Microsoft Server Directory Quiz
-
Explicit permissions never override inherited permissions.
-
True
-
False
-
Commonly known as the Active Directory, the Microsoft Server Directory has lists of all the operating systems just to mention but a few. How good are you with the directory? Find out below and all the best.
(86).webp "Microsoft Server Directory Quiz - Quiz")
Quiz Preview
- 2.
A dedicated forest root domain contains only the forestwide administrative accounts and domain controllers needed to run the forestwide operations master roles. No additional OUs or server roles are installed.
-
True
-
False
Correct Answer
A. TrueExplanation
A dedicated forest root domain is designed to only contain the necessary forestwide administrative accounts and domain controllers that are responsible for performing forestwide operations master roles. This means that no additional organizational units (OUs) or server roles are installed in this domain. The purpose of this setup is to keep the forest root domain clean and focused on its specific administrative functions, ensuring efficient management and operation of the entire forest. Therefore, the statement is true.Rate this question:
-
- 3.
Which directory partition contains all objects in a domain, including users, groups, computers, OUs, and other objects?
-
Global Catalog partition
-
Domain directory partition
-
Configuration partition
-
Application directory partition5
Correct Answer
A. Global Catalog partitionExplanation
The Global Catalog partition contains all objects in a domain, including users, groups, computers, OUs, and other objects. The Global Catalog is a distributed data repository that stores a subset of the most commonly used attributes for objects in a forest. It allows for efficient searching and locating of objects across multiple domains in a forest.Rate this question:
-
- 4.
All computers assigned an address in a subnet require a router to communicate with one another.
-
True
-
False
Correct Answer
A. FalseExplanation
This statement is false because computers within the same subnet can communicate with each other directly without the need for a router. A subnet is a logical division of an IP network, and all devices within the same subnet can communicate with each other using their IP addresses and subnet mask. A router is only required when communication needs to occur between different subnets.Rate this question:
-
- 5.
A ____ is configured manually between domains to bypass the normal referral process.
-
One-way trust
-
Shortcut trust
-
Forest trust
-
Option 4
Correct Answer
A. One-way trustExplanation
A one-way trust is configured manually between domains to bypass the normal referral process. This means that one domain trusts the other, allowing users in the trusted domain to access resources in the trusting domain. However, the trust is not reciprocated, and users in the trusting domain do not have access to resources in the trusted domain. This type of trust is useful in scenarios where there is a need for limited access between domains, such as in a merger or acquisition situation.Rate this question:
-
- 6.
A user principal name (UPN) follows the format ____________________.
Correct Answer
username@domainExplanation
A user principal name (UPN) follows the format of "username@domain". It consists of the username, which identifies the specific user, followed by the "@" symbol, and then the domain name. The UPN is used as a unique identifier for users in certain systems, such as Active Directory, and allows for easier user management and authentication.Rate this question:
- 7.
The _________________________ is a directory partition and contains the most commonly accessed object attributes to facilitate object searches and user logons across domains.
Correct Answer
Global Catalog PartitionExplanation
The Global Catalog Partition is a directory partition that contains the most commonly accessed object attributes. It is designed to facilitate object searches and user logons across domains. By storing a subset of the attributes for all objects in the forest, the Global Catalog Partition allows for efficient and quick searches, reducing the need to access multiple domain controllers. This improves the performance of directory services and enhances the user experience by providing faster logons and searches across the network.Rate this question:
- 8.
Match a term below to the following descriptionThe process for replicating Active Directory objects in which changes to the database can occur on any domain controller and are propagated, or replicated, to all other domain controllers.
-
Database replication
-
Multimaster replication
-
Intrasite replication
-
Intersite replication
Correct Answer
A. Multimaster replicationExplanation
Multimaster replication is the correct answer because it refers to the process of replicating Active Directory objects where changes to the database can occur on any domain controller and are then propagated or replicated to all other domain controllers. This allows multiple domain controllers to have the ability to make changes to the database, making it a more efficient and flexible method of replication.Rate this question:
-
- 9.
Which of the following statements about operations master roles is correct?are added, deleted, or renamed.
-
By default, the Infrastructure master is chosen randomly per domain
-
There can be multiple schema masters per domain
-
The RID Master is responsible for providing backward compatibility with NT domain controllers
-
There is only one domain naming master per forest, which must be available whenever domains
Correct Answer
A. By default, the Infrastructure master is chosen randomly per domain -
- 10.
What is the name of the default site link that is created when Active Directory is first installed?
-
SITELINKIPDEFAULT
-
SITELINKDEFAULT
-
DEFAULTIPSITELINK
-
SITELINKDEFAULTIP
Correct Answer
A. DEFAULTIPSITELINKExplanation
The default site link that is created when Active Directory is first installed is called DEFAULTIPSITELINK.Rate this question:
-
- 11.
Which operations master role is responsible for ensuring that changes made to object names in one domain are updated in references to these objects in other domains?
-
Infrastructure master
-
Domain naming master
-
RID master
-
Schema master
Correct Answer
A. Infrastructure masterExplanation
The infrastructure master is responsible for ensuring that changes made to object names in one domain are updated in references to these objects in other domains. This role is crucial in maintaining the consistency and synchronization of object names across multiple domains within a forest. The infrastructure master identifies and updates the references to objects when their names are changed, ensuring that the changes are propagated correctly throughout the forest.Rate this question:
-
- 12.
The group “TestGroup” has been added to an objects DACL and assigned the Allow Full control permission. “TestUserA” is a member of “TestGroup”, which has been assigned Deny Write permission for the object. What is “TestUserA”’s effective permissions?
-
TestUserA has no permissions to the object because he has been denied write access.
-
TestUserA is part of TestGroup, therefore TestUserA has Full Control permissions regardless of the Deny Write permission.
-
TestUserA can do anything that Full Control would allow him to do, except write to the object.
-
This can’t happen because conflicting permissions are not allowed in an object’s DACL.
Correct Answer
A. TestUserA can do anything that Full Control would allow him to do, except write to the object.Explanation
TestUserA can do anything that Full Control would allow him to do, except write to the object. This is because although TestUserA is a member of TestGroup, which has been assigned Deny Write permission, the Deny permission takes precedence over the Allow permission. Therefore, TestUserA is denied the ability to write to the object, even though they have been granted Full Control permission through TestGroup.Rate this question:
-
- 13.
Which operations master role is responsible for providing backwards compatibility with Windows NT servers configured as Windows NT backup domain controllers or member servers?
-
Domain naming master
-
RID master
-
PDC emulator master
-
Schema master
Correct Answer
A. PDC emulator masterExplanation
The PDC emulator master is responsible for providing backwards compatibility with Windows NT servers configured as Windows NT backup domain controllers or member servers. This role ensures that these older servers can still communicate and function properly within the domain.Rate this question:
-
- 14.
Which of the following is not an advantage of running a dedicated forest root domain?
-
flexibility
-
manageability
-
reliability
-
Security
Correct Answer
A. reliabilityExplanation
Running a dedicated forest root domain does not provide an advantage in terms of reliability. While a dedicated forest root domain can offer benefits such as flexibility, manageability, and security, reliability is not specifically enhanced by this setup. Reliability typically depends on factors such as network infrastructure, hardware, and software configurations, rather than the presence of a dedicated forest root domain.Rate this question:
-
- 15.
The user “TestUserA” has been added to an objects DACL and assigned the Allow Full control permission. However, “TestUserA” has inherited the Deny Full Control permission for the object from its parent container. What is “TestUserA”’s effective permissions?
-
TestUserA is given default permissions for the object because Full Control and Deny Full Control cancel each other out
-
This can’t be done because conflicting permissions are not allowed in an object’s DACL
-
TestUserA has no permissions due to Deny Full Control
-
TestUserA has Full Control permissions
Correct Answer
A. TestUserA has Full Control permissionsExplanation
TestUserA has Full Control permissions. Even though TestUserA has inherited the Deny Full Control permission from its parent container, the Allow Full Control permission that was directly assigned to TestUserA on the object overrides the inherited permission. In Windows security, explicit permissions take precedence over inherited permissions. Therefore, TestUserA's effective permission is Full Control.Rate this question:
-
- 16.
Each entry in the Discretionary access control list is referred to as an ACE. What does ACE stand for?
-
Access Control Extension
-
Acceptable Control Extension
-
Applied Control Entry
-
Access Control Entry
Correct Answer
A. Access Control EntryExplanation
An ACE stands for Access Control Entry. In the context of a Discretionary access control list, an ACE refers to each individual entry that specifies the permissions or access rights for a particular user or group. It determines what actions can be performed on a resource or object, such as read, write, or execute. The ACE is an essential component of the access control mechanism, allowing administrators to define and manage the access privileges of different users or groups within a system.Rate this question:
-
- 17.
To verify who has been delegated control of an OU, you must ____.
-
Use the dsview /delegated command
-
Be on the original domain controller where permission was delegated
-
Be the owner of the OU
-
View the OU’s permissions
Correct Answer
A. View the OU’s permissionsExplanation
To verify who has been delegated control of an OU, you need to view the OU's permissions. By checking the permissions, you can identify the users or groups that have been granted control over the OU. This will allow you to determine who has been delegated the authority to manage and make changes to the objects within the OU.Rate this question:
-
- 18.
_______________________ defines how permissions are transmitted from a parent object to a child object.
Correct Answer
Permission InheritanceExplanation
Permission inheritance is the process by which permissions are passed down from a parent object to a child object. This means that if a parent object has certain permissions set, such as read or write access, those permissions will be automatically inherited by any child objects. This allows for efficient management of permissions, as changes made at the parent level will automatically apply to all child objects.Rate this question:
- 19.
Lightweight Directory Access Protocol (LDAP) was created by the ______________________________.
Correct Answer
IETF; Internet Engineering Task ForceExplanation
The correct answer is IETF; Internet Engineering Task Force. The IETF is a standards organization that develops and promotes voluntary internet standards, including the Lightweight Directory Access Protocol (LDAP). LDAP was created by the IETF to provide a standard way to access and manage directory information over a network.Rate this question:
Quiz Review Timeline (Updated): Aug 16, 2024 +
Our quizzes are rigorously reviewed, monitored and continuously updated by our expert board to maintain accuracy, relevance, and timeliness.
-
Current Version
-
Aug 16, 2024Quiz Edited by
ProProfs Editorial Team -
Jul 06, 2014Quiz Created by
TimGutierrez
Back to top