Ch 10 dir review

Josh Melver

1. Which of the following is the default forest functional level for a Windows Server 2008 domain controller installed in a new forest? a. Windows 2000 mixed b. Windows 2000 c. Windows Server 2003 d. Windows Server 2008 2. Which of the following is true about forests running at the Windows Server 2003 functional level? (Choose all that apply.) a. You can rename a domain. b. You can create a forest trust with a Windows 2000 forest. c. RODCs can be part of the forest. d. Windows 2000 domain controllers can be part of the forest. 3. The Windows 2000 native domain functional level supports universal groups. True or False? 4. Which of the following is a feature introduced with the Windows Server 2008 domain functional level? (Choose all that apply.) a. Shortcut trusts b. Fine-grained password policies c. DFS replication of Sysvol d. Selective authentication 5. Youre going to introduce a Windows Server 2008 domain controller into a Windows Server 2003 forest. Which of the following should you do? a. First, prepare the forest by running adprep /forestprep on a Windows Server 2003 domain controller performing the schema operations master role. Then run adprep /domainprep in each domain that will have a Windows Server 2008 domain controller. b. First, run adprep /domainprep in each domain that will have a Windows Server 2008 domain controller. Then prepare the forest by running adprep /forestprep on a Windows Server 2003 domain controller performing the infrastructure operations master role. c. First, run adprep /domainprep on a Windows Server 2003 domain controller that holds the schema operations master role. Then run adprep /forestprep on a domain controller performing the infrastructure operations master role.

d. First, prepare the forest by running adprep /forestprep on the new Windows Server 2008 domain controller. Then run adprep /domainprep on each new Windows Server 2008 domain controller in each domain. 6. If you need to remove a domain from a forest in which the last domain controller has failed, which program should you use? NTDSutil 7. What is the program for migrating users from one forest to another? Active directory migration tool 8. Which of the following is associated with Active Directory migration? (Choose all that apply.) a. Ntdsutil b. Adprep c. SID history d. Security translation 9. Youre going to configure a forest trust between ForestA and ForestB and are logged on to a domain controller in the root of ForestA. You try to ping a domain controller in the root domain of ForestB and get the reply Please check the name and try again. You have the IP address of the domain controller in the other forest, so you try pinging again with this IP address, and its successful. You know you have the correct server and domain name. What should you do before you attempt to create the trust? a. Verify the IP address assignment of the remote domain controller. b. Configure a stub zone. c. Verify that Kerberos v5 is configured correctly in both forests. d. Configure a standard primary zone. 10. If you configure a trust between ForestA and ForestB, and a trust exists between ForestB and ForestC, then ForestA trusts ForestC. True or False? 11. Which of the following should you configure if you want users in a trusted forest to have access only to certain resources in your forest, regardless of permission settings on these resources? a. SID filtering b. Trust transitivity c. Selective authentication d. One-way trust 12. Bob is an administrator in a trusted forest, and you have some concerns about his trustworthiness. You want to be sure he cant gain privileged access to resources in your forest while masquerading as a user in his forest who doesnt normally have privileged access in your forest. What should you configure in the forest trust? a. SID filtering

b. Trust transitivity c. Selective authentication d. One-way trust 13. You want to change the replication schedule between two domain controllers in the same siteand only these two domain controllersto occur four times per hour. The KCC has generated all your intrasite connection objects. Whats the best way to make this change? a. In the General tab of the connection objects Properties dialog box, click Change Schedule, and change the replication schedule to four times per hour. Make sure the object is marked as automatically generated. b. Create a new connection object for the two domain controllers, and set the schedule to four times per hour. Tell the KCC to check the replication topology. c. In the Site Settings tab of the NTDS Site Settings Properties dialog box, click Change Schedule, and set the schedule to four times per hour. d. In the Schedule tab of the servers Properties dialog box, click Change Schedule, and set the schedule to four times per hour. 14. A user calls the help desk to change her forgotten password. A minute later, she attempts to log on with the new password but gets a logon failed message. She verifies that the correct password is being entered. She tries logging on again about 30 minutes later and is successful. Whats the most likely cause of the delay in the users ability to log on? a. The domain controller where the password was changed was in a different site, and normal replication between sites caused the delay. b. The domain controller that authenticated the user must have gone down and didnt receive the password change until it was brought back online. c. The domain controller holding the PDC emulator role wasnt contacted by the domain controller that authenticated the user. d. The intrasite replication schedule is set for 30 minutes instead of 15 seconds. 15. You want to install an RODC in your Windows Server 2003 forest, which currently has all Windows Server 2003 domain controllers. How should you go about doing this? a. Change the forest functional level to Windows Server 2008 first, run Adprep in the forest and domain, and then install the RODC. b. Install the RODC in the forest; no additional steps are necessary. c. Run Adprep in the forest and domain, and then install the RODC.

d. Run Adprep for the forest and domain, install a Windows Server 2008 writeable domain controller, and then install the RODC. 16. Users of a new network subnet have been complaining that logons and other services are taking much longer than they did before being moved to the new subnet. You discover that many logons and requests for DFS resources from workstations in the new subnet are being handled by domain controllers in a remote site instead of local domain controllers. What should you do to solve this problem? Add a subnet 17. You have three sites: Boston, Chicago, and LA. You have created site links between Boston and chicago and between Chicago and LA with the default site link settings. What do you need to do to make sure replication will occur between Boston and LA? a. Do nothing; replication will occur between Boston and LA with the current configuration. b. Create a new connection object between Boston and LA. c. Create a site link bridge between Boston and LA. d. Configure a site link between Boston and LA with SMTP. 18. Which of the following is true about using SMTP in site links? (Choose all that apply.) a. A certification authority must be installed. b. Domains can span the sites included in the site link. c. Its best used on slow or unreliable network links. d. Its the preferred transport protocol for intersite links. 19. A partition stored on a domain controller in SiteA isnt being replicated to other sites, but all other partitions on domain controllers in SiteA are being replicated. The problem partition is stored on multiple domain controllers in SiteA. What should you investigate as the source of the problem? a. An automatically configured bridgehead server b. A manually configured bridgehead server c. A failed site link bridge d. A failed ISTG 20. Your network is configured in a hub and spoke topology. You want to control the flow of replication traffic between sites, specifically reducing the replication traffic traveling across network links between hub sites to reach satellite sites. What should you configure? a. Connection objects between domain controllers in each site b. Intersite transports c. Site link bridges d. NTDS settings

21. You want to decrease users logon time at SiteA but not increase replication traffic drastically. You have 50 users at this site with one domain controller. Overall, your network contains 3000 user and computer accounts. What solution can decrease logon times with the least impact on replication traffic? a. Configure the domain controller as a domain naming master. b. Configure the domain controller as a global catalog server. c. Configure multiple connection objects between the domain controller in SiteA and a remote global catalog server. d. Enable universal group membership caching. 22. Which of the following configurations should you avoid? a. Domain naming master and schema master on the same domain controller b. PDC emulator and RID master on the same computer c. Infrastructure master configured as a global catalog server d. Schema master configured as a global catalog server 23. Users usually notice a failure of the domain naming master immediately. True or False? 24. User authentications are taking a long time. The domain controller performing which FSMO role will most likely decrease authentication times if its upgraded? a. RID master b. PDC emulator c. Infrastructure master d. Domain naming master 25. Youre taking an older server performing the RID master role out of service and will be replacing it with a new server configured as a domain controller. What should you do to ensure the smoothest transition? a. Transfer the RID master role to the new domain controller, and then shut down the old server. b. Shut down the current RID master and seize the RID master role from the new domain controller. c. Back up the domain controller thats currently the RID master, restore it to the new domain controller, and then shut down the old RID master. d. Shut down the current RID master, and then transfer the RID master role to the new domain controller.