directory are child object of what?

Back 12

The domain

Front 13

What determines the replication topology, which defines the domain controller path that AD changes flow through and ensures no more than three hops exist between any two DCs?

Back 13

KCC (knowledge consistency checker)

Front 14

What is the process used by AD for replicating objects in which changes to the database can occur on any domain controller and are propagated, or replicated, to all other domain controllers?

Back 14

Multimaster replication

Front 15

The path of the KCC that controls the flow of replication is configured as what?

Back 15

A ring

Front 16

How long does intrasite replication occur after a change is made on a domain controller?

Back 16

15 seconds

Front 17

What defines whether and how security principals from one domain can access network resources in another domain?

Back 17

Trust relationship

Front 18

True or False, Starting with Windows 2000 and Active Directory trust relationships are established automatically between all domains in the forest.

Back 18

True

Front 19

True or False, Although trusts between domains in the same forest are created automatically there's no automatic trust between domains in separate forests.

Back 19

True

Front 20

Trusts must be configured only when your Active Directory environment has what?

Back 20

2 or more forests

Front 21

What is the process of maintaining a consistent database of information when the database is distributed among several locations?

Back 21

Replication

Front 22

What term defines replication between domain controllers in the same site?

Back 22

Intrasite replication

Front 23

What term defines replication between two or more sites?

Back 23

Intersite replication

Front 24

What protocol is Active Directory based on and runs over TCP/IP and is designed to facilitate access to directory services and directory objects?

Back 24

LDAP (lightweight directory access protocol)

Front 25

LDAP is based on what?

Back 25

x.500 DAP (Directory access protocol)

Front 26

What are the 5 directory partition types in the active directory database?

Back 26

-Domain directory partition
-Schema directory partition
-Global catalog partition
-Application directory partition
-Configuration partition

Front 27

Which directory partition contains all object in a domain, including users, groups, computers, OUs, and so forth?

Back 27

Domain directory partition

Front 28

Which directory partition contains information needed to define AD objects and object attributes?

Back 28

Schema directory partition

Front 29

Which directory partition holds the global catalog, which is a partial replica of all objects in the forest?

Back 29

Global catalog partition

Front 30

What directory partition is used by applications and services to hold information that benefits from automatic active directory replication and security such as DNS?

Back 30

Application directory partition

Front 31

What directory partition holds configuration information that can affect the entire forest such as details on how domain controllers should replicate with one another?

Back 31

Configuration partition

Front 32

What are the 5 operations master roles (aka FSMO roles)?

Back 32

-Schema master
-Infrastructure master
-Domain naming master
-RID master
-PDC emulator master

Front 33

Which domain controller in a forest generally takes on the role of the operations master?

Back 33

First domain controller

Front 34

Which FSMO role is responsible for replicating the schema directory partition to all other domain controllers in the forest when changes occur?

Back 34

Schema master

Front 35

Which FSMO role is responsible for ensuring that changes made to object names in one domain are updated in references to these objects in other domains?

Back 35

Infrastructure master

Front 36

Which domain controller, by default, is usually the infrastructure master for that domain?

Back 36

The first DC

Front 37

Which FSMO role manages adding, removing, and renaming domains in the forest?

Back 37

Domain naming master

Front 38

How many domain naming master roles are there per forest?

Back 38

1

Front 39

If you want to add, delete, or rename a domain in a forest what must you ensure before implementing one of these actions?

Back 39

That the domain naming master is available

Front 40

What FSMO role is responsible for issuing unique pools of RIDs to each domain controller guaranteeing unique SIDs throughout the domain?

Back 40

RID master

Front 41

There is one RID master for every what?

Back 41

Domain

Front 42

In active directory, all objects in a domain are identified internally by a what, that is the same for all objects in the domain?

Back 42

Secure identifier (SID)

Front 43

What identifier is unique in active directory for each object?

Back 43

Relative identifier (RID)

Front 44

What FSMO role provides backward compatibility with Windows NT servers configured as Windows NT backup domain controllers or member servers and manages password changes to help ensure that user authentication occurs without lengthy delays?

Back 44

PDC emulator master

Front 45

What method of replication is used by active directory for replicating object data such as user and computer accounts?

Back 45

Multimaster replication

Front 46

What is a collection of a user's personal files and settings that define his or her working environment?

Back 46

A user profile

Front 47

By default, a local user profile is created from a default profile when the user does what?

Back 47

Logs in for the first time

Front 48

What type of profile follows the user no matter which computer he or she logs on to?

Back 48

Roaming profile

Front 49

What are the 2 locations where a roaming profile is created from?

Back 49

-NETLOGON share
-Default profile on the local system

Front 50

What type of profile is used when you don't want users to be able to change their profile or only have the ability to make temporary changes?

Back 50

Mandatory profile

Front 51

How would you change a profile to a mandatory profile?

Back 51

Rename Ntuser.dat file as Ntuser.man and check Read-only

Front 52

In a single domain environment what is the mnemonic for creating groups and assigning permissions according to Microsoft's best practices?

Back 52

-Accounts are made members of
-Global groups, which are made members of
-Domain local groups, which are assigned
-Permissions to resources

Front 53

In a multidomain environment, what is the mnemonic for creating groups and assigning permissions?

Back 53

-Accounts are made members of
-Global groups, which are nested in other
-Global groups, which are made members of
-Universal groups, which are then made members of
-Domain local groups, which are assigned
-Permissions to resources

Front 54

Where are local groups created?

Back 54

SAM database on a member server or workstation

Front 55

When a windows computer becomes a domain member, windows adds the membership of what 2 local groups automatically?

Back 55

-Domain Administrators Global group
-Domain Users Global group

Front 56

What is the command used for adding an object to active directory?

Back 56

DSADD

Front 57

What is the command used for removing or deleting an object from active directory?

Back 57

DSRM

Front 58

What is the command used for querying an active directory object?

Back 58

DSQUERY

Front 59

What 2 commands are used to bulk import and export active directory data?

Back 59

-CSVDE
-LDIFDE

Front 60

What command used for bulk import and export in active directory can only create objects in AD?

Back 60

CSVDE

Front 61

What command used for bulk import and export in active directory can create or modify object?

Back 61

LDIFDE

Front 62

Microsoft's terminology for a physical printer is what?

Back 62

Print device

Front 63

Microsoft's terminology for the icon in the printers folder that represents the print device is called what?

Back 63

Printer

Front 64

Microsoft's terminology for a storage location for print jobs awaiting printing is known as what?

Back 64

Print queue

Front 65

What is the name given to two or more print devices that are represented by a single printer and where the print server sends the job to the print device that is least busy?

Back 65

Printer pooling

Front 66

What groups shared folders from multiple servers into a single folder hierarchy, with replication for fault tolerance?

Back 66

Distributed File System (DFS)

Front 67

A DFS hierarchy is referred to as what?

Back 67

Namespace

Front 68

DFS provides what process that deals with heavy network traffic?

Back 68

Load balancing

Front 69

Does DFS require AD?

Back 69

No

Front 70

Fault tolerance and load balancing are available only on a what?

Back 70

Domain-based namespace

Front 71

What are the 3 shares on computers that aren't domain controllers?

Back 71

-Admin$
-Drive$
-IPC$

Front 72

What share provides network access to the windows folder on the boot volume?

Back 72

Admin$

Front 73

What default share is used for temporary connections between clients and servers to provide communication between network programs?

Back 73

IPC$

Front 74

What are the 2 additional shares that reside on domain controllers?

Back 74

-NETLOGON
-Sysvol

Front 75

What domain controller share is used for storing defualt user profiles as well as user logon scripts for pre-Windows 2000 clients?

Back 75

NETLOGON

Front 76

What domain controller share is used by active directory for replication between DCs and also contains group policy files that are downloaded and applied to windows 2000 and later clients?

Back 76

Sysvol

Front 77

Can both compression and encryption be enabled on the same file?

Back 77

No

Front 78

Compressed files moved to a new location on the same volume or a different volume will retain their compression attributes. True or False?

Back 78

False, if a file is compressed and moved to a folder that does not contain the compression attribute then that file inherits the noncompressed attribute.

Front 79

Can an entire volume be compressed?

Back 79

Yes

Front 80

True or false. An encrypted file, when moved, regardless of the parent folder or volume attribute, will remain encrypted.

Back 80

True, unless the volume doesn't support encryption such as FAT

Front 81

What feature allows access to previous versions of files and the ability to restore files that were deleted or corrupted?

Back 81

Shadow copies