Pregunta 1
Pregunta
Which of the following ntdsutil commands cleans up metadata?
Respuesta
-
metadata defrag
-
metadata restore
-
metadata cleanup
-
metadata repair
Pregunta 2
Pregunta
Why is backing up the Windows system state necessary?
Respuesta
-
It's needed to perform a full system restore
-
It's a precautionary move against failure
-
It's standard practice to do so
-
In some commercial third-party software backup programs, it's mandatory.
Pregunta 3
Pregunta
In interactive mode, what aspect of AD can you check with the ntdsutil integrity command?
Pregunta 4
Pregunta
What is the range of password history settings?
Respuesta
-
0 to 9
-
0 to 15
-
0 to 24
-
0 to 63
Pregunta 5
Pregunta
What is the primary advantage of using Group Policies in a domain environment?
Respuesta
-
ease of enforcement
-
user of compliance
-
centralized management
-
ease of creation
Pregunta 6
Pregunta
How should you assign Password Settings objects (PSOs) to users?
Respuesta
-
Assign the PSOs directly to individual users
-
Assign the PSOs to a new group and add the users to the new group
-
Assign the PSOs to a global security group and add users to the group
-
Assign the PSOs to various Active Directory groups as needed
Pregunta 7
Pregunta
By default, how often does Active Directory "garbage collection" occur?
Respuesta
-
every 45 minutes
-
every 2 hours
-
every 8 hours
-
every 12 hours
Pregunta 8
Pregunta
What is the proper procedure for removing a domain controller from Active Directory?
Respuesta
-
Shut down the domain controller and manually remove it from AD.
-
Use dcdemo to demote the domain controller.
-
Uninstall Active Directory Domain Services.
-
Enter the DSRM and delete Active Directory.
Pregunta 9
Pregunta
To perform an authoritative restore, into what mode must you reboot the domain controller?
Pregunta 10
Pregunta
If a single domain controller's AD database becomes corrupt, which type of restore should you perform on it?
Respuesta
-
authoritative
-
nonauthoritative
-
explicit
-
full
Pregunta 11
Pregunta
Why can you not modify snapshots?
Pregunta 12
Pregunta
What is the default minimum password length in characters?
Pregunta 13
Pregunta
Which aspect of passwords is a key component of their strength?
Respuesta
-
easy to remember
-
number of characters
-
dictionary basis
-
keyboard complexity
Pregunta 14
Pregunta
Why primarily are account lockout policies put into place?
Respuesta
-
privacy
-
security
-
policy
-
regulations
Pregunta 15
Pregunta
Why should administrator passwords change more often than user passwords?
Respuesta
-
because administrator passwords are usually simpler than user passwords.
-
because administrator accounts carry more security sensitivity than users do
-
because administrators are paranoid about security
-
because administrator accounts are watched by management in large companies
Pregunta 16
Pregunta
An Active Directory snapshot is actually what kind of backup?
Pregunta 17
Respuesta
-
a unique identifier for a snapshot
-
a special file permission
-
an Active Directory object ID
-
a group-user ID in Active Directory
Pregunta 18
Pregunta
When you do an authoritative restore process, a back-links file is created. What is a back-links file?
Respuesta
-
a reference to an attribute within another object
-
a reference to metadata
-
a pointer to the object's OU
-
a reference to a distinguished name location
Pregunta 19
Pregunta
Which utility do you use to defragment Active Directory?
Respuesta
-
CSVDE
-
LDIFDE
-
ntdsutil
-
defrag
Pregunta 20
Pregunta
To perform an authoritative restore of an object or subtree, what bit of information do you need to know about the object?
Respuesta
-
its formal name
-
its exact location
-
its OU and proper name
-
its distinguished name
Pregunta 21
Pregunta
What utility first appeared in Windows Server 2000 R2 that allows you to undelete Active Directory containers and objects?
Respuesta
-
the Active Directory Lost and Found folder
-
the Active Directory Recycle Bin
-
the Active Directory Undelete utility
-
Active Directory Snapshots
Pregunta 22
Pregunta
What is the default setting for password history?
Pregunta 23
Pregunta
Account policies contain various subsets. Which of the following are legitimate subsets of accounts policies? Check all that apply
Respuesta
-
Password Policy
-
Account Lockout Policy
-
Kerberos Policy
-
Username Policy
Pregunta 24
Pregunta
By default, who has read/write capability to the Default Domain Policy?
Respuesta
-
local administrators
-
power users
-
domain users
-
domain administrators
Pregunta 25
Pregunta
By default, which of the following represents the maximum amount of time by which a computer's internal clock can be inaccurate yet still be able to use Kerberos authentication?
Respuesta
-
30 seconds
-
1 minute
-
5 minutes
-
8 minutes
Pregunta 26
Pregunta
What setting can you give for account lockout duration that requires an administrator to manually unlock the account?
Pregunta 27
Pregunta
Why is a setting of 0 for maximum passwords age not a good idea? Check all that apply.
Respuesta
-
It means that passwords never expire, which is a major security problem.
-
It means that your passwords expire every day.
-
It means that you've disabled password aging.
-
It means that you've disabled the use of passwords.
Pregunta 28
Pregunta
What function does the CSVDE tool perform?
Respuesta
-
It decrypts and encrypts Active Directory information
-
It exports/imports Active Directory information
-
It exports/imports data from Event Viewer
-
It extracts Event Viewer information into CSV files.
Pregunta 29
Pregunta
Before you can use the Active Directory Recycle Bin, what two actions do you have to perform?
Respuesta
-
You have to remove the System Recycle Bin
-
You have to enable the AD Recycle Bin.
-
You have to set the AD forest to Windows Server 2003 or higher
-
You have to set the AD forest to Windows Server 2008 R2 or higher.
Pregunta 30
Pregunta
What is an easy method of creating a strong password?
Respuesta
-
Use your username and add numbers and special characters
-
Use your favorite football team's name with numbers and special characters.
-
Ask a friend for some ideas for good passwords and then add your own number and characters.
-
Start with a sentence then add numbers and special characters.
Pregunta 31
Pregunta
What are examples of password policies? Select all that apply.
Respuesta
-
history
-
length
-
complexity
-
age
Pregunta 32
Pregunta
The default maximum password age is how long?
Respuesta
-
12 days
-
36 days
-
42 days
-
86 days
Pregunta 33
Pregunta
what character length for a password generally accepted as minimum?
Pregunta 34
Pregunta
After you undelete a user account with the LDP utility, what action do you need to perform?
Respuesta
-
Remove the old identifier
-
Re-establish user to domain trust.
-
Reset the user's password
-
Restore the user-owned objects from a backup
Pregunta 35
Pregunta
Why is backup of the Active Directory database so important?
Respuesta
-
Backup of all data is a good idea.
-
Backup is a standard practice in large companies.
-
Backup is needed in case of corruption, deletion, or other failure.
-
Backup is an insurance policy for data and should be performed regularly.
Pregunta 36
Pregunta
What does the minimum password age setting control?
Respuesta
-
how many seconds a user must wait before a password reset
-
how many minutes a user must wait before a password reset
-
how many hours a user must wait before a password reset
-
how many days a user must wait before a password reset
Pregunta 37
Pregunta
What is the secpol.msc utility used for?
Respuesta
-
editing group policies
-
editing local security policies
-
editing global security policies
-
editing domain-level policies
Pregunta 38
Pregunta
Which of the following passwords is considered complex?
Respuesta
-
M!croS0ft
-
candybar01
-
bobj
-
fred@local
Pregunta 39
Pregunta
Windows Server 2012 introduces a new time-saving feature when performing tasks such as AD defragmentation. What is that feature?
Respuesta
-
the DSRM console
-
the ntdsutil command-line utility
-
Active Directory Maintenance Mode
-
Restartable Active Directory Domain Services