Question 1

The Computer Configuration node in the Group Policy Management MMC is used to set policies that apply to all users within the GPOs scope.

Accepted Answer

The Computer Configuration node in the Group Policy Management MMC is used to set policies that apply to computers, not users, within the GPO's scope.

Question 2

When is the installation of the Global Catalog server option mandatory?
A)When a domain controller is being added to a domain with other domain controllers that do not have Global Catalog installed
B)It is required when adding the first domain controller in a forest
C)When Active Directory detects you have installed the DNS Server role
D)Only when the server is going to support older versions of Windows OSs,such as Windows 95

Accepted Answer

The installation of Global Catalog server is mandatory when adding the first domain controller in a forest. It is because the first domain controller must hold a Global Catalog and act as a catalog server for the entire forest.

Question 3

The dsadd command can only create new user objects in Active Directory.

Accepted Answer

The dsadd command can also create other types of objects in Active Directory, such as computers, groups, and organizational units, not just user objects.

Question 4

When configuring GPOs,which node contains the majority of account policies?
A)Computer Configuration node,Windows Settings folder,Security Settings node
B)Computer Configuration node,Administrative Templates folder,Windows Components node
C)The User Configuration node,Administrative Templates folder
D)The User Configuration node,Windows Settings folder,Security Settings node

Accepted Answer

The Computer Configuration node under the Windows Settings folder contains the majority of account policies in the Security Settings node, including password policy, account lockout policy, and Kerberos policy. The Administrative Templates folder in the Computer Configuration node under the Windows Components node contains additional security settings for the operating system and other components. The User Configuration node does not contain account policies.

Question 5

Which of the terms below fits the following description?
The core structural unit of Active Directory;contains OUs and represents administrative,security,and policy boundaries
A)domain
B)object
C)forest
D)schema

Accepted Answer

A domain is the core structural unit of Active Directory that contains OUs and represents administrative, security, and policy boundaries. An object refers to any entity such as users, computers, and printers stored in Active Directory. A forest is a collection of one or more domains that share a common schema, configuration, and global catalog. The schema defines the objects and attributes that can be stored in Active Directory.

Question 6

GPOs are updated on workstations every 5 minutes,even if the computers don't restart.

Accepted Answer

Group Policy Objects (GPOs) are updated in the background every 90 minutes, with a random offset of 0 to 30 minutes, not every 5 minutes.

Question 7

If installing the first domain controller in a network,you are required to install the DNS Server role if DNS isn't already installed on the network.

Accepted Answer

When installing the first domain controller in a network, if DNS is not already installed on the network, you must install the DNS Server role because DNS is a required component for Active Directory to function properly.

Question 8

Which of the following defines the types of information stored in an Active Directory object?
A)Attribute values
B)Schema classes
C)Schema attributes
D)GPOs

Accepted Answer

Schema attributes define the types of information that can be stored in an Active Directory object.

Question 9

After receiving several support calls,you have decided to prevent users of the DomA-Group from being able to access the Control Panel regardless of what machine they log into.Where would you configure this setting?
A)The User Configuration node,Windows Settings folder
B)The Computer Configuration node,Administrative templates folder
C)The Computer Configuration node,Windows Settings folder
D)The User Configuration node,Administrative Templates folder

Accepted Answer

To prevent users of a specific group from accessing the Control Panel regardless of the machine they log into, you would configure this setting in the Group Policy Management Editor under the User Configuration node, Administrative Templates folder. This is because the restriction is user-based rather than machine-based, and the Administrative Templates folder contains the settings for the Control Panel.

Question 10

Under what circumstances are the built-in user accounts no longer local user accounts?
A)When accessing a network resource in a workgroup environment
B)After installing Active Directory
C)This is impossible;built-in user accounts cannot be converted
D)When using dsadd on the built-in accounts

Accepted Answer

When Active Directory is installed on a server, the built-in user accounts become domain user accounts and are managed by Active Directory instead of by local computer accounts.

Question 11

You are in charge of a domain that contains several office rooms and one large computer commons area.In order to secure accounts in the domain,you want to apply separate account policies for the computers in the commons area,while maintaining the policies that are used in the office rooms.Currently,all computers are in the Computers folder.What is the most efficient way to accomplish this task?
A)Create a new OU called "CommonsArea" and move the commons area computer accounts into it.Create a new GPO and configure the desired account policies.Link the new GPO to the CommonsArea OU.
B)Create a new domain on a new domain controller to service the commons area.
C)The policy settings must be assigned manually on the local computer GPOs in the commons area.
D)Create a new GPO and specify the computer accounts of the computers in the commons area then apply the desired account policies.Finally,link the new GPO to the domain.

Accepted Answer

Creating a new OU called "CommonsArea" and moving the commons area computer accounts into it, then creating a new GPO and linking it to the CommonsArea OU is the most efficient way to apply separate account policies to the computers in the commons area while maintaining the policies used in the office rooms. This allows for targeted policy application and ease of management. Option B is not necessary and would create unnecessary complexity. Option C is not efficient as it requires manual configuration on each computer. Option D is similar to A, but specifying individual computer accounts is less efficient than organizing them into an OU.

Question 12

Domain controller computer accounts are placed in what container by default?
A)Computers folder
B)Special Computers OU
C)Built-in folder
D)Domain Controllers OU

Accepted Answer

By default, domain controller computer accounts are placed in the Domain Controllers OU. This is a built-in organizational unit (OU) created when the first domain controller is installed in a new Active Directory domain.

Question 13

In what order are GPOs applied?
A)Local computer,site,domain,OU
B)OU,domain,site,local computer
C)Site,OU,domain,local computer
D)Local computer,domain,OU,site

Accepted Answer

Group Policy Objects (GPOs) are applied in the following order: Local computer, Site, Domain, and then Organizational Unit (OU). This order ensures that policies applied closer to the user or computer take precedence.

Question 14

How many domains can a single domain controller service?
A)Only one
B)As many as needed
C)Two
D)Only as many as you have purchased licenses to do so

Accepted Answer

A domain controller can service only one domain. While a single physical server can be configured to host multiple domain controller roles for different domains, each domain controller instance is dedicated to just one domain.

Question 15

A ____ specifies the actions a user can perform on a Windows network.
A)Permission
B)Right
C)Object
D)Schema

Accepted Answer

Rights specify the actions a user can perform on a Windows network. Permissions refer to the level of access granted to a user for a particular resource, such as a file or folder. Objects refer to network resources, such as printers or computers. Schemas are templates used to define the structure of a database or directory service.

Question 16

What are the two default GPOs that are created when Active Directory is installed?
A)Default Directory Policy and Default Domain Policy
B)Default Domain Controllers Policy and Default Directory Policy
C)Default Domain-Wide Policy and Default Active Directory Policy
D)Default Domain Policy and Default Domain Controllers Policy

Accepted Answer

The two default GPOs that are created when Active Directory is installed are the Default Domain Policy and the Default Domain Controllers Policy. These policies can be edited and customized to fit the specific needs of an organization, but they provide a starting point for securing and managing the domain and domain controllers.

Question 17

GPOs can be linked to all of the following except ____.
A)sites
B)domains
C)OUs
D)groups

Accepted Answer

GPOs can be linked to sites, domains, and OUs, but not to groups.

Question 18

Schema is information that defines the type,organization,and structure of data stored in the Active Directory database.

Accepted Answer

The schema in Active Directory defines the data types, structures, and organization of data stored in the directory database.

Question 19

Jenna works for your company's Human Resources department.For several years she has volunteered to instruct new and present employees on the use of office applications in a special training lab environment.Due to the sensitive nature of this environment,security policies are more strict for the lab than the rest of the network.A more refined policy was just set in place by your administrator last Friday.
On Monday,Jenna calls you and explains that she can no longer log into the lab machines locally.After further troubleshooting,you discover that any user that is a member of the "Lab Instructors" group can no longer log into any of the lab machines.What is most likely the problem?
A)The lab machines have lost their network connections and are no longer authenticating privileged users
B)The "Lab Instructors" group has been removed from the "Allow log on locally" policy
C)The domain controller for this environment is down
D)The group (and it's associated user accounts)do not exist on this machine,therefore Jenna cannot log in.

Accepted Answer

The fact that any user that is a member of the "Lab Instructors" group cannot log into the lab machines suggests that there may be an issue with the "Allow log on locally" policy. It is possible that the new security policy implemented by the administrator last Friday removed the "Lab Instructors" group from the policy, thus preventing members from logging into the lab machines locally.

Question 20

What boot mode is used to perform restore operations on Active Directory if it becomes corrupted or parts of it are deleted accidentally?
A)System Restore mode
B)Safe mode
C)Directory Services Restore Mode
D)Safe mode with Command Prompt

Accepted Answer

Directory Services Restore Mode allows administrators to perform restore operations on Active Directory if it becomes corrupted or parts of it are accidentally deleted. This mode boots the domain controller into a mode with very limited services and runs only the essential operating system components needed to restore Active Directory.

Quiz 3: Introducing Active Directory

The Computer Configuration node in the Group Policy Management MMC is used to set policies that apply to all users within the GPOs scope.

When is the installation of the Global Catalog server option mandatory?

The dsadd command can only create new user objects in Active Directory.

When configuring GPOs,which node contains the majority of account policies?

Which of the terms below fits the following description? The core structural unit of Active Directory;contains OUs and represents administrative,security,and policy boundaries

GPOs are updated on workstations every 5 minutes,even if the computers don't restart.

If installing the first domain controller in a network,you are required to install the DNS Server role if DNS isn't already installed on the network.

Which of the following defines the types of information stored in an Active Directory object?

After receiving several support calls,you have decided to prevent users of the DomA-Group from being able to access the Control Panel regardless of what machine they log into.Where would you configure this setting?

Under what circumstances are the built-in user accounts no longer local user accounts?

Domain controller computer accounts are placed in what container by default?

In what order are GPOs applied?

How many domains can a single domain controller service?

A ____ specifies the actions a user can perform on a Windows network.

What are the two default GPOs that are created when Active Directory is installed?

GPOs can be linked to all of the following except ____.

Schema is information that defines the type,organization,and structure of data stored in the Active Directory database.

What boot mode is used to perform restore operations on Active Directory if it becomes corrupted or parts of it are deleted accidentally?