Exam 1: Designing Active Directory Domain Services

When selective authentication is implemented on a forest trust, you need to grant the ____ permission on each server or computer where access is granted.

Free

(Multiple Choice)

4.9/5

(71)

Question 1

Correct Answer:

Verified

Forest trusts are possible once the forest functional level has been raised to ____.

Free

(Multiple Choice)

5.0/5

(76)

Question 2

Correct Answer:

Verified

How is the migration of objects handled between domains?

Free

(Essay)

4.9/5

(90)

Question 3

Correct Answer:

Verified

Migration of objects is handled a little differently depending on whether the objects are being migrated between domains in separate forests or migrated between domains in the same forest. These two types of migrations are referred to as interforest and intraforest migrations.
Interforest migration. Objects are migrated between domains in separate forests.
Intraforest migration. Objects are migrated between domains in the same forest.

You can easily determine what servers hold all the roles by opening a command prompt and entering the following command: ____

(Multiple Choice)

4.7/5

(84)

Question 4

For most applications, a single-domain, single-forest design will work.

(True/False)

4.9/5

(72)

Question 5

A(n) _________________________ is used within a domain to organize objects.

(Short Answer)

4.8/5

(85)

Question 6

A ____ trust creates an explicit trust relationship between two domains and is not transferred to any other domains.

(Multiple Choice)

5.0/5

(89)

Question 7

The ____ for Active Directory defines the objects that can be created in Active Directory.

(Multiple Choice)

4.8/5

(93)

Question 8

When you see the forest functional level is Windows Server 2008, you also know that every domain and domain controller in the forest must be running at least ____.

(Multiple Choice)

4.9/5

(71)

Question 9

If you want users or groups to be able to access a resource using SID history, you must enable SID filtering.

(True/False)

4.8/5

(80)

Question 10

Explain the difference between autonomy and isolation.

(Essay)

4.7/5

(67)

Question 11

Fine-grained password and account ____ policies are a significant addition to Windows Server 2008.

(Multiple Choice)

4.9/5

(90)

Question 12

Match each statement with the correct term below.

Provides independent and exclusive control of a resource

Active Directory domain

Is an administrative boundary and holds a database of objects

ADMT

Is used to uniquely identify an object in a domain

global catalog

Correct Answer:

Verified

Provides independent and exclusive control of a resource

Is an administrative boundary and holds a database of objects

Is used to uniquely identify an object in a domain

Can be used to migrate objects from one domain to another within the same forest or between different forests

Is a listing of all the objects in the entire forest

Provides independence, allowing a department or group to make decisions based on their own needs within the organization

Allows a user to log on with an account that looks like an e-mail address

Includes one or more domains with a common namespace

Is the tool used to automate the management and administration of users and computers in the domain

(Matching)

4.7/5

(81)

Question 13

Beyond autonomy, what are two other reasons to create separate domains?

(Essay)

4.8/5

(71)

Question 14

ADMT v3.1 should be installed and run on a Windows Server 2008 domain controller in the ____________________ domain.

(Short Answer)

4.9/5

(68)

Question 15

____ prevents the risk of an attacker obtaining SID history data by blocking the use of any SIDs that did not originate in the same domain.

(Multiple Choice)

5.0/5

(61)

Question 16

Discuss what happens when SID filtering is disabled.

(Essay)

4.8/5

(69)

Question 17

The ____ authentication option allows Windows to automatically authenticate any users in another forest to access resources in the local forest.

(Multiple Choice)

4.9/5

(73)

Question 18

____ is an Active Directory preparation tool that can modify the schema by adding objects and properties needed to support Windows Server 2008 domain controllers.

(Multiple Choice)

4.9/5

(79)

Question 19

A domain functional level or forest functional level can be raised and then undone (or lowered) as necessary.

(True/False)

4.9/5

(80)

Question 20

Showing 1 - 20 of 42

When selective authentication is implemented on a forest trust, you need to grant the ____ permission on each server or computer where access is granted.

Forest trusts are possible once the forest functional level has been raised to ____.

How is the migration of objects handled between domains?

You can easily determine what servers hold all the roles by opening a command prompt and entering the following command: ____

For most applications, a single-domain, single-forest design will work.

A(n) _________________________ is used within a domain to organize objects.

A ____ trust creates an explicit trust relationship between two domains and is not transferred to any other domains.

The ____ for Active Directory defines the objects that can be created in Active Directory.

When you see the forest functional level is Windows Server 2008, you also know that every domain and domain controller in the forest must be running at least ____.

If you want users or groups to be able to access a resource using SID history, you must enable SID filtering.

Explain the difference between autonomy and isolation.

Fine-grained password and account ____ policies are a significant addition to Windows Server 2008.

Beyond autonomy, what are two other reasons to create separate domains?

ADMT v3.1 should be installed and run on a Windows Server 2008 domain controller in the ____________________ domain.

____ prevents the risk of an attacker obtaining SID history data by blocking the use of any SIDs that did not originate in the same domain.

Discuss what happens when SID filtering is disabled.

The ____ authentication option allows Windows to automatically authenticate any users in another forest to access resources in the local forest.

____ is an Active Directory preparation tool that can modify the schema by adding objects and properties needed to support Windows Server 2008 domain controllers.

A domain functional level or forest functional level can be raised and then undone (or lowered) as necessary.

Designing Physical Topology

Designing and Implementing DNS

Designing and Implementing Group Policy

Designing Remote Access and Terminal Services Strategies

Designing and Implementing a PKI

Securing Windows Server 2008 Servers

Designing High Availability and Business Continuity

Designing Supporting Services

Designing Virtualization Strategies

Filters