Network Services

1. What shared folder exists on all domain controllers and is used to store Group Policy objects login scripts and other files that are replicated domain-wide ?

SYSVOL

AD

C$

VOLMGR

2. What is the process of confirming that an authenticated user has the correct permissions to access one or more network resources .

Authorization

Authentication

Administration

Allocation

3. Where is the certificate database located on a Certification Authority ?

C:/Windows\system\Certlog

C:\Windows\system32\Certlog

C;\WIndows\Certlog

C:\Windows \system32\Certlog32

4. Microsoft windows Server 2008 uses the WIndows Installer with group policy to install and manage software that is packages into what type of file ?

.exe

.msi

.mse

.inf

5. Active Directory uses trust relationships to allow access between multiple domains and /or forests either within a single forest or across multiple enterprises

Trusts

Domain

Forest

Global

6. files are used to apply service packs and hotfixes to installed software .

Update

Patch

Upgrade

Enhanced

7. What policies are designed to identify software and control its execution ?

Software Restriction

Software Execution Prevention

Malicious Software Detection

Malicious Software Removal Policies

8. Windows server 2008 is the highest available forest functional

Windows 2008

Windows server 2003

Windows server 2008

Windows 2009

9. What protocol has become an industry standard that enables data exchanges between directory services and applications ?

NTDS

LDAP

NDIS

AD

10. What new Windows Server 2008 feature is a special installation option that creates a minimal environment for running only specific services and roles ?

Minimal Installation Option

Server Core

Server Standard

Minimal Server Environment (MSE)

11. What typically consists of a least four characters or digits that are entered while presenting a physical access token ,such as an ATM card or smart card ?

Password

Smart card

RSA smartID

12. The largest container object within Active Directory is a forest

Organizational unit

Domain

Tree

Forest

13. What contains the rules and definitions that are used for creating and modifying object classes and attributes with Active Directory

Configuraton NC

Schema NC

Domain NC

DC NC

14. What command can you use to run the Active Directory Installation Wizard ?

Dcpromo

Adpromo

Domainpromo

Adcreate

15. What process can be used by windows server 2008 DNS to clean up the DNS database after DNS records become "stale " or out of date ?

Searching and destroying

Aging and scavenging

Seeking and removing

Finding and deleting

16. When you install the forest root domain controller in an Active Directory forest the Active DIrectory Installation Wizard creates a single site named

Default Site

SIte Default

Default Site Name

Default First Site Name

17. Certain operations such as password change or an account lockout. will be transmitted by using replication which means that the change will be placed at the "beginning of hte line and applied before any other changes that are waiting to be replicated.

Urgent

Immediate

Fast

Pushed

18. groups are a collection of user accounts that are local to one specifci workstation or member server

Distribution

Local

Built in

Security

19. What locator records within DNS allow clients to locate an Active Directory domain controller or global catalog

A records

MX records

SRV records

SOA records

20. Which of the following is a software restriction rule that can be used to govern which programs can or cannot run on your network ?

Hash rule

Certifcation rule

Path rule

All of the above

21. The process of keeping each domain controller in synch with changes that has been made elsewhere on the network is called

Copying

Osmosis

Transfering

Replication

22. A site is defined as one or more IP subnets that are connected by fast links

Domain

Network

Site

Forest

23. Which of the following is a benefit of implementing a public key infrastructure (PKI)

Users no longer need to remember passwords

Smart Cards can be used from remote locations such as a home office,to provide authentication services

All of the above

24. What command line tool can be used with a standard user account to reduce the risks associated with the Administrator account?

Runas

Su

Runadmin

Launchas

25. What setting will prevent policy settings from applying to all child objects at the current level and all subordinate levels ?

Block Policy propagaton

Block policy inheritance

Remove policy inheritance

Remove policy propagation

26. For both intrasite and intersite replication what protocol does Active Directory use for all replication traffic ?

RPC over SMTP

RPC over TCP

RPC over IP

RPC over ARP

27. What method of authentication requires a smart card and a PIN to provide more secure access to company resources ?

Two -factor authentication

Dual authentication

Complex authentication

Strong authentication

28. What mmc snap in provides a single access point to all aspects of group policy that were previously spread across other tools such as Active Directory Users and Computers ,Active Directory sites and services .Resultant set of policy and the group policy management editor ?

Group policy editor

Group policy management

GPedit

Gpupdata

29. Which of the following can be done from the Group Policy Management snap in ?

Import and copy GPO settings to and from the file system

Search for GPOs based on name,permissions ,WMI filter,GUID or policy extension est in the GPOs

Search for individual settings within a GPO by keyword and search for only thoese settings that have been configured

All of the above

30. When replicating information between sites Active Directory will designate a server in each site to act as a gatekeeper in managing site to site replication

Primary

Masterhead

Bridgehead

Global catalog

31. What is the process of confirming a user's identity by using a known value such as a password pin number on a smart card, or user's fingerprint or user's fingerprint in the case of biometric authentication ?

Authorization

Authentication

Administration

Allocation

32. What command line utility is used to import or export Active Directory information from a comma-separated value (.csv) file

Netdiag

Nslookup

Csvde

Dcpromo

33. Password is an attempt to discover a users password

Recovery

Tracing

Sniffing

Cracking

34. The primary goal of intersite replication is to mimimize the usage of

Active Directory

Administrative labor

Bandwidth

Financial support

35. What option allows users to install the applications that they consider useful to them ?

Assign

Require

Amend

Publish

36. What option is helpful when you are deploying required applications to pertinent users and computers ?

Assign

Require

Amend

Publish

37. What type of trust is new to windows server 2008 and is only available when the forest functionality is set to windows Server 2008

Parent child trust

Two way transitive trust

Cross-forest trust

Simple trust

38. Active Directory sites provide the means by which administrators can control replication traffic

Services

Sites

Domains

Forests

39. What describes the amount of time that it takes for all domain controllers in the environment to contain the most up to date information

Replication

Convergence

Completion

Propogation

40. Which Ou is created by Default when Active Directory is installed ?

Domain Controllers

Users

Computers

Member Servers

41. Group policy management started being natively installed with what version of windows server ?

NT4

2000

2003

2008

42. Domain controllers located in different sites will participate in replication

Intersite

Extrasite

Extersite

Intrasite

43. What tool is used to seize a FSMO role ?

Ntosutil

Ntdsutil

Dcpromo

Adutil

44. What utility is used to manually create trust relationships

Active Directory Trust Console

Active Directory Wizard

Active Directory domains and trusts MMC snap in trust

Active directory domains and trusts MMC control panel

45. What holds a subset of forest wide Active Directory objects and acts as a central repository by holding a complete copy of all objects from the host server local domain with a partial copy of all objects from other domains within the same forest ?

Domain controller

Global catalog

DNS server

DHCP Server

46. When a user logs on what is created that identifies the user and all of the user's group memberships ?

Access card

Access token

Access key

Access session

47. What special identify group contains all authenticated users and domain guests ?

Power Users

Everyone

Batch

Authenticated Users

48. What tool allows you to utilize a simple interface to delegate permissons for domains ,OUs or containers ?

Delegation Wizard

Delegation of Control Wizard

Delegation of Administration Wizard

Administration Wizard

49. Password cracking can be accomplised by intelligent guessing on the part of the hacker or through the use of an automated attack

Brute force

Dictionary

Cracking

Work

50. The read only domain controller contains a copy of the ntds.dit file that cannot be modified and does not replicate its changes to other domain controllers within Active DIrectory

Secondary

Primary

Read only

Mandatory

51. What is used to uniquely identify an object throughout the Active directory domain ?

Security identifier

Relative identifier

Intermediate identifier

Domain identifier

52. What is a system of digital certificates ,certification authorities (CAs) and other registration authorities (RAs) that verify and authenticate the validity of each party involved in an electronic transaction through the use of public key cryptography?

CKI

PKI

DKI

PCI

53. What component issues and manages certificates for individuals ,computers and organizations ?

Enrollment agent

PKI server

Certificate server

Certification Authority

54. Active Directory creates a with the idea that all writeable domain controllers in a domain should communicate Active Directory information to each other in addition to communicating forest-wide informaton with other domains

Replication topology

Domain topology

Replication strategy

Domain strategy

55. The two built in user accounts that are created on a windows server 2008 computer are the Administrator account and the account

Network

Interactive

Power User

Guest

56. What allows published applications to be organized within specfic groupings for easy navigation ?

Sofware classifications

Software methods

Software categories

Software assignment

57. A window Server 2008 computer that has been configured with the Active Directory DS role is referred to as

Domain controller

Domain manager

Global catalog

DNS server

58. Before deploying software using Group Policy what must you create ?

Deployment share

Deployment point

Distribution share

59. What identifies software by specifying the directory path where the application is stored in the file system ?

Hash rule

Certificate rule

Path rule

Network zone rule

60. Which of the following is not a function performed by a global catalog server ?

Facilitating searches for objects in the forest

Maintaining universal group membership information

Maintaining a backup of all data stored on a domain controller

Maintaining a copy of all objects in the domain

61. What windows Server 2008 feature stores universal group memberships on a local domain controller that can be used for logon to the domain eliminating the need for frequent access to a global catalog server ?

Global group membership caching

Domain group membership caching

Local group membership caching

Universal group membership caching

62. What types of memberships are stored in the global catalog?

Domain local

Universal

Global

Local workstation

63. What can be used to add ,delete or modify objects in Active Directory, in addition to modifying the schema if necessary ?

Dcpromo

Ldife

Csvde

Nslookup

64. To implement PKI what must be installed on your Windows 2008 Server ?

Actve DIrectory Users and Computers

Microsoft AdminPak

Active Directory Certificate Services

Microsoft Advanced Security Pack

65. Which mode in the Resultant set of Policy wizard is useful for documenting and understanding how combined policies are affecting users and computers ?

Logging

Planning

Implementation

Audting

66. What command line tool is used to create delete ,verify, and reset trust relationships from the windows server 2008 command line ?

Adtrust

Netdom

Csvde

Nslookup

67. What describes the process of configuring one or more groups as members of another group ?

Group nesting

Group hierarchy

Group leveling

Group forests

68. You cannot manually modify the group membershp of or view the membership lists of groups

Distributions

Domain local

Special identity

Universal

69. What is a credit card sized or token style ,such as USB device that is used with a PIN to enable logon to the enterprise?

RSA SecureID

Password token

Smart chip

Smart card

70. WMI filters cannot be evaluated on which operating system?

Windows xp

Windows 2000

Windows server 2003

Windows vista

71. Which FSMO role has the authority to manage the creation and deletion of domains,domain trees,and application data partitions in the forest ?

Relative Identifier Master

Infrastructure Master

Domain Naming Master

Schema Master

72. name refers to each users login name

Common

Distinguished

SAM account

Ad Name

73. When configuring software restriction policies which option prevents any application from running that requires administrative rights ,but allows programs to run that only require resources that are accesible by normal users ?

Unrestricted

Restricted

Basic User

Disallowed

74. By default,the software restriction policies area has what value in the default security level settings?

Unrestricted

Restricted

Basic User

Disallowed

75. What SRV record information serves as a mechanism to set up load balancing between multiple servers that are advertising the same SRV records ?

Priority

Time to live

Weight

Port

76. What is a partial copy of all objects from other domains within the same forest that is held on a global catalog server

Partial attribute set

Partial domain set

Partial attribute listing

Partial domain listing

77. Which of these design aspects should you consider when planning the appropriate location of FSMO role holders

Role seizure

Role transfer

Role migration

Role separation

78. Read only domain controllers provide added security in the way passwords that are stored through what feature ?

Password Integration Policy

Password caching Policy

Password Storage Policy

Password Replication Policy

79. What console must be used to move the domain Naming Master FSMO role ?

Active DIrectory Users and Computers

Active DIrectory Forests and Domains

Active Directory Schema

Active Directory Domains and Trusts

80. Mofications to .ms files requier transform files which have the extension

.msit

.mse

.msx

.mst

81. What process is responsible for selecting a bridgehead server and mapping the topology to be used for replication between sites ?

Intersite Bridgehead Replicator

Interste Replication Generator

Intersite Bridgehead Generator

Intersite Topology Generator

82. What allows businesses to define ,manage,access and secure network resources including fles,printers ,people and applications ?

Network service

Directory service

Directory infrastructure

NT directory

83. What is the process of replicating DNS information from one DNS server to another ?

Replication

DNS push

Zone transfer

DNS update

84. What type of rule can be applied to allow only windows installer packages to be installed if they come from a trusted area of the network

Hash rule

Certificate rule

Path rule

Network zone rules

85. Which FSMO role is responsible for reference updates from its domain objects to other domains ?

Relative Identifier Master

Infrastructure Master

Domain Naming Master

Schema Master

86. What type of file can be written to allow non-windows Installer compliant applicatons to be deployed ?

.msi

.exe

.zap

.ini

87. When a GPO is selected in Group policy management which tab allows administrators to view the locations to which the policy is linked?

Scope

Details

Setings

Delegation

88. What allows a user to be able to log on using a cached copy of his or her logon credentials that have been stored on his or her local workstation

Cached login

Cached credentials

Stored login

Stored credentials

89. What is the process of confirming that an authenticated user has the correct permissions to access one or more network resources ?

Authorization

Authentication

Administration

Allocation

90. What is a series of bytes with a fixed length that uniquely identifies a program or file ?

Algorithm

Hash

Policy

Ip address

91. When implementing multiple software restriction policy rules which rule is always applied last ?

Hash rule

Certificate rule

Path rule

Network zone rules

92. What software restriction policy properties allow you to determine whether the policies apply to all files or whether library files ,such as Dynamic Link Library DLL are excluded

Enforcement

Designated file types

Security settings

Trusted publishers

93. Group policy is used to simulate the effect of a poicy on the user environment

Simulator

Planning

Modeling

Results

94. What special identity group is used as a reduced privilege account to allow applications to run on a server without requiring administrative access ?

Network

Dialup

Network service

Restricted

95. Gpos can act as templates when creating new GPOs for your organization

Template

Base

Starter

Set

96. What special identity group is used by the system to allow permissons to protected system files for services to function properly ?

Network Service

Restricted

Service

Self

97. What defines a chain of site links by which domain controllers from different sites can communicate ?

Site link bridge

Site chain

Site chain bridge

Site link chain

98. What procedure is used only when you have experienced a catastrophic failure of a domain controller that holds a FSMO role and you need to recover that role

Role transfer

Role migration

Role seizure

Role separation

99. What refines the application of a GPO to include or exclude certains users ,groups, or computers based on the ACL that is applied to the GPO?

Block policy inheritance

Policy delegation

Group based filtering

Security group filtering

100. Which of the following is not a type of user account that can be configured in Windows Server 2008 ?

Local accounts

Domain accounts

Network accounts

Built in accounts

101. When a GPO is selected in group policy management which tab allows administrators to view the locations to which the policy is linked ?

Scope

Details

Delegation

Management

102. What component of the microsoft windows operating system allows administrators to create queries based on hardware,software,operating system and services?

Effective Permissions

Resultant set of polccy

Effective set of policy

Applied policy

103. What software restriction policy properties allow an administrator to control how certificate rules are handled ?

Enforcement

Designated file types

Security settings

Trusted publishers

104. Rather than simulating policy effects like the group policy modeling wizard what obtains RSop information from the client computer to show the actual effects that policies have on the client computer and user environment

Group policy simulator

Group policy planning

Group policy modeling

Group policy results

105. Which tab displays groups and users with permission to link ,perform modeling analyses or read group policy results information ?

Linked group policy objects

Group policy inheritance

Delegation

Management

Network Services

1. What shared folder exists on all domain controllers and is used to store Group Policy objects login scripts and other files that are replicated domain-wide ?

2.

What first name or nickname would you like us to use?

2. What is the process of confirming that an authenticated user has the correct permissions to access one or more network resources .

3. Where is the certificate database located on a Certification Authority ?

4. Microsoft windows Server 2008 uses the WIndows Installer with group policy to install and manage software that is packages into what type of file ?

5. Active Directory uses trust relationships to allow access between multiple domains and /or forests either within a single forest or across multiple enterprises

6. files are used to apply service packs and hotfixes to installed software .

7. What policies are designed to identify software and control its execution ?

8. Windows server 2008 is the highest available forest functional

9. What protocol has become an industry standard that enables data exchanges between directory services and applications ?

10. What new Windows Server 2008 feature is a special installation option that creates a minimal environment for running only specific services and roles ?

11. What typically consists of a least four characters or digits that are entered while presenting a physical access token ,such as an ATM card or smart card ?

12. The largest container object within Active Directory is a forest

13. What contains the rules and definitions that are used for creating and modifying object classes and attributes with Active Directory

14. What command can you use to run the Active Directory Installation Wizard ?

15. What process can be used by windows server 2008 DNS to clean up the DNS database after DNS records become "stale " or out of date ?

16. When you install the forest root domain controller in an Active Directory forest the Active DIrectory Installation Wizard creates a single site named

17. Certain operations such as password change or an account lockout. will be transmitted by using replication which means that the change will be placed at the "beginning of hte line and applied before any other changes that are waiting to be replicated.

18. groups are a collection of user accounts that are local to one specifci workstation or member server

19. What locator records within DNS allow clients to locate an Active Directory domain controller or global catalog

20. Which of the following is a software restriction rule that can be used to govern which programs can or cannot run on your network ?

21. The process of keeping each domain controller in synch with changes that has been made elsewhere on the network is called

22. A site is defined as one or more IP subnets that are connected by fast links

23. Which of the following is a benefit of implementing a public key infrastructure (PKI)

24. What command line tool can be used with a standard user account to reduce the risks associated with the Administrator account?

25. What setting will prevent policy settings from applying to all child objects at the current level and all subordinate levels ?

26. For both intrasite and intersite replication what protocol does Active Directory use for all replication traffic ?

27. What method of authentication requires a smart card and a PIN to provide more secure access to company resources ?

28. What mmc snap in provides a single access point to all aspects of group policy that were previously spread across other tools such as Active Directory Users and Computers ,Active Directory sites and services .Resultant set of policy and the group policy management editor ?

29. Which of the following can be done from the Group Policy Management snap in ?

30. When replicating information between sites Active Directory will designate a server in each site to act as a gatekeeper in managing site to site replication

31. What is the process of confirming a user's identity by using a known value such as a password pin number on a smart card, or user's fingerprint or user's fingerprint in the case of biometric authentication ?

32. What command line utility is used to import or export Active Directory information from a comma-separated value (.csv) file

33. Password is an attempt to discover a users password

34. The primary goal of intersite replication is to mimimize the usage of

35. What option allows users to install the applications that they consider useful to them ?

36. What option is helpful when you are deploying required applications to pertinent users and computers ?

37. What type of trust is new to windows server 2008 and is only available when the forest functionality is set to windows Server 2008

38. Active Directory sites provide the means by which administrators can control replication traffic

39. What describes the amount of time that it takes for all domain controllers in the environment to contain the most up to date information

40. Which Ou is created by Default when Active Directory is installed ?

41. Group policy management started being natively installed with what version of windows server ?

42. Domain controllers located in different sites will participate in replication

43. What tool is used to seize a FSMO role ?

44. What utility is used to manually create trust relationships

45. What holds a subset of forest wide Active Directory objects and acts as a central repository by holding a complete copy of all objects from the host server local domain with a partial copy of all objects from other domains within the same forest ?

46. When a user logs on what is created that identifies the user and all of the user's group memberships ?

47. What special identify group contains all authenticated users and domain guests ?

48. What tool allows you to utilize a simple interface to delegate permissons for domains ,OUs or containers ?

49. Password cracking can be accomplised by intelligent guessing on the part of the hacker or through the use of an automated attack

50. The read only domain controller contains a copy of the ntds.dit file that cannot be modified and does not replicate its changes to other domain controllers within Active DIrectory

51. What is used to uniquely identify an object throughout the Active directory domain ?

52. What is a system of digital certificates ,certification authorities (CAs) and other registration authorities (RAs) that verify and authenticate the validity of each party involved in an electronic transaction through the use of public key cryptography?

53. What component issues and manages certificates for individuals ,computers and organizations ?

54. Active Directory creates a with the idea that all writeable domain controllers in a domain should communicate Active Directory information to each other in addition to communicating forest-wide informaton with other domains

55. The two built in user accounts that are created on a windows server 2008 computer are the Administrator account and the account

56. What allows published applications to be organized within specfic groupings for easy navigation ?

57. A window Server 2008 computer that has been configured with the Active Directory DS role is referred to as

58. Before deploying software using Group Policy what must you create ?

59. What identifies software by specifying the directory path where the application is stored in the file system ?

60. Which of the following is not a function performed by a global catalog server ?

61. What windows Server 2008 feature stores universal group memberships on a local domain controller that can be used for logon to the domain eliminating the need for frequent access to a global catalog server ?

62. What types of memberships are stored in the global catalog?

63. What can be used to add ,delete or modify objects in Active Directory, in addition to modifying the schema if necessary ?

64. To implement PKI what must be installed on your Windows 2008 Server ?

65. Which mode in the Resultant set of Policy wizard is useful for documenting and understanding how combined policies are affecting users and computers ?

66. What command line tool is used to create delete ,verify, and reset trust relationships from the windows server 2008 command line ?

67. What describes the process of configuring one or more groups as members of another group ?

68. You cannot manually modify the group membershp of or view the membership lists of groups

69. What is a credit card sized or token style ,such as USB device that is used with a PIN to enable logon to the enterprise?

70. WMI filters cannot be evaluated on which operating system?

71. Which FSMO role has the authority to manage the creation and deletion of domains,domain trees,and application data partitions in the forest ?

72. name refers to each users login name

73. When configuring software restriction policies which option prevents any application from running that requires administrative rights ,but allows programs to run that only require resources that are accesible by normal users ?

74. By default,the software restriction policies area has what value in the default security level settings?

75. What SRV record information serves as a mechanism to set up load balancing between multiple servers that are advertising the same SRV records ?

76. What is a partial copy of all objects from other domains within the same forest that is held on a global catalog server

77. Which of these design aspects should you consider when planning the appropriate location of FSMO role holders