Quiz 15 & 16

Beschreibung

70-411 Final College Exam
Michael Marcus
Quiz von Michael Marcus, aktualisiert more than 1 year ago
Michael Marcus
Erstellt von Michael Marcus vor fast 9 Jahre
514
1

Zusammenfassung der Ressource

Frage 1

Frage
Where are you most likely to see a Read-Only Domain Controller (RODC)?
Antworten
  • in a small network instead of in an enterprise
  • in an enterprise network
  • in a remote site
  • in the place of a standard domain controller

Frage 2

Frage
Which of the following is the format for a virtual account used with Windows Server 2008 R2, Windows Server 2012, and Windows Server 2012 R2?
Antworten
  • domainname\servicename
  • computername\servicename
  • NT Service\servicename
  • NT Service\servicename$

Frage 3

Frage
NTLM uses a challenge-response mechanism for authentication without doing what?
Antworten
  • revealing the client's operating system to the server
  • revealing the protocol to the server
  • sending a password to the server
  • sending an encrypt/decrypt message to the server

Frage 4

Frage
Which three components make up a service principal name (SPN)
Antworten
  • service name, IP address, and port number
  • service name, URL and host name
  • service name, host name, and IP address
  • service class, host name, and port number

Frage 5

Frage
Before you can create an MSA object type, you must create what?
Antworten
  • a key services MSA group
  • a key services MSA distributed domain account
  • a key distribution services root key
  • a key distribution services Master MSA

Frage 6

Frage
What are the two restrictions for adding SPNs to an account?
Antworten
  • Domain Administrator privileges
  • full control permissions for the folder
  • local administrator privileges
  • the editor runs from the domain controller

Frage 7

Frage
Although the changes are easy to make, why is changing the AD schema such a big deal
Antworten
  • The changes replicate to all domain controllers.
  • The changes could corrupt the database.
  • Doing so affects all objects for that object type.
  • Doing so requires controlled changes.

Frage 8

Frage
Where in the forest is a global catalog automatically created?
Antworten
  • the PDC Emullator
  • the most powerful system
  • the first domain controller
  • the schema master

Frage 9

Frage
You do not place the infrastructure master on a global catalog server unless what situation exists?
Antworten
  • You have a single domain
  • You have Windows NT 4.0 systems to support
  • You have multiple schemas
  • Your AD DS is Windows 2008 or higher

Frage 10

Frage
Beginning with which server version can you safely deploy domain controllers in a virtual machine?
Antworten
  • Windows Server 2003
  • Windows Server 2008
  • Windows Server 2008 R2
  • Windows Server 2012

Frage 11

Frage
Which of the following commands issued at the fsmo maintenance prompt would successfully seize the role of an Operations Master Holder? Select all that apply
Antworten
  • seize schema master
  • seize global master
  • seize PDC
  • seize domain control

Frage 12

Frage
Identify another utility that you can use to add SPNs to an account
Antworten
  • dnscmd
  • spnedit
  • setspn
  • netsh

Frage 13

Frage
What happens if a client submits a service ticket request for an SPN that does not exist in the identity store?
Antworten
  • An event is written to the Kerberos server's event log.
  • The client receives an access denied error
  • The Kerberos server receives an access denied error
  • The Kerberos ticket for that service is destroyed.

Frage 14

Frage
Kerberos security and authentication are based on what type of technology?
Antworten
  • secure transmission
  • secret key
  • challenge-response
  • legacy code

Frage 15

Frage
What is the default maximum allowable time lapse between domain controllers and client systems for Kerberos to work correctly?
Antworten
  • 1 minute
  • 5 minutes
  • 15 minutes
  • 45 minutes

Frage 16

Frage
When creating accounts for separating systems, processes, and services, you should always configure them with what two things in mind?
Antworten
  • using strong passwords
  • using cryptic user names
  • granting the least rights possible
  • using built-in accounts

Frage 17

Frage
What is the name by which a client uniquely identifies an instance of a service?
Antworten
  • service instance name
  • service account name
  • service provider name
  • service principal name

Frage 18

Frage
What is the default authentication protocol for contemporary domain controllers
Antworten
  • NTLM
  • PAP
  • CHAP
  • Kerberos

Frage 19

Frage
Which version of Windows Server introduced incremental universal group membership replication?
Antworten
  • Windows Server 2000
  • Windows Server 2003
  • Windows Server 2008
  • Windows Server 2012

Frage 20

Frage
What are the three types of groups in a domain?
Antworten
  • domain trust groups, domain schema groups, and universal groups
  • domain local groups, global groups, and universal groups
  • global groups, domain trust groups and schema groups
  • universal groups, global catalog groups and schema groups.

Frage 21

Frage
When you add attributes to an Active Directory object, what part of the domain database are you actually changing?
Antworten
  • FSMO
  • schema
  • directory structure
  • organizational units

Frage 22

Frage
The domain controllers are the computers that store and run the:
Antworten
  • user database
  • services database
  • Managed Service Accounts database
  • Active Directory database

Frage 23

Frage
Which Active Directory object is defined as a specialized domain controller that performs certain tasks so that multi-master domain controllers can operate and synchronize properly?
Antworten
  • Schema Master
  • Forest
  • RODC
  • Operations Master

Frage 24

Frage
What service right does an MSA account automatically receive upon creation?
Antworten
  • log on interactively
  • log on as a service
  • domain administrator
  • domain power user

Frage 25

Frage
Name two benefits to using Managed Service Accounts (MSAs).
Antworten
  • Microsoft technology
  • automatic password management
  • simplified SPN management
  • simplified account troubleshooting

Frage 26

Frage
What does the acronym NTLM stand for?
Antworten
  • NT LInk Messenger
  • NT Link Manager
  • NT LAN Manager
  • NT LAN Messenger

Frage 27

Frage
Which command-line command do you use to allow Windows Server 2003 domain controllers to replicate to RODCs?
Antworten
  • netdom /RODCPrep
  • netsh /RODCPrep
  • ntdsutil /RODCPrep
  • ADPrep /RODCPrep

Frage 28

Frage
Which tool can you use to add SPNs to an account?
Antworten
  • Notepad
  • LDAP
  • Microsoft Word
  • ADSI Edit

Frage 29

Frage
How many global catalogs are recommended for every organization?
Antworten
  • at least one
  • at least two
  • at least three
  • no fewer than four

Frage 30

Frage
How many PDC Emulators are required, if needed, in a domain?
Antworten
  • one
  • two
  • three
  • four

Frage 31

Frage
By default, which service accounts will the Windows PowerShell cmdlets manage?
Antworten
  • standalone MSAs
  • standard local services accounts
  • group MSAs
  • domain user accounts designated as service accounts

Frage 32

Frage
What type of account is an account under which an operating system, process, or service runs?
Antworten
  • user
  • system
  • service
  • network

Frage 33

Frage
The global catalog stores a partial copy of all objects in the forest. What are the reasons for keeping that partial copy? Select all that apply.
Antworten
  • logon
  • object searches
  • universal group membership
  • schema integrity

Frage 34

Frage
Which type of system must you connect to and use to make changes to Active Directory?
Antworten
  • RODC
  • forest master
  • writable domain controller
  • domain tree

Frage 35

Frage
What utility must you run on a cloned system to ensure that the clone receives its own SID?
Antworten
  • adprep/renew
  • sysprep
  • dcpromo
  • ntconfig
Zusammenfassung anzeigen Zusammenfassung ausblenden

ähnlicher Inhalt

Components of An Operating System - Jason Madappattu
Jason EM
Quiz 11 & 12
Michael Marcus
Quiz 19-20
Michael Marcus
Quiz 21-22
Michael Marcus
Quiz 5 & 6
Michael Marcus
70-410 - MCSA: Windows Server 2012 - Installing and Configuring - Exam 1
Mike M
70-410 - MCSA: Windows Server 2012 - Installing and Configuring - Exam 2
Mike M
70-410 - MCSA: Windows Server 2012 - Installing and Configuring - Exam 3
Mike M
Quiz 17 & 18
Michael Marcus
Quiz 13 & 14
Michael Marcus
WINDOWS
nellyguaman30