Multiple Choice
Identify the
letter of the choice that best completes the statement or answers the question.
|
|
|
1.
|
Your
company decides that each user account in Active Directory needs to have an employee number
attribute. What does the administrator need to change in order to add this
attribute? a. | the AD
database | c. | the list of
attributes | b. | the object definition | d. | the schema | | | | |
|
|
|
2.
|
Which
one of the following statements in not correct? a. | A domain uses a
common directory database. | b. | A domain uses security policies. | c. | A domain
controller can manage multiple domains. | d. | A domain is a replication unit. | | |
|
|
|
3.
|
You
have three domains in your organization, abc.com, def.abc.com and xyz.com and they were installed in
that order. Which statement regarding their roles is most correct? a. | xyz.com is the
forest root and a domain root while abc.com is a domain root | b. | xyz.com is the
forest root while abc.com is a parent domain | c. | abc.com is the
forest root and a domain root while xyz.com is a domain root | d. | abc.com is a
domain root and xyz.com is a domain root | | |
|
|
|
4.
|
Sally
in domain Toronto searched for the fax number of Pierre in domain Montreal, but was unsuccessful.
What could the problem be? a. | Sally doesn’t have the correct permissions to view
Pierre’s attributes | b. | Fax numbers aren’t considered important for searching
purposes. | c. | Sally’s computer cannot contact the domain root
server. | d. | Domain Toronto has no Global Catalog
Server. | | |
|
|
|
5.
|
Forests and trees do not share __________. a. | A common
schema | c. | Transitive
trusts | b. | A contiguous name space | d. | A common global catalogue | | | | |
|
|
|
6.
|
Which
statement is true when comparing the DNS and Active Directory (AD) namespaces? a. | A computer uses
DNS to look up the ip address of a domain controller that
provides a service within Active
Directory. | b. | A domain in DNS is called a zone. | c. | Both DNS and AD
store the same information about a physical object. | d. | Because AD and
DNS use the same naming conventions, it is possible to manage AD remotely across the
Internet. | | |
|
|
|
7.
|
Which
of the following must be located on a partition formatted with NTFS? a. | SYSVOL folder
structure | c. | AD folder
structure | b. | log files | d. | directory database | | | | |
|
|
|
8.
|
Which
one of the following DNS records will help your computer find the Global Catalog
server?
|
|
|
9.
|
The
following is an example resource record. What is the port number of the LDAP server?
_ldap_tcp.contoso.msft 600 IN SRV 0 100 389 london.contoso.msft
|
|
|
10.
|
You
issue the dcpromo command but it fails. Which of the following factors could prevent you from
installing Active Directory? a. | You only have 500MB of free disk
space | b. | You machine has Windows 2000 Professional
installed | c. | You haven’t installed Admin Pak
yet | d. | You have both
TCP/IP and NetBEUI installed | | |
|
|
|
11.
|
Tom
is the administrator for his company’s Windows 2003 network. He wants to create universal
groups. However, he still has a few legacy Windows NT 4 domain controllers and his workstations are a
mixed bag of Windows 2000 Professional, Windows NT Workstation and Windows 98 machines. What advice
would you give Tom about configuring his network if he wants to minimize his costs? a. | Change the
network to mixed mode | b. | Upgrade the NT 4 servers to Windows 2003 Server and change the
network to Native mode | c. | Upgrade the NT 4 servers to Windows 2003 Server, the NT
Workstations to Windows XP and the Windows 98 machines to Windows XP and change the network to Native
mode | d. | Upgrade the NT 4
servers to Windows 2003 Server and the NT Workstations to Windows XP and change the network to Mixed
mode | | |
|
|
|
12.
|
You
need to give Sandy the ability to create users and groups within the Marketing OU. What is the
easiest method to do this? a. | Open up the properties of the Marketing OU, go to the Security
Tab, add Sandy to the ACL by name, configure her permissions to include the ability to add objects to
the OU | b. | Make Sandy a member of the Administrator’s
group | c. | Use the Delegation of Control wizard | d. | Create an
administrator’s group for the Marketing OU and add Sandy to the group | | |
|
|
|
13.
|
The
accounting OU has two child OUs, Accounts Payable and Accounts Receivable. Bob has been assigned to
look after the Accounting OU and therefore has Full Control permission. Bob actually works in
Accounts Payable. Sally looks after Accounts Receivable and it has been decided that Bob should only
have Read access to Accounts Receivable and therefore his Read permission has been set to Allow.
Surprise, surprise! Bob can modify objects in Accounts Receivable. How do you correct this
situation? a. | In the Accounts
Receivable OU, disallow inheritance, remove previously inherited rights and specify Sally’s and
Bob’s correct permissions | b. | In the Accounts Receivable OU, deny Bob the Write
permission | c. | In the Accounting OU, clear the Allow permissions to flow down
to child OUs check box; in Accounts Receivable OU, specify Sally’s and Bob’s correct
permissions | d. | In the Accounts Receivable OU, Deny Bob the Full Control
permission and Allow him the Read permission | | |
|
|
|
14.
|
What
is one difference between csvde and ldifde for managing user accounts? a. | Csvde allows you
to modify and delete user accounts, while ldifde does neither | b. | A ldifde file
has as its first line a list of all the attributes in correct order | c. | Ldifde allows
you to modify and delete user accounts, while csvde does neither | d. | A csvde file
uses one line for each attribute | | |
|
|
|
15.
|
You
are about to implement Active Directory and will need to create 1000 user accounts. The human
resources department can provide basic information about these employees in an Excel spreadsheet.
After editing the information and exporting it, you will be able to use which utility to create the
user accounts? a. | ldifde | c. | Csvde | b. | Active Directory Users and
Computers | d. | Ldifde or
csvde | | | | |
|
|
|
16.
|
Susan, the assistant sale manager in Toronto, has an account in the OU
toronto.acme.com and the user name susan.acme.com. She has just been promoted to the sales manager in
Montreal that has the OU name montreal.acme.com. As the administrator of the network, what is the
easiest way for you to give Susan an account in the Montreal OU? a. | Create a new
user account for Susan in montreal.acme.com and delete her from
toronto.acme.com | b. | Create an alias for Susan in montreal.acme.com and have it
point back to Susan’s account in toronto.acme.com | c. | Select
Susan’s account in toronto.acme.com, right click and use the Move option to move the account to
montreal.acme.com | d. | Select Susan’s account in toronto.acme.com, right click
and use the Cut option. Change to montreal.acme.com, right click and use the Paste
option | | |
|
|
|
17.
|
The
administrator deleted the accounting group by mistake. He immediately recreated the group as soon as
he saw his mistake. Unfortunately, the members of the accounting group can’t use their programs
now. What happened? a. | The administrator will have to put the members back in the
accounting group | b. | The administrator will have to recreate the users and then put
them back in the accounting group | c. | The users must log out and then log back in before the system
will recognize their rights. | d. | Groups are tracked by their SID, not their name. Recreating a
group by name does not restore the previous SID. Therefore the new group does not have the same
permissions as the old. | | |
|
|
|
18.
|
Delta
corporation uses the naming convention of First initial plus last name. Therefore Jane Smiths’s
email address is jsmith@delta.com. Delta has just purchased
Alpha corporation. The Alpha division becomes a child domain to Delta and its name is
alpha.delta.com. The users in the Alpha division want their email addresses to be name@alpha.com not name@alpha.delta.com. How can the administrator resolve this
issue with the least effort? a. | Create an OU in alpha.delta.com called alpha.com; users created
in this OU can use @alpha.com for their email | b. | Create a new UPN
suffix of alpha.com and use it for the members of alpha.delta.com | c. | Create a new
domain root in the forest called alpha.com. All users in this domain will automatically be able to
use @alpha.com | d. | Create a new forest root called alpha.com. All users in this
domain will automatically be able to use @alpha.com | | |
|
|
|
19.
|
Toronto (toronto.acme.com) and Montreal (montreal.acme.com) are child domains of
acme.com. Toronto has a high speed colour printer that some users in both the domains need to use.
How should the groups be set up so that both groups of users can use it? a. | Place the
printer in a domain local group “colour printer”, assign permissions to “colour
printer” for the printer, create two domain local groups “print users Toronto” and
“print users Montreal” for the printer users, add the printer users from each domain to
their respective “print users” groups and add both “print users Toronto” and
“print users Montreal” to “colour printer”. | b. | Place the
printer in a domain local group “colour printer”, assign permissions to “colour
printer” for the printer, create two global groups “print users Toronto” and
“print users Montreal” for the printer users, add the printer user groups from both Toronto
and Montreal to “colour printer”. | c. | Place the
printer in a universal group “colour printer”, assign permissions to “colour
printer” for the printer, create two domain local groups “print users Toronto” and
“print users Montreal” for the printer users, add the printer users from each domain to
their respective “print users” groups and add both “print users Toronto” and
“print users Montreal” to “colour printer”. | d. | Place the
printer in a global group “colour printer”, assign permissions to “colour
printer” for the printer, create a domain local group “print users” for the printer
users, add the printer users from both Toronto and Montreal to “print users” and add
“print users” to “colour printer”. | | |
|
|
|
20.
|
Where
is the Group Policy information stored that represents Group Policy Objects? a. | The registry and
Group Policy Containers | b. | Group Policy Containers and Group Policy
Templates | c. | Active Directory database | d. | The registry and
Group Policy Templates | | |
|
|
|
21.
|
The
Toronto site has Group Policy settings associated with it. Within the Toronto site, there are two
domains, one of which is the ABC domain and it too has Group Policy settings. Finally, ABC domain has
several OUs including Marketing, which has its own Group Policy settings. Often the Group Policy
settings conflict. In which order is Group Policy settings applied? a. | Marketing, ABC,
Toronto | c. | Marketing,
Toronto, ABC | b. | ABC, Marketing, Toronto | d. | Toronto, ABC, Marketing | | | | |
|
|
|
22.
|
How
do you create an unlinked GPO? a. | Group policy for the domain | c. | Windows 2003 GPO support tool | b. | MMC Group Policy
snap-in | d. | Active Directory
Sites and Domains | | | | |
|
|
|
23.
|
You
create a GPO for your domain but then find that the administrators of some of the OUs are blocking
the GPO. This GPO ensures compliance with company regulations and must be applied. How can you make
sure the GPO is applied throughout the company? a. | Go to the domain and use the no override option for the
GPO | b. | Go to each OU
and disable the block inheritance option | c. | Use the Delegation wizard and revoke the Manage GPO option for
each OU administrator | d. | Call all the OU administrators into your office and tell them
never to do this again | | |
|
|
|
24.
|
The
administrator makes some important changes to the security settings of the GPO that applies to the
domain. Since most users won’t restart their Windows XP workstations until the morning, what
happens to the new settings? a. | They will be applied in 5 minutes unless a user restarts her
machines first. | b. | Using the SECEDIT command, the administrator can force the GPO
to refresh on all user machines. | c. | They will be applied in approximately 90
minutes. | d. | If the administrator changes the GPO mode to synchronous from
asynchronous, the policy will refresh immediately. | | |
|
|
|
25.
|
You
need to install a program that requires advanced hardware resources using a GPO. How can you ensure
that the GPO will be applied only if a computer meets the minimum hardware
requirements? a. | Place the
computers that meet the hardware requirements in their own OU and the GPO to
it. | b. | Use a WMI filter
with the GPO. | c. | Apply the GPO to the computers node in Active
Directory. | d. | Apply a hardware filter with the GPO | | |
|