What Do You Know About Windows Server Active Directory? Trivia Questions Quiz

1. Your network contains an Active Directory domain named contoso.com. Contoso.com contains a server named Server2. You open the System properties on Server2 as shown in the exhibit. (Click the Exhibit button.)

Upgrade Server2 to Windows Server 2008 R2 Enterprise.

Log in as an administrator and run Server Manager.

Import the root CA certificate.

Join Server2 to the domain.

not-available-via-ai

Explanation

not-available-via-ai

2. Your network contains an Active Directory domain. The domain contains 3,000 client computers. All of the client computers run Windows 7. Users log on to their client computers by using standard user accounts. You plan to deploy a new application named App1. The vendor of App1 provides a Setup.exe file to install App1. Setup.exe requires administrative rights to run. You need to deploy App1 to all client computers. The solution must meet the following requirements: - App1 must automatically detect and replace corrupt application files. - App1 must be available from the Start menu on each client computer. What should you do first?

Create a logon script that calls Setup.exe for App1.

Create a .zap file.

Create a startup script that calls Setup.exe for App1.

Repackage App1 as a Windows Installer package.

Repackaging App1 as a Windows Installer package would be the first step in deploying the application to all client computers. This is because the vendor-provided Setup.exe file requires administrative rights to run, which standard user accounts do not have. By repackaging the application as a Windows Installer package, it can be deployed using Group Policy or other deployment tools that can install applications with administrative rights. Additionally, using a Windows Installer package would also allow for automatic detection and replacement of corrupt application files, as required by the solution.

Explanation

Repackaging App1 as a Windows Installer package would be the first step in deploying the application to all client computers. This is because the vendor-provided Setup.exe file requires administrative rights to run, which standard user accounts do not have. By repackaging the application as a Windows Installer package, it can be deployed using Group Policy or other deployment tools that can install applications with administrative rights. Additionally, using a Windows Installer package would also allow for automatic detection and replacement of corrupt application files, as required by the solution.

3. Your network contains an Active Directory domain named contoso.com. Contoso.com contains two sites named Site1 and Site2. Site1 contains a domain controller named DC1. In Site1, you install a new domain controller named DC2. You ship DC2 to Site2. You discover that certain users in Site2 authenticate to DC1. You need to ensure that the users in Site2 always attempt to authenticate to DC2 first. What should you do?

From Active Directory Users and Computers, modify the Location settings of the DC2 computer object.

From Active Directory Sites and Services, modify the Location attribute for Site2.

From Active Directory Sites and Services, move the DC2 server object.

From Active Directory Users and Computers, move the DC2 computer object.

To ensure that users in Site2 always attempt to authenticate to DC2 first, you should move the DC2 server object in Active Directory Sites and Services. This will physically relocate the server to Site2, making it the preferred domain controller for authentication in that site. Modifying the Location settings or attribute for Site2 or the DC2 computer object will not have the same effect as physically moving the server object.

Explanation

To ensure that users in Site2 always attempt to authenticate to DC2 first, you should move the DC2 server object in Active Directory Sites and Services. This will physically relocate the server to Site2, making it the preferred domain controller for authentication in that site. Modifying the Location settings or attribute for Site2 or the DC2 computer object will not have the same effect as physically moving the server object.

4. Your network contains a domain controller that runs Windows Server 2008 R2. You run the following command on the domain controller: dsamain.exe C dbpath c:\$SNAP_201006170326_VOLUMEC$\Windows\NTDS\ntds.dit C ldapport 389 - allowNonAdminAccess The command fails. You need to ensure that the command completes successfully. How should you modify the command?

Change the value of the -dbpath parameter.

Include the path to Dsamain.

Change the value of the -ldapport parameter.

Remove the CallowNonAdminAccess parameter.

The command fails because the value of the -ldapport parameter is incorrect. By changing the value of the -ldapport parameter to the correct port number, the command should complete successfully.

Explanation

The command fails because the value of the -ldapport parameter is incorrect. By changing the value of the -ldapport parameter to the correct port number, the command should complete successfully.

5. Your network contains an enterprise certification authority (CA) that runs Windows Server 2008 R2 Enterprise. You have a custom certificate template named Template 1. Template1 is published to the CA. You need to ensure that all of the members of a group named Group1 can enroll for certificates that use Template1. Which snap-in should you use?

Security Templates

Enterprise PKI

Certification Authority

Certificate Templates

Certificates

TPM Management

Authorization Manager

Group Policy Management

Active Directory Users and Computers

The correct answer is "Certificate Templates" because this snap-in allows you to manage and configure certificate templates on the enterprise certification authority. By using this snap-in, you can ensure that all members of Group1 can enroll for certificates that use Template1.

Explanation

The correct answer is "Certificate Templates" because this snap-in allows you to manage and configure certificate templates on the enterprise certification authority. By using this snap-in, you can ensure that all members of Group1 can enroll for certificates that use Template1.

6. Your network contains an Active Directory domain. The domain contains 10 domain controllers that run Windows Server 2008 R2. You need to monitor the following information on the domain controllers during the next five days: - Memory usage - Processor usage - The number of LDAP queries What should you do?

Create a User Defined Data Collector Set (DCS) that uses the Active Directory Diagnostics template.

Use the System Performance Data Collector Set (DCS).

Create a User Defined Data Collector Set (DCS) that uses the System Performance template.

Use the Active Directory Diagnostics Data Collector Set (DCS).

Creating a User Defined Data Collector Set (DCS) that uses the Active Directory Diagnostics template is the correct answer because this template is specifically designed to monitor Active Directory-related information such as memory usage, processor usage, and the number of LDAP queries. By using this template, the domain controllers can be monitored effectively for the required information over the next five days.

Explanation

Creating a User Defined Data Collector Set (DCS) that uses the Active Directory Diagnostics template is the correct answer because this template is specifically designed to monitor Active Directory-related information such as memory usage, processor usage, and the number of LDAP queries. By using this template, the domain controllers can be monitored effectively for the required information over the next five days.

7. Your network contains an Active Directory domain named contoso.com. Contoso.com contains a domain controller named DC1 and a read-only domain controller (RODC) named RODC1. You need to view the most recent user accounts authenticated by RODC1. What should you do first?

From Active Directory Sites and Services, right-click the Connection object for DC1, and then clickReplicate Now.

From Active Directory Sites and Services, right-click the Connection object for DC2, and then clickReplicate Now.

From Active Directory Users and Computers, right-click contoso.com, click Change DomainController,and then connect to DC1.

From Active Directory Users and Computers, right-click contoso.com, click Change Domain Controller,and then connect to RODC1.

To view the most recent user accounts authenticated by RODC1, you should first connect to DC1 using Active Directory Users and Computers. This is because the question asks for the most recent user accounts authenticated by RODC1, not DC1. By connecting to DC1, you can view the replication information and see the most recent user accounts authenticated by RODC1.

Explanation

To view the most recent user accounts authenticated by RODC1, you should first connect to DC1 using Active Directory Users and Computers. This is because the question asks for the most recent user accounts authenticated by RODC1, not DC1. By connecting to DC1, you can view the replication information and see the most recent user accounts authenticated by RODC1.

8. Your network contains an enterprise certification authority (CA) that runs Windows Server 2008 R2 Enterprise. You need to ensure that users can enroll for certificates that use the IPSEC (Offline request) certificate template Which snap-in should you use?

Enterprise PKI

TPM Management

Certificates

Active Directory Users and Computers

Authorization Manager

Certification Authority

Group Policy Management

Security Templates

Certificate Templates

To ensure that users can enroll for certificates that use the IPSEC (Offline request) certificate template, the snap-in that should be used is "Certificate Templates". This snap-in allows administrators to manage and configure certificate templates within the enterprise certification authority. By accessing the Certificate Templates snap-in, administrators can create, modify, and publish certificate templates, including the IPSEC (Offline request) template, which enables users to enroll for certificates with this specific template.

Explanation

To ensure that users can enroll for certificates that use the IPSEC (Offline request) certificate template, the snap-in that should be used is "Certificate Templates". This snap-in allows administrators to manage and configure certificate templates within the enterprise certification authority. By accessing the Certificate Templates snap-in, administrators can create, modify, and publish certificate templates, including the IPSEC (Offline request) template, which enables users to enroll for certificates with this specific template.

9. Your network contains an enterprise certification authority (CA) that runs Windows Server 2008 R2 Enterprise. You need to ensure that all of the members of a group named Group1 can view the event log entries for Certificate Services. Which snap-in should you use?

Certificate Templates

Certification Authority

Authorization Manager

Active Directory Users and Computers

TPM Management

Security Templates

Group Policy Management

Enterprise PKI

Certificates

not-available-via-ai

Explanation

not-available-via-ai

10. Your network contains an Active Directory domain. The domain contains an enterprise certification authority (CA). You need to ensure that only members of a group named Admin1 can create certificate templates. Which tool should you use to assign permissions to Admin1?

The Certification Authority console

Active Directory Users and Computers

The Certificates snap-in

Active Directory Sites and Services

To assign permissions to the group named Admin1, you should use the Active Directory Sites and Services tool. This tool allows you to manage the sites and services in your Active Directory environment. By using this tool, you can assign permissions to specific groups or users, including the Admin1 group, to control their access and actions within the Active Directory domain.

Explanation

To assign permissions to the group named Admin1, you should use the Active Directory Sites and Services tool. This tool allows you to manage the sites and services in your Active Directory environment. By using this tool, you can assign permissions to specific groups or users, including the Admin1 group, to control their access and actions within the Active Directory domain.