Which of the following ntdsutil commands cleans up metadata?
metadata defrag
metadata restore
metadata cleanup
metadata repair
Why is backing up the Windows system state necessary?
It's needed to perform a full system restore
It's a precautionary move against failure
It's standard practice to do so
In some commercial third-party software backup programs, it's mandatory.
In interactive mode, what aspect of AD can you check with the ntdsutil integrity command?
low-level database corruption
fragmentation levels
accuracy of entries
completeness of entries
What is the range of password history settings?
0 to 9
0 to 15
0 to 24
0 to 63
What is the primary advantage of using Group Policies in a domain environment?
ease of enforcement
user of compliance
centralized management
ease of creation
How should you assign Password Settings objects (PSOs) to users?
Assign the PSOs directly to individual users
Assign the PSOs to a new group and add the users to the new group
Assign the PSOs to a global security group and add users to the group
Assign the PSOs to various Active Directory groups as needed
By default, how often does Active Directory "garbage collection" occur?
every 45 minutes
every 2 hours
every 8 hours
every 12 hours
What is the proper procedure for removing a domain controller from Active Directory?
Shut down the domain controller and manually remove it from AD.
Use dcdemo to demote the domain controller.
Uninstall Active Directory Domain Services.
Enter the DSRM and delete Active Directory.
To perform an authoritative restore, into what mode must you reboot the domain controller?
Repair
Safe
Command line with networking
DSRM
If a single domain controller's AD database becomes corrupt, which type of restore should you perform on it?
authoritative
nonauthoritative
explicit
full
Why can you not modify snapshots?
They are encrypted.
They are compressed and zipped.
They are read- only.
They are binary files.
What is the default minimum password length in characters?
5
7
8
10
Which aspect of passwords is a key component of their strength?
easy to remember
number of characters
dictionary basis
keyboard complexity
Why primarily are account lockout policies put into place?
privacy
security
policy
regulations
Why should administrator passwords change more often than user passwords?
because administrator passwords are usually simpler than user passwords.
because administrator accounts carry more security sensitivity than users do
because administrators are paranoid about security
because administrator accounts are watched by management in large companies
An Active Directory snapshot is actually what kind of backup?
a shadow copy
a simple file copy
a compressed (zipped) copy
a file copy plus metadata
What is a GUID?
a unique identifier for a snapshot
a special file permission
an Active Directory object ID
a group-user ID in Active Directory
When you do an authoritative restore process, a back-links file is created. What is a back-links file?
a reference to an attribute within another object
a reference to metadata
a pointer to the object's OU
a reference to a distinguished name location
Which utility do you use to defragment Active Directory?
CSVDE
LDIFDE
ntdsutil
defrag
To perform an authoritative restore of an object or subtree, what bit of information do you need to know about the object?
its formal name
its exact location
its OU and proper name
its distinguished name
What utility first appeared in Windows Server 2000 R2 that allows you to undelete Active Directory containers and objects?
the Active Directory Lost and Found folder
the Active Directory Recycle Bin
the Active Directory Undelete utility
Active Directory Snapshots
What is the default setting for password history?
6
16
24
Account policies contain various subsets. Which of the following are legitimate subsets of accounts policies? Check all that apply
Password Policy
Account Lockout Policy
Kerberos Policy
Username Policy
By default, who has read/write capability to the Default Domain Policy?
local administrators
power users
domain users
domain administrators
By default, which of the following represents the maximum amount of time by which a computer's internal clock can be inaccurate yet still be able to use Kerberos authentication?
30 seconds
1 minute
5 minutes
8 minutes
What setting can you give for account lockout duration that requires an administrator to manually unlock the account?
0
99
99,999
Why is a setting of 0 for maximum passwords age not a good idea? Check all that apply.
It means that passwords never expire, which is a major security problem.
It means that your passwords expire every day.
It means that you've disabled password aging.
It means that you've disabled the use of passwords.
What function does the CSVDE tool perform?
It decrypts and encrypts Active Directory information
It exports/imports Active Directory information
It exports/imports data from Event Viewer
It extracts Event Viewer information into CSV files.
Before you can use the Active Directory Recycle Bin, what two actions do you have to perform?
You have to remove the System Recycle Bin
You have to enable the AD Recycle Bin.
You have to set the AD forest to Windows Server 2003 or higher
You have to set the AD forest to Windows Server 2008 R2 or higher.
What is an easy method of creating a strong password?
Use your username and add numbers and special characters
Use your favorite football team's name with numbers and special characters.
Ask a friend for some ideas for good passwords and then add your own number and characters.
Start with a sentence then add numbers and special characters.
What are examples of password policies? Select all that apply.
history
length
complexity
age
The default maximum password age is how long?
12 days
36 days
42 days
86 days
what character length for a password generally accepted as minimum?
four
six
eight
fourteen
After you undelete a user account with the LDP utility, what action do you need to perform?
Remove the old identifier
Re-establish user to domain trust.
Reset the user's password
Restore the user-owned objects from a backup
Why is backup of the Active Directory database so important?
Backup of all data is a good idea.
Backup is a standard practice in large companies.
Backup is needed in case of corruption, deletion, or other failure.
Backup is an insurance policy for data and should be performed regularly.
What does the minimum password age setting control?
how many seconds a user must wait before a password reset
how many minutes a user must wait before a password reset
how many hours a user must wait before a password reset
how many days a user must wait before a password reset
What is the secpol.msc utility used for?
editing group policies
editing local security policies
editing global security policies
editing domain-level policies
Which of the following passwords is considered complex?
M!croS0ft
candybar01
bobj
fred@local
Windows Server 2012 introduces a new time-saving feature when performing tasks such as AD defragmentation. What is that feature?
the DSRM console
the ntdsutil command-line utility
Active Directory Maintenance Mode
Restartable Active Directory Domain Services
