CIS 277 - R3
Review Question Chapter 3
Questions and Answers
- 1.
Which of the following best describes a directory service?
- A.
Similar to a list of information in a text file
- B.
Similar to a database program but with the capability to manage objects in it
- C.
A program for managing the user interface on a server
- D.
A program for managing folders, files, and permissions on a distributed server
Correct Answer
B. Similar to a database program but with the capability to manage objects in itExplanation
A directory service is similar to a database program because it allows for the management of objects within it. It is not just a simple list of information like a text file, but rather a more complex system that can handle various types of data and their relationships. It is not specifically focused on managing the user interface on a server, although it may be a part of its functionality. Instead, its main purpose is to manage folders, files, and permissions on a distributed server, making it more comprehensive than just a program for managing the user interface.Rate this question:
-
- 2.
Which of the following is a feature of Active Directory? (Choose all that apply.)
- A.
Fine-grained access controls
- B.
Can be distributed among many servers
- C.
Can have only one server
- D.
Has a fixed schema
Correct Answer(s)
A. Fine-grained access controls
B. Can be distributed among many serversExplanation
Active Directory is a directory service developed by Microsoft that provides a variety of features for managing and organizing network resources. One of the key features of Active Directory is the ability to implement fine-grained access controls, allowing administrators to define specific permissions and restrictions for individual users or groups. Additionally, Active Directory can be distributed among multiple servers, enabling scalability and fault tolerance. Therefore, the correct answers for this question are "Fine-grained access controls" and "Can be distributed among many servers."Rate this question:
-
- 3.
What term is used for transferring Active Directory information among domain controllers?
Correct Answer(s)
Replication
replicationExplanation
Replication is the term used for transferring Active Directory information among domain controllers. Replication ensures that all domain controllers have the same up-to-date information, allowing for consistent and synchronized data across the network. By replicating changes made on one domain controller to other domain controllers, replication helps to maintain the integrity and availability of Active Directory services.Rate this question:
- 4.
Which of the following is a component of Active Directory’s physical structure?
- A.
Organizational units
- B.
Domains
- C.
Sites
- D.
Folders
Correct Answer
C. SitesExplanation
Active Directory's physical structure includes sites. Sites are a component of Active Directory that represent physical locations, such as offices or buildings, within a network. They are used to control the replication of directory information between domain controllers and manage network traffic. By grouping domain controllers and resources into sites, administrators can optimize network performance and ensure efficient communication within the network.Rate this question:
-
- 5.
Which of the following is the responsibility of domain controllers? (Choose all that apply.)
- A.
Storing a copy of the domain data
- B.
Providing data search and retrieval functions
- C.
Servicing multiple domains
- D.
Providing authentication services
Correct Answer(s)
A. Storing a copy of the domain data
B. Providing data search and retrieval functions
D. Providing authentication servicesExplanation
Domain controllers are responsible for storing a copy of the domain data, providing data search and retrieval functions, and providing authentication services. Storing a copy of the domain data ensures that the domain controller has a local copy of the directory information for the domain it is responsible for. Providing data search and retrieval functions allows users to easily search for and retrieve information stored in the domain. Providing authentication services involves verifying the identity of users and granting them access to network resources. Servicing multiple domains is not a responsibility of domain controllers.Rate this question:
-
- 6.
Groups are considered an organizing component of Active Directory. True or False?
- A.
True
- B.
False
Correct Answer
B. FalseExplanation
False. Groups are not considered an organizing component of Active Directory. Instead, Organizational Units (OU) are the organizing component of Active Directory. Groups are used to manage and assign permissions to resources within Active Directory.Rate this question:
-
- 7.
Which of the following is associated with an Active Directory forest? (Choose all that apply.)
- A.
Contains trees with different naming structures
- B.
Allows independent domain administration
- C.
Contains domains with different schemas
- D.
Represents the broadest element in Active Directory
Correct Answer(s)
A. Contains trees with different naming structures
B. Allows independent domain administration
D. Represents the broadest element in Active DirectoryExplanation
An Active Directory forest is a collection of one or more domain trees that share a common schema and global catalog. Each tree within the forest has a unique naming structure, allowing for the organization of domains in a hierarchical manner. This allows for independent domain administration, where each domain within the forest can have its own administrators and policies. The forest represents the broadest element in Active Directory, as it encompasses all the domains and trees within it.Rate this question:
-
- 8.
Which of the following is not associated with an Active Directory tree?
- A.
A group of domains
- B.
A container object that can be linked to a GPO
- C.
A common naming structure
- D.
Parent and child domains
Correct Answer
B. A container object that can be linked to a GPOExplanation
The correct answer is "A container object that can be linked to a GPO." In an Active Directory tree, a container object that can be linked to a GPO is actually associated with it. The other options, such as a group of domains, a common naming structure, and parent and child domains, are all elements that are associated with an Active Directory tree.Rate this question:
-
- 9.
Which of the following is associated with installing the first domain controller in a forest?
- A.
RODC
- B.
Child domain
- C.
Global catalog
- D.
DHCP
Correct Answer
C. Global catalogExplanation
Installing the first domain controller in a forest is associated with creating a global catalog. A global catalog is a distributed data repository that contains a searchable, partial representation of every object in every domain within a forest. It allows users to locate and access resources across the entire forest, rather than just within their own domain. By creating a global catalog, the first domain controller ensures that this information is replicated and available to other domain controllers in the forest, enabling efficient and effective resource discovery and access.Rate this question:
-
- 10.
The Active Directory database and log files should always be located on the same disk. Trueor False?
- A.
True
- B.
False
Correct Answer
B. FalseExplanation
False. The Active Directory database and log files should not always be located on the same disk. It is recommended to store them on separate disks to improve performance and ensure fault tolerance. By separating the database and log files, it reduces the risk of data loss in case of disk failure or corruption. Additionally, it allows for better utilization of disk I/O resources and improves overall system performance.Rate this question:
-
- 11.
Which MMCs are added after Active Directory installation? (Choose all that apply.)
- A.
Active Directory Domains and Trusts
- B.
Active Directory Groups and Sites
- C.
ADSI Edit
- D.
Active Directory Restoration Utility
Correct Answer(s)
A. Active Directory Domains and Trusts
C. ADSI EditExplanation
After the installation of Active Directory, two MMCs are added: Active Directory Domains and Trusts and ADSI Edit. Active Directory Domains and Trusts is used to manage domain and trust relationships, while ADSI Edit is a low-level editor for Active Directory that allows administrators to view and modify objects in the directory. Active Directory Groups and Sites and Active Directory Restoration Utility are not added after the installation of Active Directory.Rate this question:
-
- 12.
You run the Add Roles Wizard in Server Manager to add the AD DS role. After the wizardis finished, you check the Administrative Tools folder but don’t find any of the ActiveDirectory management tools. What should you do?
Correct Answer(s)
Run Dcpromo.exeExplanation
Running Dcpromo.exe will promote the server to a domain controller, which will install the necessary Active Directory management tools. The Add Roles Wizard only adds the AD DS role, but it does not automatically install the management tools. Running Dcpromo.exe will ensure that the tools are installed and available in the Administrative Tools folder.Rate this question:
- 13.
Which of the following defines the types of objects in Active Directory?
- A.
GPOs
- B.
Attribute values
- C.
Schema attributes
- D.
Schema classes
Correct Answer
D. Schema classesExplanation
Schema classes define the types of objects that can be created in Active Directory. They define the attributes and properties that an object can have, as well as the rules and constraints that apply to those objects. GPOs (Group Policy Objects) are used to manage and configure settings for groups of computers or users. Attribute values are the specific values assigned to the attributes of an object. Schema attributes are the individual attributes that define the properties of an object.Rate this question:
-
- 14.
Which of the following defines the types of information stored in an Active Directory object?
- A.
GPOs
- B.
Attribute values
- C.
Schema attributes
- D.
Schema classes
Correct Answer
C. Schema attributesExplanation
The types of information stored in an Active Directory object are defined by schema attributes. Schema attributes define the properties and characteristics of objects in the Active Directory, such as their names, data types, and allowed values. These attributes determine the structure and organization of the directory and provide a standardized way to store and retrieve information. GPOs (Group Policy Objects) are used to manage and apply settings to groups of computers or users, attribute values represent the actual data stored in the attributes, and schema classes define the types of objects that can be created in the directory.Rate this question:
-
- 15.
“John Doe” is an example of which of the following?
- A.
GPO
- B.
Attribute value
- C.
Schema attribute
- D.
Schema class
Correct Answer
B. Attribute valueExplanation
"John Doe" is an example of an attribute value because it represents a specific value assigned to an attribute. In this case, "John Doe" could be an attribute value for a person's name attribute. Attribute values are used to provide specific information or data for attributes within a schema or database.Rate this question:
-
- 16.
Which of the following is a container object? (Choose all that apply.)
- A.
Domain
- B.
Group
- C.
GPO
- D.
OU
Correct Answer(s)
A. Domain
D. OUExplanation
A container object is a type of object that can hold other objects within it. In this context, both a Domain and an OU (Organizational Unit) are examples of container objects. A Domain is a collection of computers, users, and other objects that share a common security database, while an OU is a logical container used to organize and manage objects within a domain. Group and GPO (Group Policy Object) are not container objects, as they do not have the capability to hold other objects within them.Rate this question:
-
- 17.
Which of the following is a default folder object?
- A.
Computers
- B.
Domain Controllers
- C.
Groups
- D.
Sites
Correct Answer
A. ComputersExplanation
Computers are a default folder object in Active Directory. In Active Directory, objects are organized into containers called folders. Computers folder is a default container that stores all computer objects within the domain. These objects represent physical or virtual computers that are members of the domain. The Computers folder allows for easy management and organization of computer objects within the Active Directory structure.Rate this question:
-
- 18.
Which type of account is not found in Active Directory?
- A.
Domain user account
- B.
Local user account
- C.
Built-in user account
- D.
Computer account
Correct Answer
B. Local user accountExplanation
The correct answer is "Local user account" because Active Directory is a centralized database that stores information about network resources, including user accounts, but it does not manage or store local user accounts that are specific to individual computers. Local user accounts are created and managed on individual computers and are not part of the Active Directory domain.Rate this question:
-
- 19.
You have just created a shared folder on your domain controller. You publish the share inActive Directory by using the Shared Folders snap-in in Computer Management. To makesure the shared folder was published correctly, you use the Search Active Directory tool in Windows Explorer. You can find the shared folder, but when you open Active Directory Users and Computers, you can’t locate the object representing the shared folder. Whatshould you do so that you can see this object in Active Directory Users and Computers?
- 20.
To which of the following can a GPO be linked? (Choose all that apply.)
- A.
Trees
- B.
Domains
- C.
Folders
- D.
Sites
Correct Answer(s)
B. Domains
D. SitesExplanation
A Group Policy Object (GPO) can be linked to both domains and sites. A domain is a logical grouping of computers and users in a network, and linking a GPO to a domain allows the policies defined in the GPO to be applied to all objects within that domain. Similarly, a site represents a physical location in a network, and linking a GPO to a site allows the policies to be applied to all objects within that site. Therefore, both domains and sites are valid options for linking a GPO.Rate this question:
-
- 21.
Which container has a default GPO linked to it?
- A.
Users
- B.
Printers
- C.
Computers
- D.
Domain
Correct Answer
D. DomainExplanation
A default Group Policy Object (GPO) is linked to the Domain container. This means that any settings defined in the default GPO will apply to all objects within the domain, including users, printers, and computers. The GPO allows administrators to manage and enforce various policies and settings for the entire domain, providing a centralized way to control and configure the behavior of objects within the domain.Rate this question:
-
- 22.
When are policies set in the User Configuration node applied?
- A.
Every 5 minutes
- B.
Immediately
- C.
At user logon
- D.
At computer restart
Correct Answer
C. At user logonExplanation
Policies set in the User Configuration node are applied at user logon. This means that when a user logs into their account, the policies configured in the User Configuration node will be implemented. This allows the system to apply specific settings and restrictions based on the user's account, ensuring that the appropriate policies are in place for that particular user.Rate this question:
-
- 23.
Users can override settings in the Preferences folder of a GPO. True or False?
- A.
True
- B.
False
Correct Answer
A. TrueExplanation
Users can override settings in the Preferences folder of a GPO. This means that even if a Group Policy Object (GPO) is applied to a user's computer, they can still modify and change the settings within the Preferences folder of that GPO. This allows users to customize certain aspects of their computer's settings, even if they are part of a larger network or organization that has implemented GPOs.Rate this question:
-
- 24.
Which of the following is a folder under the Computer Configuration node? (Choose all thatapply.)
- A.
Administrative Templates
- B.
Users and Computers
- C.
Domain Controllers
- D.
Windows Settings
Correct Answer(s)
A. Administrative Templates
D. Windows SettingsExplanation
The Computer Configuration node is a part of the Group Policy Management Console in Windows. It contains various settings that can be applied to computers in a domain. Administrative Templates and Windows Settings are both folders under the Computer Configuration node. Administrative Templates contains policy settings that can be applied to the computer, while Windows Settings contains additional settings related to Windows operating system. Users and Computers and Domain Controllers are not folders under the Computer Configuration node.Rate this question:
-
- 25.
If a policy is defined in a GPO linked to a domain, and that policy is defined with a different setting in a GPO linked to an OU, which is true by default?
- A.
The policy setting in the GPO linked to the OU is applied.
- B.
The policy setting in the GPO linked to the domain is applied.
- C.
Neither policy setting is applied, and an error message is generated.
- D.
The policy in both GPOs defaults to Not Defined so that no conflict exists.
Correct Answer
A. The policy setting in the GPO linked to the OU is applied.Explanation
When a policy is defined in a Group Policy Object (GPO) linked to a domain, and the same policy is defined with a different setting in a GPO linked to an Organizational Unit (OU), the policy setting in the GPO linked to the OU takes precedence by default. This means that the policy setting in the GPO linked to the OU will be applied to the objects within that OU, overriding the policy setting in the GPO linked to the domain.Rate this question:
-
Quiz Review Timeline +
Our quizzes are rigorously reviewed, monitored and continuously updated by our expert board to maintain accuracy, relevance, and timeliness.
-
Current Version
-
Mar 15, 2023Quiz Edited by
ProProfs Editorial Team -
Jan 28, 2012Quiz Created by
Cendy
- ACA Quizzes
- ACCA Quizzes
- ACE Quizzes
- BCBA Quizzes
- CCP Quizzes
- CDC Quizzes
- CDCs Quizzes
- CEH Quizzes
- CISSP Quizzes
- CPAT Quizzes
- CPFA Quizzes
- CPP Quizzes
- CPT Quizzes
- CSA Quizzes
- CSET Quizzes
- CST Quizzes
- CSWIP Quizzes
- FTCE Quizzes
- HIPAA Quizzes
- IAHCSMM Quizzes
- ISTQB Quizzes
- LEED Ga Quizzes
- MBLEx Quizzes
- NCIDQ Quizzes
- PMP Quizzes
- PRAXIS Quizzes
- PTCB Quizzes
- Six Sigma Quizzes
- TEAS Quizzes
Back to top