What Do You Know About Windows Server Active Directory? Trivia Questions Quiz
What Do You Know About Windows Server Active Directory? There is much that most people don’t know when it comes to this operating system and the quiz below is one way of helping people understand more about it. How about you give it a shot and get to see how well you will do? All the best as you tackle it!
- 1.
Your network contains a domain controller that runs Windows Server 2008 R2. You run the following command on the domain controller: dsamain.exe C dbpath c:\$SNAP_201006170326_VOLUMEC$\Windows\NTDS\ntds.dit C ldapport 389 - allowNonAdminAccess The command fails. You need to ensure that the command completes successfully. How should you modify the command?
- A.
Change the value of the -dbpath parameter.
- B.
Include the path to Dsamain.
- C.
Change the value of the -ldapport parameter.
- D.
Remove the CallowNonAdminAccess parameter.
Correct Answer
C. Change the value of the -ldapport parameter.Explanation
The command fails because the value of the -ldapport parameter is incorrect. By changing the value of the -ldapport parameter to the correct port number, the command should complete successfully.Rate this question:
-
- 2.
Your network contains an Active Directory domain. The domain contains 10 domain controllers that run Windows Server 2008 R2. You need to monitor the following information on the domain controllers during the next five days: - Memory usage - Processor usage - The number of LDAP queries What should you do?
- A.
Create a User Defined Data Collector Set (DCS) that uses the Active Directory Diagnostics template.
- B.
Use the System Performance Data Collector Set (DCS).
- C.
Create a User Defined Data Collector Set (DCS) that uses the System Performance template.
- D.
Use the Active Directory Diagnostics Data Collector Set (DCS).
Correct Answer
A. Create a User Defined Data Collector Set (DCS) that uses the Active Directory Diagnostics template.Explanation
Creating a User Defined Data Collector Set (DCS) that uses the Active Directory Diagnostics template is the correct answer because this template is specifically designed to monitor Active Directory-related information such as memory usage, processor usage, and the number of LDAP queries. By using this template, the domain controllers can be monitored effectively for the required information over the next five days.Rate this question:
-
- 3.
Your network contains an Active Directory domain named contoso.com. Contoso.com contains a domain controller named DC1 and a read-only domain controller (RODC) named RODC1. You need to view the most recent user accounts authenticated by RODC1. What should you do first?
- A.
From Active Directory Sites and Services, right-click the Connection object for DC1, and then click Replicate Now.
- B.
From Active Directory Sites and Services, right-click the Connection object for DC2, and then click Replicate Now.
- C.
From Active Directory Users and Computers, right-click contoso.com, click Change DomainController, and then connect to DC1.
- D.
From Active Directory Users and Computers, right-click contoso.com, click Change Domain Controller, and then connect to RODC1.
Correct Answer
C. From Active Directory Users and Computers, right-click contoso.com, click Change DomainController, and then connect to DC1.Explanation
To view the most recent user accounts authenticated by RODC1, you should first connect to DC1 using Active Directory Users and Computers. This is because the question asks for the most recent user accounts authenticated by RODC1, not DC1. By connecting to DC1, you can view the replication information and see the most recent user accounts authenticated by RODC1.Rate this question:
-
- 4.
Your network contains an Active Directory domain. The domain contains 3,000 client computers. All of the client computers run Windows 7. Users log on to their client computers by using standard user accounts. You plan to deploy a new application named App1. The vendor of App1 provides a Setup.exe file to install App1. Setup.exe requires administrative rights to run. You need to deploy App1 to all client computers. The solution must meet the following requirements: - App1 must automatically detect and replace corrupt application files. - App1 must be available from the Start menu on each client computer. What should you do first?
- A.
Create a logon script that calls Setup.exe for App1.
- B.
Create a .zap file.
- C.
Create a startup script that calls Setup.exe for App1.
- D.
Repackage App1 as a Windows Installer package.
Correct Answer
D. Repackage App1 as a Windows Installer package.Explanation
Repackaging App1 as a Windows Installer package would be the first step in deploying the application to all client computers. This is because the vendor-provided Setup.exe file requires administrative rights to run, which standard user accounts do not have. By repackaging the application as a Windows Installer package, it can be deployed using Group Policy or other deployment tools that can install applications with administrative rights. Additionally, using a Windows Installer package would also allow for automatic detection and replacement of corrupt application files, as required by the solution.Rate this question:
-
- 5.
Your network contains an Active Directory domain named contoso.com. Contoso.com contains two sites named Site1 and Site2. Site1 contains a domain controller named DC1. In Site1, you install a new domain controller named DC2. You ship DC2 to Site2. You discover that certain users in Site2 authenticate to DC1. You need to ensure that the users in Site2 always attempt to authenticate to DC2 first. What should you do?
- A.
From Active Directory Users and Computers, modify the Location settings of the DC2 computer object.
- B.
From Active Directory Sites and Services, modify the Location attribute for Site2.
- C.
From Active Directory Sites and Services, move the DC2 server object.
- D.
From Active Directory Users and Computers, move the DC2 computer object.
Correct Answer
C. From Active Directory Sites and Services, move the DC2 server object.Explanation
To ensure that users in Site2 always attempt to authenticate to DC2 first, you should move the DC2 server object in Active Directory Sites and Services. This will physically relocate the server to Site2, making it the preferred domain controller for authentication in that site. Modifying the Location settings or attribute for Site2 or the DC2 computer object will not have the same effect as physically moving the server object.Rate this question:
-
- 6.
Your network contains an Active Directory domain named contoso.com. Contoso.com contains a server named Server2. You open the System properties on Server2 as shown in the exhibit. (Click the Exhibit button.)
- A.
Upgrade Server2 to Windows Server 2008 R2 Enterprise.
- B.
Log in as an administrator and run Server Manager.
- C.
Import the root CA certificate.
- D.
Join Server2 to the domain.
Correct Answer
D. Join Server2 to the domain. -
- 7.
Your network contains an Active Directory domain. The domain contains an enterprise certification authority (CA). You need to ensure that only members of a group named Admin1 can create certificate templates. Which tool should you use to assign permissions to Admin1?
- A.
The Certification Authority console
- B.
Active Directory Users and Computers
- C.
The Certificates snap-in
- D.
Active Directory Sites and Services
Correct Answer
D. Active Directory Sites and ServicesExplanation
To assign permissions to the group named Admin1, you should use the Active Directory Sites and Services tool. This tool allows you to manage the sites and services in your Active Directory environment. By using this tool, you can assign permissions to specific groups or users, including the Admin1 group, to control their access and actions within the Active Directory domain.Rate this question:
-
- 8.
Your network contains an enterprise certification authority (CA) that runs Windows Server 2008 R2 Enterprise. You need to ensure that all of the members of a group named Group1 can view the event log entries for Certificate Services. Which snap-in should you use?
- A.
Certificate Templates
- B.
Certification Authority
- C.
Authorization Manager
- D.
Active Directory Users and Computers
- E.
TPM Management
- F.
Security Templates
- G.
Group Policy Management
- H.
Enterprise PKI
- I.
Certificates
Correct Answer
C. Authorization Manager -
- 9.
Your network contains an enterprise certification authority (CA) that runs Windows Server 2008 R2 Enterprise. You need to ensure that users can enroll for certificates that use the IPSEC (Offline request) certificate template Which snap-in should you use?
- A.
Enterprise PKI
- B.
TPM Management
- C.
Certificates
- D.
Active Directory Users and Computers
- E.
Authorization Manager
- F.
Certification Authority
- G.
Group Policy Management
- H.
Security Templates
- I.
Certificate Templates
Correct Answer
I. Certificate TemplatesExplanation
To ensure that users can enroll for certificates that use the IPSEC (Offline request) certificate template, the snap-in that should be used is "Certificate Templates". This snap-in allows administrators to manage and configure certificate templates within the enterprise certification authority. By accessing the Certificate Templates snap-in, administrators can create, modify, and publish certificate templates, including the IPSEC (Offline request) template, which enables users to enroll for certificates with this specific template.Rate this question:
-
- 10.
Your network contains an enterprise certification authority (CA) that runs Windows Server 2008 R2 Enterprise. You have a custom certificate template named Template 1. Template1 is published to the CA. You need to ensure that all of the members of a group named Group1 can enroll for certificates that use Template1. Which snap-in should you use?
- A.
Security Templates
- B.
Enterprise PKI
- C.
Certification Authority
- D.
Certificate Templates
- E.
Certificates
- F.
TPM Management
- G.
Authorization Manager
- H.
Group Policy Management
- I.
Active Directory Users and Computers
Correct Answer
D. Certificate TemplatesExplanation
The correct answer is "Certificate Templates" because this snap-in allows you to manage and configure certificate templates on the enterprise certification authority. By using this snap-in, you can ensure that all members of Group1 can enroll for certificates that use Template1.Rate this question:
-
Quiz Review Timeline +
Our quizzes are rigorously reviewed, monitored and continuously updated by our expert board to maintain accuracy, relevance, and timeliness.
-
Current Version
-
Mar 21, 2023Quiz Edited by
ProProfs Editorial Team -
Jun 01, 2012Quiz Created by
Huf_34
Back to top