Frage 1
Frage
Which of the following ntdsutil commands cleans up metadata?
Antworten
-
metadata defrag
-
metadata restore
-
metadata cleanup
-
metadata repair
Frage 2
Frage
Why is backing up the Windows system state necessary?
Antworten
-
It's needed to perform a full system restore
-
It's a precautionary move against failure
-
It's standard practice to do so
-
In some commercial third-party software backup programs, it's mandatory.
Frage 3
Frage
In interactive mode, what aspect of AD can you check with the ntdsutil integrity command?
Frage 4
Frage
What is the range of password history settings?
Antworten
-
0 to 9
-
0 to 15
-
0 to 24
-
0 to 63
Frage 5
Frage
What is the primary advantage of using Group Policies in a domain environment?
Antworten
-
ease of enforcement
-
user of compliance
-
centralized management
-
ease of creation
Frage 6
Frage
How should you assign Password Settings objects (PSOs) to users?
Antworten
-
Assign the PSOs directly to individual users
-
Assign the PSOs to a new group and add the users to the new group
-
Assign the PSOs to a global security group and add users to the group
-
Assign the PSOs to various Active Directory groups as needed
Frage 7
Frage
By default, how often does Active Directory "garbage collection" occur?
Antworten
-
every 45 minutes
-
every 2 hours
-
every 8 hours
-
every 12 hours
Frage 8
Frage
What is the proper procedure for removing a domain controller from Active Directory?
Antworten
-
Shut down the domain controller and manually remove it from AD.
-
Use dcdemo to demote the domain controller.
-
Uninstall Active Directory Domain Services.
-
Enter the DSRM and delete Active Directory.
Frage 9
Frage
To perform an authoritative restore, into what mode must you reboot the domain controller?
Frage 10
Frage
If a single domain controller's AD database becomes corrupt, which type of restore should you perform on it?
Antworten
-
authoritative
-
nonauthoritative
-
explicit
-
full
Frage 11
Frage
Why can you not modify snapshots?
Frage 12
Frage
What is the default minimum password length in characters?
Frage 13
Frage
Which aspect of passwords is a key component of their strength?
Antworten
-
easy to remember
-
number of characters
-
dictionary basis
-
keyboard complexity
Frage 14
Frage
Why primarily are account lockout policies put into place?
Antworten
-
privacy
-
security
-
policy
-
regulations
Frage 15
Frage
Why should administrator passwords change more often than user passwords?
Antworten
-
because administrator passwords are usually simpler than user passwords.
-
because administrator accounts carry more security sensitivity than users do
-
because administrators are paranoid about security
-
because administrator accounts are watched by management in large companies
Frage 16
Frage
An Active Directory snapshot is actually what kind of backup?
Frage 17
Antworten
-
a unique identifier for a snapshot
-
a special file permission
-
an Active Directory object ID
-
a group-user ID in Active Directory
Frage 18
Frage
When you do an authoritative restore process, a back-links file is created. What is a back-links file?
Antworten
-
a reference to an attribute within another object
-
a reference to metadata
-
a pointer to the object's OU
-
a reference to a distinguished name location
Frage 19
Frage
Which utility do you use to defragment Active Directory?
Antworten
-
CSVDE
-
LDIFDE
-
ntdsutil
-
defrag
Frage 20
Frage
To perform an authoritative restore of an object or subtree, what bit of information do you need to know about the object?
Antworten
-
its formal name
-
its exact location
-
its OU and proper name
-
its distinguished name
Frage 21
Frage
What utility first appeared in Windows Server 2000 R2 that allows you to undelete Active Directory containers and objects?
Antworten
-
the Active Directory Lost and Found folder
-
the Active Directory Recycle Bin
-
the Active Directory Undelete utility
-
Active Directory Snapshots
Frage 22
Frage
What is the default setting for password history?
Frage 23
Frage
Account policies contain various subsets. Which of the following are legitimate subsets of accounts policies? Check all that apply
Antworten
-
Password Policy
-
Account Lockout Policy
-
Kerberos Policy
-
Username Policy
Frage 24
Frage
By default, who has read/write capability to the Default Domain Policy?
Antworten
-
local administrators
-
power users
-
domain users
-
domain administrators
Frage 25
Frage
By default, which of the following represents the maximum amount of time by which a computer's internal clock can be inaccurate yet still be able to use Kerberos authentication?
Antworten
-
30 seconds
-
1 minute
-
5 minutes
-
8 minutes
Frage 26
Frage
What setting can you give for account lockout duration that requires an administrator to manually unlock the account?
Frage 27
Frage
Why is a setting of 0 for maximum passwords age not a good idea? Check all that apply.
Antworten
-
It means that passwords never expire, which is a major security problem.
-
It means that your passwords expire every day.
-
It means that you've disabled password aging.
-
It means that you've disabled the use of passwords.
Frage 28
Frage
What function does the CSVDE tool perform?
Antworten
-
It decrypts and encrypts Active Directory information
-
It exports/imports Active Directory information
-
It exports/imports data from Event Viewer
-
It extracts Event Viewer information into CSV files.
Frage 29
Frage
Before you can use the Active Directory Recycle Bin, what two actions do you have to perform?
Antworten
-
You have to remove the System Recycle Bin
-
You have to enable the AD Recycle Bin.
-
You have to set the AD forest to Windows Server 2003 or higher
-
You have to set the AD forest to Windows Server 2008 R2 or higher.
Frage 30
Frage
What is an easy method of creating a strong password?
Antworten
-
Use your username and add numbers and special characters
-
Use your favorite football team's name with numbers and special characters.
-
Ask a friend for some ideas for good passwords and then add your own number and characters.
-
Start with a sentence then add numbers and special characters.
Frage 31
Frage
What are examples of password policies? Select all that apply.
Antworten
-
history
-
length
-
complexity
-
age
Frage 32
Frage
The default maximum password age is how long?
Antworten
-
12 days
-
36 days
-
42 days
-
86 days
Frage 33
Frage
what character length for a password generally accepted as minimum?
Frage 34
Frage
After you undelete a user account with the LDP utility, what action do you need to perform?
Antworten
-
Remove the old identifier
-
Re-establish user to domain trust.
-
Reset the user's password
-
Restore the user-owned objects from a backup
Frage 35
Frage
Why is backup of the Active Directory database so important?
Antworten
-
Backup of all data is a good idea.
-
Backup is a standard practice in large companies.
-
Backup is needed in case of corruption, deletion, or other failure.
-
Backup is an insurance policy for data and should be performed regularly.
Frage 36
Frage
What does the minimum password age setting control?
Antworten
-
how many seconds a user must wait before a password reset
-
how many minutes a user must wait before a password reset
-
how many hours a user must wait before a password reset
-
how many days a user must wait before a password reset
Frage 37
Frage
What is the secpol.msc utility used for?
Antworten
-
editing group policies
-
editing local security policies
-
editing global security policies
-
editing domain-level policies
Frage 38
Frage
Which of the following passwords is considered complex?
Antworten
-
M!croS0ft
-
candybar01
-
bobj
-
fred@local
Frage 39
Frage
Windows Server 2012 introduces a new time-saving feature when performing tasks such as AD defragmentation. What is that feature?
Antworten
-
the DSRM console
-
the ntdsutil command-line utility
-
Active Directory Maintenance Mode
-
Restartable Active Directory Domain Services