Computer Networking Quiz
Questions and Answers
- 1.
What Active Directory Administrative Tool is used to view and change information related to the various domains in an Active Directory environment?
- A.
Active Directory Administrative Center
- B.
Active Directory Sites and Services
- C.
Active Directory Users and Computers
- D.
Active Directory Domains and Trusts
Correct Answer
D. Active Directory Domains and TrustsExplanation
Active Directory Domains and Trusts is the correct answer because it is the administrative tool specifically designed to manage and modify domain and trust relationships within an Active Directory environment. This tool allows administrators to view and change information related to domains, such as creating or deleting domains, managing trust relationships between domains, and modifying domain-level settings. The other options, such as Active Directory Administrative Center, Active Directory Sites and Services, and Active Directory Users and Computers, are also administrative tools but they are used for different purposes within the Active Directory environment.Rate this question:
-
- 2.
A system administrator is trying to deetermine which file system to use for a server that will become a Windows Server 2016 file server and domain controller. The company has the following requirements: 1. The file system must allow for file-level security from within Windows 2016 Server 2. The file system must make efficient use of space on large partitions 3. The domain controller Sysvol must be stored on the partition. Which of the following file systems meets these requirements?
- A.
FAT
- B.
FAT32
- C.
HPPFS
- D.
NTFS
Correct Answer
D. NTFSExplanation
NTFS is the correct answer because it meets all the given requirements. NTFS allows for file-level security from within Windows Server 2016, making it suitable for a file server and domain controller. It also efficiently uses space on large partitions, which is important for storing files. Additionally, NTFS supports the storage of the domain controller Sysvol on the partition, fulfilling the third requirement.Rate this question:
-
- 3.
You have one Active Directory forest in your organization that contains one domain named chancesare.com. You have two domain controllers configured with the DNS role installed. There are two Active Directory Integrated zones named chancesare.com and chancesareAD.com. One of your IT members (who is not an administrator) needs to be able to modify the chancesare.com DNS server, but you need to prevent this user from modifying the chancesare.com SOA record. How do you accomplish this?
- A.
Modify the permissions of the chancesare.com zone from the DNS Manager snap-in
- B.
Modify the permissions of the chancesareAD.com zone from the DNSe Manager snap-in
- C.
Run the Delegation Of Control Wizard in Active Directory
- D.
Run the Delegation of Control Wizard in the DNS snap-in
Correct Answer
A. Modify the permissions of the chancesare.com zone from the DNS Manager snap-inExplanation
To accomplish this, you would need to modify the permissions of the chancesare.com zone from the DNS Manager snap-in. By doing so, you can grant the IT member the necessary permissions to modify the DNS server for chancesare.com, while specifically preventing them from modifying the chancesare.com SOA record. This allows for granular control over the user's access and ensures that they cannot make changes to the specific record that you want to restrict.Rate this question:
-
- 4.
What is the maximum number of domains that a Window Server 2016 computer configured as a domain controller may participate in at one time?
- A.
Zero
- B.
One
- C.
Two
- D.
Any number of domains
Correct Answer
B. OneExplanation
A Windows Server 2016 computer configured as a domain controller can participate in only one domain at a time. This means that it can only be a part of a single domain and cannot simultaneously be a domain controller for multiple domains. This limitation ensures that the domain controller's resources and functionality are focused on serving a single domain efficiently.Rate this question:
-
- 5.
Windows Serever 2016 requires the use of which of the following protocol or service in order to support Active Directory?
- A.
DHCP
- B.
NETBEUI
- C.
TCP/IP
- D.
All of above
Correct Answer
C. TCP/IPExplanation
Windows Server 2016 requires the use of TCP/IP protocol in order to support Active Directory. TCP/IP is the standard communication protocol used in computer networks and is essential for the functioning of Active Directory, which is a directory service that stores information about network resources and enables centralized management of network resources in a Windows domain. DHCP and NETBEUI are not specifically required for supporting Active Directory, although they may be used in conjunction with TCP/IP for network configuration and communication. Therefore, the correct answer is TCP/IP.Rate this question:
-
- 6.
The ntdsutil commands are all case insensitive and mixed cases can be used in the table to make them easier to read
- A.
True
- B.
False
Correct Answer
A. TrueExplanation
The statement is true. The ntdsutil commands are indeed case insensitive, meaning that the commands can be written in any combination of uppercase and lowercase letters. This allows users to use mixed cases in the table, making the commands easier to read and understand.Rate this question:
-
- 7.
You have a server named Server1. A Microsoft Azure Backup of Server1 is created automatically every day. You rename Server1 to Server2. Then you discover that backups are no longer being created in Azure. What should you do if you need to back up the server to Azure?
- A.
From the Azure Management Portal, upload the Server2 certificate in a management certificate
- B.
On Server2, run the Start OBRegistration cmdlet
- C.
From the Azure Management fPortal, modify the configuration on the backup vault
- D.
On Server2, run the Add WBBackupTarget cmdlet
Correct Answer
B. On Server2, run the Start OBRegistration cmdlet -
- 8.
For security reasons, you have decided that you must convert the system partition on your removable drive from the FAT32 file system to NTFS. Which of the following steps must you make in order to convert the file system?
- A.
Run the command CONVERT /FS :NTFS from the command prompt
- B.
Rerun Windows Server 2016 Setup and choose to convert the partition to NTFS during the reinstallation
- C.
Boot Windows Server 2016 Setup from the installation CD-ROM and choose Rebuild File System
- D.
Reboot the computer
Correct Answer(s)
A. Run the command CONVERT /FS :NTFS from the command prompt
D. Reboot the computerExplanation
To convert the system partition on the removable drive from the FAT32 file system to NTFS, you need to run the command CONVERT /FS :NTFS from the command prompt. This command will initiate the conversion process and change the file system to NTFS. After running the command, you also need to reboot the computer for the changes to take effect.Rate this question:
-
- 9.
Your network contains a single Active Directory domain. The domain contains five Windows Server 2008 R2 domain controllers. You plan to install a new Windows Server 2016 domain controller. Which action would you need to perform?
- A.
Run adprep.exe /rodcprep at the command line
- B.
Run adprep.exe /forestprep at the command line
- C.
From Active Directory Domains and Trusts, raise the functional level of the domain
- D.
From Active Directory Users and Computers prestage the RODC computer account
Correct Answer
B. Run adprep.exe /forestprep at the command lineExplanation
To introduce a new Windows Server 2016 domain controller into an existing Active Directory domain, you would need to run adprep.exe /forestprep at the command line. This command prepares the forest for the introduction of a newer version of Windows Server by updating the schema and making necessary changes to support the new domain controller. Running this command ensures that the new domain controller can function properly and integrate seamlessly into the existing domain.Rate this question:
-
- 10.
You are promoting a Windows Server 2016 computer to an Active Directory domain controller for test purposes. The new domain controller will be added to an existing domain. While you are using the Active Directory Installation Wizard, you receive an error message that prevents the server from being promoted. Which of the following might be the cause of the problem?
- A.
The domain has reached its maximum number of domain controllers
- B.
You do not have a Windows Server 2016 DNS server on the network
- C.
The TCP/IP configuration on the new server is incorrect
- D.
The DNS zone is configured to support one domain controller only
Correct Answer
C. The TCP/IP configuration on the new server is incorrectExplanation
The TCP/IP configuration on the new server being incorrect can cause an error message during the promotion of a Windows Server 2016 computer to an Active Directory domain controller. This is because the TCP/IP configuration is essential for the server to communicate with other devices on the network, including the existing domain controllers. If the configuration is incorrect or has conflicting settings, it can prevent the server from being promoted successfully.Rate this question:
-
- 11.
Windows Server 2016 requires the use of which of the following protocol or service in order to support Active Directory?
- A.
DHCP
- B.
DNS
- C.
IPS/SPX
- D.
All of the above
Correct Answer
B. DNSExplanation
Windows Server 2016 requires the use of DNS (Domain Name System) in order to support Active Directory. DNS is responsible for translating domain names into IP addresses, allowing clients to locate and communicate with domain controllers. By using DNS, Active Directory can maintain a hierarchical structure of domains and provide services such as domain name resolution, authentication, and directory services. DHCP (Dynamic Host Configuration Protocol) is used for automatically assigning IP addresses to clients, while IPS/SPX (Internet Protocol Suite/Sequenced Packet Exchange) is an outdated protocol not used in modern Windows Server environments.Rate this question:
-
- 12.
You are the system administrator of a large organization that has recently implemented Windows Server 2016. You have a few remote sites that do not have very tight security. You have decided to implement read-only domain controllers (RODCs). What forest and function levels does the network need for you to do the install?
- A.
Windows Server 2016
- B.
Windows Server 2008 R2
- C.
Windows Server 2012 R2
- D.
All of the above
Correct Answer
D. All of the aboveExplanation
The network needs to have all of the above forest and function levels in order to install read-only domain controllers (RODCs) in the remote sites. This is because RODCs require a minimum forest functional level of Windows Server 2008 R2 and a minimum domain functional level of Windows Server 2008. Since Windows Server 2016, Windows Server 2012 R2, and Windows Server 2008 R2 all meet these requirements, all of the above options are correct.Rate this question:
-
- 13.
If only one or a few clients are unable to see a server on the network, the problem is most likely related to the client-side configuration. To fix this make sure that the client computers have the appropriate TCP/IP configuration (including DNS server settings and that they can see other computers on the network.
- A.
True
- B.
False
Correct Answer
A. TrueExplanation
If only a few clients are unable to see a server on the network, it suggests that the server is functioning properly and other clients can access it. Therefore, the problem is likely with the configuration of the specific clients. To resolve this, it is recommended to check the TCP/IP configuration of the client computers, including the DNS server settings. Additionally, confirming that the clients can see other computers on the network can help identify any network connectivity issues. Therefore, the statement "True" accurately reflects the explanation provided.Rate this question:
-
- 14.
Your network contains a single Active Directory domain. The domain contains five Windows Server 2008 R2 domain controllers. You plan to install a new Windows Server 2016 domain controller. Which action would you need to perform?
- A.
From Active Directory Users and Computers, prestage the RODC computer account
- B.
Run adprep.exe /domain prep at the command line
- C.
From Active Directory Domains and Trust, raise the functional level of the domain
- D.
Run adprep.exe /rodcprep at the command line
Correct Answer
B. Run adprep.exe /domain prep at the command lineExplanation
To introduce a new Windows Server 2016 domain controller into an existing Active Directory domain, you would need to run "adprep.exe /domain prep" at the command line. This command prepares the domain for the introduction of the new domain controller by updating the schema and making necessary changes to the Active Directory infrastructure. It ensures that the domain is compatible with the new server version and allows for a smooth installation and integration of the new domain controller.Rate this question:
-
- 15.
You have a Windows Server 2016 server named Server1. You plan to use Windows Server Backup to back up all of the data on this server. You create a new volume and you need to ensure that the new volume can be used as a backup target. The backup target must support incremental backups. Solution: Assign a drive letter to the volume and format the volume by using ReFS. Does this meet the goal?
- A.
Yes
- B.
No
Correct Answer
B. NoExplanation
Assigning a drive letter to the volume and formatting it using ReFS does not meet the goal of ensuring that the new volume can be used as a backup target that supports incremental backups. Windows Server Backup does not support backing up to volumes formatted with ReFS. Therefore, this solution does not meet the goal.Rate this question:
-
- 16.
You are promoting a Windows Server 2016 computer to an Active Directory domain controller for test purposes. The new domain controller will be added to an existing domain. While you are using the Active Directory Installation Wizard, you receive an error message that prevents the server from being promoted. Which of the following might be the cause of the problem?
- A.
The system does not contain an NTFS partition on whicch the Sysvol directory can be created
- B.
You do not have a Windows Server 2016 DNS server on the network
- C.
The domain has reached to maximum number of domain controllers
- D.
Your existing domain and forest functional levels must be downgrated to accept the new DC
Correct Answer
A. The system does not contain an NTFS partition on whicch the Sysvol directory can be createdExplanation
The reason for the error message preventing the server from being promoted could be that the system does not have an NTFS partition on which the Sysvol directory can be created. The Sysvol directory is a critical component of Active Directory, and it needs to be on an NTFS partition for security and compatibility reasons. Without this partition, the server cannot be promoted to an Active Directory domain controller.Rate this question:
-
- 17.
You are the network administrator for a large company that creates widgets. Management asks you to implement a new Windows Server 2016 system. You need to implement federated identify management. Which of the following will help you do this?
- A.
Active Directory Federation Services
- B.
Active Directory DNS Services
- C.
Active Directory IIS Services
- D.
Active Directory IAS Services
Correct Answer
A. Active Directory Federation ServicesExplanation
Active Directory Federation Services (AD FS) is the correct answer for implementing federated identity management in a Windows Server 2016 system. AD FS is a service provided by Microsoft that allows organizations to securely authenticate users across different systems and applications. It enables single sign-on capabilities and allows users to access resources in different domains or organizations using their existing credentials. AD FS helps establish trust relationships between organizations and enables the sharing of user identity information, making it an essential component for implementing federated identity management.Rate this question:
-
- 18.
You are the system administrator responsible for your company's infrastructure. You think you have an issue with name resolution, and you need to verify that you are using the correct hostname. You want to test DNS on the local system and need to see wheter the host name server-1 resolves to the IP address 10.1.1.1. Which of the following actions provides a solution to the problem?
- A.
Add a DNS server to your local subnet
- B.
Add the mapping for the hostname server -1 to the IP address 10.1.1.1. in the local system's HOSTS file
- C.
Add an A record to your WINS server
- D.
Add an MX record to your local DNS server
Correct Answer
B. Add the mapping for the hostname server -1 to the IP address 10.1.1.1. in the local system's HOSTS fileExplanation
Adding the mapping for the hostname server-1 to the IP address 10.1.1.1 in the local system's HOSTS file provides a solution to the problem. The HOSTS file is a local file on the system that can be used to manually map hostnames to IP addresses. By adding the mapping for server-1 to 10.1.1.1 in the HOSTS file, the system will be able to resolve the hostname to the correct IP address without relying on DNS. This allows for testing the name resolution and verifying if the correct hostname is being used.Rate this question:
-
- 19.
If you want to change an existing partition from one file system to another, what command-line utility should you use?
- A.
CHANGE
- B.
CONVERT
- C.
REVERT
- D.
TRANSFORM
Correct Answer
B. CONVERTExplanation
To change an existing partition from one file system to another, the correct command-line utility to use is CONVERT. This utility allows for the conversion of a partition from one file system to another without losing any data. It is a useful tool for migrating from one file system to another, such as converting from FAT32 to NTFS or vice versa.Rate this question:
-
- 20.
The Windows Server 2016 platform supports the following file system:
- A.
File Allocation Table 32 (FAT32)
- B.
Resilient File System (ReFS)
- C.
Windows NT File System (NTFS)
- D.
All of the above
Correct Answer
D. All of the aboveExplanation
The correct answer is "All of the above" because the Windows Server 2016 platform supports all three file systems mentioned: FAT32, ReFS, and NTFS. This means that users have the flexibility to choose the file system that best suits their needs, whether it be for compatibility, resilience, or performance.Rate this question:
-
- 21.
Where are you most likely to see a Read-Only Domain Controller (RODC)?
- A.
In a small network instead of in an enterprise
- B.
In an enterprise network
- C.
In a remote site
- D.
In the place of a standard domain controller
Correct Answer
C. In a remote siteExplanation
A Read-Only Domain Controller (RODC) is typically deployed in a remote site. This is because remote sites often have limited physical security and unreliable network connections. By placing an RODC in a remote site, organizations can enhance security by limiting the exposure of sensitive information and credentials. The RODC stores a read-only copy of the Active Directory database, providing authentication and authorization services locally, without the risk of unauthorized modifications. This allows for better performance and reduces the dependency on the central domain controller, making it an ideal solution for remote locations.Rate this question:
-
- 22.
If you want to view the TCP/IP settings on a computer, What command line utility should you use?
- A.
Ping/all
- B.
Tracert/all
- C.
Ipconfig/all
- D.
Tcpipconfig/all
Correct Answer
C. Ipconfig/allExplanation
To view the TCP/IP settings on a computer, the correct command line utility to use is "ipconfig/all". This command displays detailed information about the TCP/IP configuration, including the IP address, subnet mask, default gateway, DNS servers, and other network settings. It is a commonly used utility for troubleshooting network connectivity issues and obtaining network configuration information.Rate this question:
-
- 23.
Network Discovery is turned on by default
- A.
True
- B.
False
Correct Answer
B. FalseExplanation
Network Discovery is not turned on by default. By default, Network Discovery is turned off in most operating systems for security reasons. This means that devices on the network cannot automatically discover and connect to each other. Users have to manually enable Network Discovery if they want devices to be able to discover and communicate with each other on the network.Rate this question:
-
- 24.
Active Directory can be installed by using "Add/Remove Programs" in Control Panel
- A.
True
- B.
False
Correct Answer
B. FalseExplanation
Active Directory cannot be installed using "Add/Remove Programs" in Control Panel. Active Directory is a Windows Server feature and can only be installed on a Windows Server operating system. It is typically installed through the Server Manager or by using PowerShell commands. "Add/Remove Programs" in Control Panel is used to uninstall or modify software applications installed on a computer, but it does not have the capability to install Active Directory.Rate this question:
-
- 25.
You are the administrator of an organization with a single Active Directory domain. A user who left the company returns after 90 days. The user tries to log on to their old computer and receives an error stating that authentication has failed. The user's account has been enabled. You need to ensure that the user is able to log on to the domain using that computer. What do you do?
- A.
Reset the computer account in Account Directory. Disjoin the computer from the domain, and then rejoin the computer to the domain
- B.
Run the ADadd command to rejoin the computer account
- C.
Run the MMC utility on the user's computer, and add the Domain Computers snap in
- D.
Re-create the user account and reconnect the user account to the computer account
Correct Answer
A. Reset the computer account in Account Directory. Disjoin the computer from the domain, and then rejoin the computer to the domain -
- 26.
You are the administrator of an organization with a single Active Directory domain. One of your senior executives tries to log on to a machine and receives the error. "This user account has expired. Ask your administrator to reactivate your account." You need to make sure that this doesn't happen again to this user. What do you do?
- A.
Configure the domain policy to disable account lockouts
- B.
Configure the password policy to extend the maximum password age to 0
- C.
Modify the user's properties to set the Account Never Expires setting
- D.
Modify the user's properties to extend the maximum password age to 0
Correct Answer
C. Modify the user's properties to set the Account Never Expires settingExplanation
By modifying the user's properties to set the Account Never Expires setting, the administrator ensures that the user's account will not expire in the future. This will prevent the user from receiving the error message and needing to reactivate their account.Rate this question:
-
- 27.
You need to create a new user account using the command prompt. Which command would you use?
- A.
Dsmodify
- B.
Dscreate
- C.
Dsnew
- D.
Dsadd
Correct Answer
D. DsaddExplanation
The correct command to create a new user account using the command prompt is "dsadd". This command is used in Windows operating systems to add objects to the Active Directory, including user accounts. The "dsmodify" command is used to modify existing objects, not create new ones. "dscreate" and "dsnew" are not valid commands.Rate this question:
-
- 28.
You are a domain administrator for a large domain. Recently, you have been asked to make changes to some of the permissions related to OUs within the domain. To restrict security for NJ OU further, you remove some permissions at that level. Later, a junior system administrator mentions that she is no longer able to make changes to objects within the Clifton OU (which is located within the NJ OU) Assuming that no other changes have been made to Active Directory permissions, which of the following characteristics of OUs might have cause the change in permissions?
- A.
Inheritance
- B.
Group Policy
- C.
Delegration
- D.
Object properties
Correct Answer
A. InheritanceExplanation
Inheritance is the process by which permissions assigned to a parent object are automatically passed down to its child objects. By removing some permissions at the NJ OU level, it is likely that the inheritance of permissions from the parent OU to the Clifton OU has been affected. As a result, the junior system administrator is no longer able to make changes to objects within the Clifton OU.Rate this question:
-
- 29.
You are a consultant hired to evaluate an organization's Active Directory domain. The domain contains more than 325,000 objects and hundreds of OUs. You begin examining the objects within the domain, but you find that the loading of the contents of specific OUs takes a long time. Furthermore, the list of objects can be large. You want to do the following: 1. Use the built-in Active Directory administrative tools and avoid the use of third party tools or utilities 2. Limit the list of objects within an OU to only the type of objects that you're examining (for example, only Computer objects) 3. Prevent any changes to the Active Directory domain or any of the objects within it
- A.
Use the Filter option in the Active Directory Users and Computers tool to restrict the display of objects
- B.
Use the Delegation of Control Wizard to give yourself permissions over only a certain type of object
- C.
Implement a new naming convention for objects within an OU and then sort the results using this new naming convention
- D.
Use the Active Directory Domains and Trusts tool to view information from only selected domain controllers
- E.
Edit the domain Group Policy settings to allow yourself to view only the objects of interest
Correct Answer
B. Use the Delegation of Control Wizard to give yourself permissions over only a certain type of object -
- 30.
You are the administrator of a small organization with four servers. You have one file server named FServerA that runs Windows Server 2016. You have a junior administrator who needs to do backups on this server. You need to ensure that the junior admin can use Windows Server Backup to create a complete backup of FServerA. What should you configure to allow the junior admin to do the backup?
- A.
The local groups by using Computer Management
- B.
A task by using Authorization Manager
- C.
The User Rights Assignment by using the Local Group Policy Editor
- D.
The Role Assignment by using Authorization Manager
Correct Answer
A. The local groups by using Computer ManagementExplanation
To allow the junior admin to do the backup, you should configure the local groups by using Computer Management. By adding the junior admin to the appropriate local group on the file server (FServerA), such as the Backup Operators group, you grant them the necessary permissions to perform backups using Windows Server Backup. Computer Management is a built-in Windows tool that allows you to manage local users and groups on a computer. By configuring the local groups, you can control the permissions and access rights for different users and groups on the server.Rate this question:
-
- 31.
You are the supervisor of a junior level system administrator that has a basic knowledge about working with Active Directory. You have asked him to make several security-related changes to OUs within the company's Active Directory domain. You instruct him to use the basic functionality provided in the Delegation of Control Wizard. A) Reset passwords on user accounts B) Manage Group Policy links C) Modify the membership of a group D) Create, delete, and manage groups
- A.
A, C
- B.
B, C, D
- C.
A, B, C, D
- D.
B, D
Correct Answer
C. A, B, C, DExplanation
The correct answer is A, B, C, D. The Delegation of Control Wizard allows the junior level system administrator to make several security-related changes to OUs within the company's Active Directory domain. This includes resetting passwords on user accounts (A), managing Group Policy links (B), modifying the membership of a group (C), and creating, deleting, and managing groups (D). By using the Delegation of Control Wizard, the system administrator can efficiently and securely perform these tasks within the Active Directory domain.Rate this question:
-
- 32.
You are the primary system administrator for a large Active Directory domain. Recently, you have hired another system administrator upon whom you intend to offload some of your responsibilities. The system administrator will be responsible for handling help desk calls and to basic user account management. You want to allow the new employee to have permissions to reset passwords for all users within a specific OU. However, for security reasons, it's important that the user not be able to make permissions changes for objects within other OUs in the domain. Which of the following is the best way to do this?
- A.
Create a special administration account within the OU and grant it full permissions for all objects within Active Directory
- B.
Move the user's login account into the OU that the new employee is to administer
- C.
Move the user's login account to an OU that contains the OU (that is, the parent OU of the one that the new employee is to administer)
- D.
Use the Delegation of Control Wizard to assign the necessary permissions on the OU that the new employee is to administer
Correct Answer
D. Use the Delegation of Control Wizard to assign the necessary permissions on the OU that the new employee is to administerExplanation
Using the Delegation of Control Wizard to assign the necessary permissions on the specific OU is the best way to allow the new employee to reset passwords for all users within that OU without giving them permissions to make changes in other OUs. This method allows for granular control over permissions and ensures that the new employee only has the necessary access to perform their assigned tasks. It also helps maintain security by limiting their permissions to a specific scope within the Active Directory domain.Rate this question:
-
- 33.
You are a system administrator that created a new Active Directory domain in an environment that already contains two trees. During the promotion of the domain controller, you chose to create a new Active Directory forest. You are a member of the Enterprise Administrators group and have full permissions over all domains. During the organization's migration to Active Directory, many updates were made to the information stored within the domains. Recently, users and other system administrators have complained about not being able to find specific Active Directory objects in one or more domains (although the objects exist in others) To investigate the problem, you want to check for any objects that have not been properly replicated among domain controllers. If possible, you would like to restore these objects to their proper place within the relevant Active Directory domains. Which of the following should you perform to be able to view the relevant information?
- A.
Change Active Directory to allow object information to be viewed in all domains
- B.
Promote a member server in each domain to a domain controller
- C.
Rebuild all domain controllers from the latest baccckups
- D.
Examine the contents of the LostAndFound folder using the Active Directory Users and Computers tool
Correct Answer
D. Examine the contents of the LostAndFound folder using the Active Directory Users and Computers toolExplanation
To be able to view the relevant information, you should examine the contents of the LostAndFound folder using the Active Directory Users and Computers tool. The LostAndFound folder is a special container in Active Directory that stores objects that have been deleted or moved but have not been properly replicated among domain controllers. By checking the contents of this folder, you can identify any objects that have not been replicated correctly and restore them to their proper place within the relevant Active Directory domains.Rate this question:
-
- 34.
William is a user who belongs to the Sales distribution global group. He is not able to access the laser printer that is shared on the network. The Sales global group has full access in the laser printer. How do you fix the problem?
- A.
Change the group type to a security group
- B.
Add the Sales global group to the Administrators group
- C.
Add the Sales global group to the Printer Operators group
- D.
Change the Sales group to a local group
Correct Answer
A. Change the group type to a security groupExplanation
By changing the group type to a security group, it will grant the necessary permissions and access rights to the users in the Sales global group. This will ensure that William, as a member of the Sales group, will have the appropriate permissions to access the laser printer on the network.Rate this question:
-
- 35.
You need to deactivate the UGMC option on some of your domain controllers. At which level in Active Directory would you deactivate UGMC?
- A.
Server
- B.
Site
- C.
Domain
- D.
Forest
Correct Answer
B. SiteExplanation
To deactivate the UGMC (Universal Group Membership Caching) option on some domain controllers, you would do it at the Site level in Active Directory. The Site level is a logical grouping of domain controllers that are in close physical proximity to each other. By deactivating UGMC at the Site level, you ensure that the caching of universal group memberships is disabled for the domain controllers within that specific site, while still allowing it to be active for other domain controllers in different sites.Rate this question:
-
- 36.
You work for an organization with a single domain forest. Your company has one main locations and two branch locations. All locations are configured as Active Directory sites, and all sites are connected with the DEFAULtIPSITELINK object. Your connectionsare running slower than company policy allows. You want to decrease the replication latency between all domain controllers in the various sites. What should you do?
- A.
Decrease the replication interval for the DEFAULTIPSITELINK object
- B.
Decrease the replication interval for the site
- C.
Decrease the replication schedule for the site
- D.
Decrease the replication schedule for all domain controllers
Correct Answer
A. Decrease the replication interval for the DEFAULTIPSITELINK objectExplanation
By decreasing the replication interval for the DEFAULTIPSITELINK object, the replication process between all domain controllers in the various sites will occur more frequently, resulting in a decrease in replication latency. This will help to ensure that the data is replicated more quickly and efficiently across all sites, aligning with the goal of reducing replication latency.Rate this question:
-
- 37.
You need to enable three of your domain controllers as global catalog servers. Where would you configure the domain controllers in global catalogs?
- A.
Forest, NTDS settings
- B.
Domain, NTDS settings
- C.
Site, NTDS settings
- D.
Server, NTDS settings
Correct Answer
D. Server, NTDS settingsExplanation
To enable a domain controller as a global catalog server, you would configure it in the "Server, NTDS settings" option. The global catalog contains a partial replica of all objects in the forest, which allows for efficient searching and locating of objects in a multi-domain environment. By enabling a domain controller as a global catalog server, it can respond to global catalog queries and provide information about objects in other domains within the forest. This configuration can be done through the NTDS settings of the specific domain controller.Rate this question:
-
- 38.
You are responsible for managing Active Directory replication traffic for a medium-sized organization that has deployed a single Active Directory domain. Currently, the environment is configured with two sites and the default settings for replication. Each site consists of 15 domain controllers. Recently, network administrators have complained that Active Directory traffic is using a large amount of available network bandwidth between the two sites. You have been asked to meet the following requirements: 1. Reduce the amount of network traffic between domain controllers in the two sites 2. Minimize the amount of change to the current site topology 3. Require no changes to the existing physical network infrastructure You decide that it would be most efficient to configure specific domain controllers in each site that will receive the majority of replication traffic, from the other site. Which of the following solutions meet the requirements?
- A.
Create additional sites that are designed only for replication traffic and move the existing domain controllers to these sites
- B.
Create multiple site links between the two sites
- C.
Create site link bridge between the two sites
- D.
Configure one server at each site to act as a preferred bridgehead server
Correct Answer
D. Configure one server at each site to act as a preferred bridgehead serverExplanation
Configuring one server at each site to act as a preferred bridgehead server meets the requirements. This solution reduces network traffic by directing replication traffic to specific domain controllers, minimizing the impact on available network bandwidth. It also requires minimal changes to the current site topology and does not require any changes to the existing physical network infrastructure. This solution effectively addresses all the given requirements.Rate this question:
-
- 39.
Which of the following does not need to be created manually when you are setting up a replication scenario involving three domains and three sites?
- A.
Sites
- B.
Site Links
- C.
Connect objects
- D.
Subnets
Correct Answer
C. Connect objectsExplanation
In a replication scenario involving three domains and three sites, connect objects do not need to be created manually. Connect objects are automatically created when you set up site links between the sites. These connect objects represent the physical connections between the sites and facilitate the replication process. Therefore, there is no need to manually create connect objects when setting up this replication scenario.Rate this question:
-
- 40.
Which of the following services of Active Directory is responsible for maintaining the replication topology?
- A.
FRP - File Replication Service
- B.
KCC - Knowldedge Consistency Checker
- C.
WINS - Windows Internet Name Service
- D.
DNS - Domain Name System
Correct Answer
B. KCC - Knowldedge Consistency CheckerExplanation
The Knowledge Consistency Checker (KCC) is responsible for maintaining the replication topology in Active Directory. The KCC is a built-in process that runs on domain controllers and automatically creates and manages the replication connections between domain controllers. It determines the most efficient replication paths and ensures that changes made on one domain controller are replicated to all other domain controllers in the network. The KCC also monitors the replication process and adjusts the topology as needed to ensure consistency and reliability in the Active Directory environment.Rate this question:
-
- 41.
A system administrator for an Active Directory environment that consists of three sites wants to configure site links to the transitive. Which of the following Active Directory objects are responsible for representing a transitive relationship between sites?
- A.
Additional sites
- B.
Additional site links
- C.
Bridgehead servers
- D.
Site link bridges
Correct Answer
D. Site link bridgesExplanation
Site link bridges are responsible for representing a transitive relationship between sites in an Active Directory environment. Site link bridges are used to connect site links and enable transitivity, allowing the replication of Active Directory information between sites. By configuring site link bridges, the system administrator can ensure that changes made in one site are replicated to other sites in a transitive manner, ensuring efficient and consistent replication across the Active Directory environment.Rate this question:
-
- 42.
You have configured your Active Directory environment with multiple sites and have placed the appropriate resources in each of the sites. You are now trying to choose a protocol for the transfer of replication information between two sites. The connection between the two sites has the following characteristics: 1. The link is generally unavailable during certain parts of the day because of an unreliable network provider 2. The replication transmission must be attempted whether the link is available or not. If the link was unavailable during a scheduled replication, the information should automatically be received after the link becomes available again. 3. Replication traffic must be able to travel over a standard Internet connection Which of the following protocols meets these requirements?
- A.
IP
- B.
SMTP
- C.
RPC
- D.
DHCP
Correct Answer
B. SMTPExplanation
SMTP (Simple Mail Transfer Protocol) meets the requirements because it allows replication information to be transferred over a standard Internet connection. It also supports automatic retransmission of information if the link is unavailable during a scheduled replication. Additionally, SMTP is a reliable protocol that can handle intermittent network connectivity, making it suitable for an environment with an unreliable network provider.Rate this question:
-
- 43.
A system administrator suspects that there is an error in the replication configuration. How can the system administrator look for specific error messages related to replication?
- A.
By using the Active Directory Sites and Services administrative tool
- B.
By using the Computer Management tool
- C.
By going to Event Viewer > System Log
- D.
By going to Event Viewer > Directory Service Log
Correct Answer
D. By going to Event Viewer > Directory Service LogExplanation
The system administrator can look for specific error messages related to replication by going to the Event Viewer and selecting the Directory Service Log. The Directory Service Log contains detailed information about the Active Directory service, including replication events and any related error messages. By reviewing this log, the system administrator can identify any replication configuration errors and take appropriate actions to resolve them.Rate this question:
-
- 44.
You are responsible for managing Active Directory replication traffic for a medium sized organization. Currently, the environment is configured with a single site and the default settings for replication. The site contains more than 50 domain controllers, and the system administrators are often making changes to the Active Directory database. Recently, network administrators have complained that Active Directory traffic is consuming a large amount of network bandwidth between portions complained about slow network performance during certain hours of the day. You have been asked to alleviate the problem while meeting the following requirements: 1. Be able to control exactly when replication occurs 2. Be able to base Active Directory replication on the physical network infrastructure 3. Perform the changes without creating or removing any domain controllers Which two of the following steps can you take to meet these requirements? A) Create and define connection objects that specify the hours during which replication will occur B) Create multiple site links C) Create a site link bridge D) Create new Active Directory sites that reflect the physical network topology E) Configure one server at each of the new sites to act as a bridgehead server
- A.
A, D
- B.
B, C
- C.
B, E
- D.
A, C
Correct Answer
A. A, DExplanation
To meet the requirements, the following steps can be taken:
A) Create and define connection objects that specify the hours during which replication will occur: This step allows the administrator to control exactly when replication occurs by specifying the hours during which replication will take place. This helps in reducing the network bandwidth consumption during peak hours.
D) Create new Active Directory sites that reflect the physical network topology: By creating new Active Directory sites that reflect the physical network topology, the administrator can base the Active Directory replication on the physical network infrastructure. This ensures that replication traffic flows efficiently across the network, reducing the impact on network performance.
These two steps help in addressing the network bandwidth consumption issue and meet the specified requirements without creating or removing any domain controllers.Rate this question:
-
- 45.
When you are setting up a network, you should always keep in mind that 90 percent of all hacks on a network is internal. Does this mean internal permissions and security (as well as external security) need to be as strong as possible while still allowing users to do their jobs?
- A.
True
- B.
False
Correct Answer
A. TrueExplanation
When setting up a network, it is important to remember that 90 percent of all hacks occur internally. This means that internal permissions and security should be as strong as possible while still allowing users to perform their tasks. By ensuring strong internal security measures, such as user authentication, access controls, and monitoring systems, the risk of internal hacks can be minimized. This answer emphasizes the importance of balancing security with usability in order to protect the network from internal threats.Rate this question:
-
- 46.
By default, when moving OUs, it will never inherit the permissions of their new parent container?
- A.
True
- B.
False
Correct Answer
B. FalseExplanation
When moving OUs (Organizational Units), they will inherit the permissions of their new parent container by default. This means that any permissions set on the parent container will be inherited by the OUs that are moved into it. Therefore, the correct answer is False.Rate this question:
-
- 47.
One of the advantages of Distributed File System Replication (DFSR) is that it is self-healing, and can automatically recover from USN journal ways, USN journal loss, or loss of the DFS Replication database.
- A.
True
- B.
False
Correct Answer
A. TrueExplanation
DFSR is a technology in Windows Server that allows files to be replicated between multiple servers in a distributed file system. One of its advantages is its self-healing capability, which means that it can automatically recover from issues such as USN journal ways, USN journal loss, or loss of the DFS Replication database. This feature ensures that the file system remains functional and data integrity is maintained even in the event of failures or data corruption. Therefore, the given statement is true.Rate this question:
-
- 48.
Does intersite replication refer to the synchronization of Active Directory information between domain controllers that are located in the same site?
- A.
True
- B.
False
Correct Answer
A. TrueExplanation
Intersite replication does not refer to the synchronization of Active Directory information between domain controllers that are located in the same site. Instead, it refers to the synchronization of Active Directory information between domain controllers that are located in different sites. Therefore, the correct answer is True.Rate this question:
-
- 49.
Microsoft highly recommend that you have at least __________ domain controllers in each domain of your Active Directory environment?
- A.
One
- B.
Two
- C.
Three
- D.
Four
Correct Answer
B. TwoExplanation
Microsoft highly recommends that you have at least two domain controllers in each domain of your Active Directory environment. This is because having multiple domain controllers provides redundancy and fault tolerance. If one domain controller fails, the other can continue to provide authentication and directory services. Additionally, having multiple domain controllers allows for better load distribution and improved performance.Rate this question:
-
Quiz Review Timeline +
Our quizzes are rigorously reviewed, monitored and continuously updated by our expert board to maintain accuracy, relevance, and timeliness.
-
Current Version
-
Sep 02, 2023Quiz Edited by
ProProfs Editorial Team -
Jul 26, 2018Quiz Created by
Ryanbecker24
Toughest Networking Trivia Questions Quiz! Practice Test
Toughest Networking Trivia Questions Quiz! Practice Test
Test your Computer Networking Knowledge! Ultimate Trivia Quiz
Test your Computer Networking Knowledge! Ultimate Trivia Quiz
- Binary Code Quizzes
- Computer Concept Quizzes
- Computer Essential Quizzes
- Computer Forensics Quizzes
- Computer Hardware Quizzes
- Computer Networking Quizzes
- Computer Parts Quizzes
- Computer Programming Quizzes
- Computer Science Quizzes
- Computer Security Quizzes
- Computer Shortcut Key Quizzes
- Computer Skills Quizzes
- Computer Virus Quizzes
- Cyber Security Quizzes
- Data Quizzes
- Data Security Quizzes
- Hacking Quizzes
- HCI Quizzes
- IT SecurITy Quizzes
- Malware Quizzes
- Microprocessor Quizzes
- Network Quizzes
- Operating System Quizzes
- Phishing Quizzes
- Programming Language Quizzes
- Server Quizzes
- Software Quizzes
Back to top