Chapter 001 Windows Server 2008 R2 70-640

  1. What allows businesses to define, manage, access, and secure network resources including files, printers, people, and applications?
    a) network service
    b) directory service
    c) Directory Infrastructure
    d) NT directory
    • Ans: b
    • Difficulty: Easy
    • Section Ref: Introducing Active Directory Domain Service
    • Feedback: A directory service allows businesses to define, manage, access, and secure network resources including files, printers, people, and applications. Without the efficiency of a directory service, businesses would have difficulty keeping up with demands for fast-paced data exchange.
  2. A Windows Server 2008 computer that has been configured with the Active Directory DS role is referred to as a __________.
    a) domain controller
    b) domain manager
    c) global catalog
    d) DNS server
    • Ans: a
    • Difficulty: Easy
    • Section Ref: Introducing Active Directory Domain Service
    • Feedback: A Windows Server 2008 computer that has been configured with the Active Directory DS role is referred to as a domain controller (DC). A domain controller is a server that stores the Active Directory database and authenticates users with the network during logon.
  3. The process of keeping each domain controller in synch with changes that have been made elsewhere on the network is called __________.
    a) copying
    b) osmosis
    c) transferring
    d) replication
    • Ans: d
    • Difficulty: Easy
    • Section Ref: Introducing Active Directory Domain Service
    • Feedback: The process of keeping each domain controller in synch with changes that have been made elsewhere on the network is called replication.
  4. Which of the following is not a benefit of Active Directory Domain Services?
    a) single logon for access to global resources
    b) fault tolerance and redundancy
    c) personalized desktops
    d) simplified resource location
    • Ans: c
    • Difficulty: Medium
    • Section Ref: Introducing Active Directory Domain Service
    • Feedback: The major benefits of the high-powered Active Directory Domain Services include centralized resource and security administration, single logon for access to global resources, fault tolerance and redundancy, and simplified resource location.
  5. Interoperability with prior versions of Microsoft Windows is available in Windows Server 2008 through the use of __________.
    a) domain controllers
    b) functional levels
    c) global catalogs
    d) DNS servers
    • Ans: b
    • Difficulty: Easy
    • Section Ref: Introducing Active Directory Domain Service
    • Feedback: Interoperability with prior versions of Microsoft Windows is available in Windows Server 2008 through the use of functional levels.
  6. The __________ Domain Controller contains a copy of the ntds.dit file that cannot be modified and does not replicate its changes to other domain controllers within Active Directory.
    a) Secondary
    b) Primary
    c) Read-Only
    d)Mandatory
    • Ans: c
    • Difficulty: Medium
    • Section Ref: Introducing Active Directory Domain Service
    • Feedback: Windows Server 2008 introduces the Read-Only Domain Controller (RODC), a domain controller that contains a copy of the ntds.dit file that cannot be modified and that does not replicate its changes to other domain controllers within Active Directory.
  7. The largest container object within Active Directory is a(n) __________.
    a) organization unit
    b) domain
    c) tree
    d) forest
    • Ans: d
    • Difficulty: Easy
    • Section Ref: Introducing Active Directory Domain Service
    • Feedback: The largest container object within Active Directory is the forest. The forest container defines the fundamental security boundary within Active Directory, which means that a user can access resources across an entire Active Directory forest using a single logon/password combination.
  8. What contains the rules and definitions that are used for creating and modifying object classes and attributes within Active Directory?a) Configuration NC
    b) Schema NC
    c) Domain NC
    d) DC NC
    • Ans: b
    • Difficulty: Hard
    • Section Ref: Introducing Active Directory Domain Service
    • Feedback: The schema partition, or Schema NC, contains the rules and definitions that are used for creating and modifying object classes and attributes within Active Directory.
  9. What master database contains definitions of all objects in the Active Directory?
    a) schema
    b) global catalog
    c) DNS
    d) domain controller
    • Ans: a
    • Difficulty: EasySection Ref: Introducing Active Directory Domain Service
    • Feedback: The schema is a master database that contains definitions of all objects in the Active Directory—in a way, it defines what Active Directory is.
  10. A __________ is defined as one or more IP subnets that are connected by fast links.
    a) domain
    b) network
    c) site
    d) forest
    • Ans: c
    • Difficulty: Easy
    • Section Ref: Introducing Active Directory Domain Service
    • Feedback: A site is defined as one or more IP subnets that are connected by fast links. In most circumstances, all computers that are connected via a single LAN will constitute a single site. Within Active Directory, sites are used to optimize the replication of Active Directory information across small or large geographic areas.
  11. What protocol has become an industry standard that enables data exchange between directory services and applications?
    a) NTDS
    b) LDAP
    c) NDIS
    d) AD
    • Ans: b
    • Difficulty: Easy
    • Section Ref: Introducing Active Directory Domain ServiceFeedback: Active Directory’s scalability and integration capabilities result from its use of industry standards for naming formats and directory functions, specifically the Lightweight Directory Access Protocol (LDAP). Since the introduction of LDAP, this protocol has become an industry standard that enables data exchange between directory services and applications.
  12. A __________ name references an object in the Active Directory directory structure by using its entire hierarchical path, starting with the object itself and including all parent objects up to the root of the domain
    a) common
    b) DNS
    c) schema
    d) distinguished
    • Ans: d
    • Difficulty: Medium
    • Section Ref: Introducing Active Directory Domain Service
    • Feedback: LDAP refers to an object using its distinguished name (DN), which references an object in the Active Directory directory structure using its entire hierarchical path, starting with the object itself and including all parent objects up to the root of the domain
  13. What locator records within DNS allow clients to locate an Active Directory domain controller or global catalog?
    a) A records
    b) MX records
    c) SRV records
    d) SOA records
    • Ans: c
    • Difficulty: Hard
    • Section Ref: Introducing Active Directory Domain Service
    • Feedback: SRV records are the locator records within DNS that allow clients to locate an Active Directory domain controller or global catalog.
  14. What locator records within DNS allow clients to locate an Active Directory domain controller or global catalog?
    a) A records
    b) MX records
    c) SRV records
    d) SOA records
    • Ans: c
    • Difficulty: Hard
    • Section Ref: Introducing Active Directory Domain Service
    • Feedback: SRV records are the locator records within DNS that allow clients to locate an Active Directory domain controller or global catalog.
  15. __________ is the highest available forest functional level.
    a) Windows 2000
    b) Windows Server 2003
    c) Windows Server 2008
    d) Windows 2009
    • Ans: c
    • Difficulty: Easy
    • Section Ref: Introducing Active Directory Domain Service
    • Feedback: The Windows Server 2008 functional level allows no backward compatibility. Only Windows Server 2008 domain controllers are supported.
  16. To raise the functional level of a forest, you must be logged on as a member of the __________ group.
    a) Domain Admins
    b) Enterprise Admins
    c) Global Admins
    d) Universal Admins
    • Ans: b
    • Difficulty: Hard
    • Section Ref: Introducing Active Directory Domain Service
    • Feedback: To raise the domain functional level, you need to be a member of the Domain Admins group for the domain in question.
  17. Active Directory uses __________ relationships to allow access between multiple domains and/or forests, either within a single forest or across multiple enterprise networks.
    a) trust
    b) domain
    c) forest
    d) global
    • Ans: a
    • Difficulty: Easy
    • Section Ref: Introducing Active Directory Domain Service
    • Feedback: Active Directory uses trust relationships to allow access between multiple domains and/or forests, either within a single forest or across multiple enterprise networks. As the name implies, a trust relationship allows administrators from a particular domain to grant access to their domain’s resources to users in other domains.
  18. What type of trust is new to Windows Server 2008 and is only available when the forest functionality is set to Windows Server 2008?
    a) parent-child trust
    b) two-way transitive trust
    c) cross-forest trust
    d) simple trust
    • Ans: c
    • Difficulty: Hard
    • Section Ref: Introducing Active Directory Domain Service
    • Feedback: Cross-forest trusts are new to Windows Server 2008, and they are only available when the forest functionality is set to Windows Server 2008. They must be manually created and maintained.
  19. When a child domain is created, it automatically receives a __________ trust with its parent domain.
    a) parent-child
    b) two-way transitive
    c) cross-forest
    d) simple
    • Ans: b
    • Difficulty: Hard
    • Section Ref: Introducing Active Directory Domain Service
    • Feedback: Two-way transitive trusts are automatically generated within the Active Directory domain structure. Parent and child domains form the trust path by which all domains in the forest can traverse to locate resources.
  20. If the domains within a forest are separated by slow WAN links and the tree-walking process takes an exceedingly long time to allow user authentication across domains, you can configure a __________ trust.
    a) two-way transitive
    b) cross-forest
    c) shortcut
    d) parent-child
    • Ans: c
    • Difficulty: Hard
    • Section Ref: Introducing Active Directory Domain Service
    • Feedback: If the domains within a forest are separated by slow WAN links and this tree-walking process takes an exceedingly long time to allow user authentication across domains, you can configure a shortcut trust along a commonly used “trust path.”
  21. Inbound replication is when a domain controller transmits replication information to other domain controllers on the network.
    • Ans: False
    • Difficulty: Medium
    • Section Ref: Introducing Active Directory Domain Service
  22. Interoperability with prior versions of Microsoft Windows is available in Windows Server 2008 through the use of functional levels.
    • Ans: True
    • Difficulty: Easy
    • Section Ref: Introducing Active Directory Domain Service
  23. Administration of an OU also can be delegated to a departmental supervisor or manager, and thus can allow that person to manage day-to-day resource access or more mundane tasks, such as resetting passwords. This is referred to as assignment of control.
    • Ans: False
    • Difficulty: Easy
    • Section Ref: Introducing Active Directory Domain Service
  24. Active Directory relies on DNS to provide a locator service for clients on the network.
    • Ans: True
    • Difficulty: Easy
    • Section Ref: Introducing Active Directory Domain Service
  25. Only the primary domain controller of the entire forest must be running an operating system supported by the targeted forest functional level.
    • Ans: False
    • Difficulty: Medium
    • Section Ref: Introducing Active Directory Domain Service
  26. A Windows Server 2008 computer that has been configured with the Active Directory DS role is referred to as a domain __________.
    • Ans: controller
    • Difficulty: Easy
    • Section Ref: Introducing Active Directory Domain Service
  27. Each domain controller actively participates in storing, modifying, and maintaining the Active Directory database information that is stored on each domain controller in a file called __________.
    • Ans: ntds.dit
    • Difficulty: Hard
    • Section Ref: Introducing Active Directory Domain Service
  28. Interoperability with prior versions of Microsoft Windows is available in Windows Server 2008 through the use of __________ levels.
    • Ans: functional
    • Difficulty: Easy
    • Section Ref: Introducing Active Directory Domain Service
  29. The __________ is a master database that contains definitions of all objects in the Active Directory.
    • Ans: schema
    • Difficulty: Medium
    • Section Ref: Introducing Active Directory Domain Service
  30. An internal Active Directory process known as the __________ consistency checker automatically creates and maintains the replication topology
    • Ans: knowledge
    • Difficulty: Hard
    • Section Ref: Introducing Active Directory Domain Service
  31. LDAP refers to an object by using its __________ name, which references an object in the Active Directory directory structure using its entire hierarchical path, starting with the object itself and including all parent objects up to the root of the domain.
    • Ans: distinguished
    • Difficulty: Medium
    • Section Ref: Introducing Active Directory Domain Service
  32. __________ is a distributed name resolution service that provides name resolution for an Active Directory domain.
    • Ans: DNS, Domain Name System
    • Difficulty: Easy
    • Section Ref: Introducing Active Directory Domain Service
  33. The Windows 2000 __________ functional level allows backward compatibility with Microsoft Windows 2000. It also allows Windows 2000, Windows Server 2003, and Windows Server 2008 domain controllers.
    • Ans: Native
    • Difficulty: Easy
    • Section Ref: Introducing Active Directory Domain Service
  34. __________ is a file share that is created on every Active Directory domain controller, the contents of which are replicated to every domain controller in the domain.
    • Ans: SYSVOL
    • Difficulty: Hard
    • Section Ref: Introducing Active Directory Domain Service
  35. Shortcut trusts are __________, which means that they only apply to the two domains that have been specifically configured within the shortcut trust.
    • Ans: nontransitive
    • Difficulty: Hard
    • Section Ref: Introducing Active Directory Domain Service
  36. What domain controller contains a copy of the ntds.dit file that cannot be modified and that does not replicate its changes to other domain controllers within Active Directory?
    • Ans: Read-Only Domain Controller
    • Difficulty: EasySection Ref: Introducing Active Directory Domain Service
  37. What is another name for the multiple partitions into which Active Directory divides information?
    • Ans: naming contexts
    • Difficulty: Medium
    • Section Ref: Introducing Active Directory Domain Service
  38. What logical grouping of network resources and devices can contain one or more domains configured in a parent–child relationship?
    • Ans: domain tree
    • Difficulty: Easy
    • Section Ref: Introducing Active Directory Domain Service
  39. What is a 128-bit hexadecimal number that is assigned to every object in the Active Directory forest upon its creation?
    • Ans: globally unique identifier, GUID
    • Difficulty: MediumSection Ref: Introducing Active Directory Domain Service
  40. What is the name of the unique number that all devices on an IP network use to identify themselves and their location on the network?
    • Ans: IP address
    • Difficulty: Easy
    • Section Ref: Introducing Active Directory Domain Service
  41. What locator records within DNS allow clients to locate an Active Directory domain controller or global catalog?
    • Ans: SRV records
    • Difficulty: Medium
    • Section Ref: Introducing Active Directory Domain Service
  42. What allows a user to retain access to SIDs when an object is migrated from one domain to another?
    • Ans: SIDHistory
    • Difficulty: Hard
    • Section Ref: Introducing Active Directory Domain Service
  43. What trusts are automatically generated within the Active Directory domain structure?
    • Ans: two-way transitive
    • Difficulty: Hard
    • Section Ref: Introducing Active Directory Domain Service
  44. What is Active Directory?
    • Ans: Active Directory is a database of objects that is used to organize resources according to a logical plan. These objects include containers, such as domains and OUs, in addition to resources such as users, computers, and printers.
    • Difficulty: Easy
    • Section Ref: Introducing Active Directory Domain Service
  45. What is the difference between outbound and inbound replication?
    • Ans: When a domain controller transmits replication information to other domain controllers on the network, this is called outbound replication. Conversely, when a domain controller receives updates to the Active Directory database from other domain controllers on the network, this is called inbound replication.
    • Difficulty: Medium
    • Section Ref: Introducing Active Directory Domain Service
  46. What is a Read-Only Domain Controller? What type of deployment is it designed for?
    • Ans: It is a domain controller that contains a copy of the ntds.dit file that cannot be modified and that does not replicate its changes to other domain controllers within Active Directory. Microsoft introduced this type of domain controller as a way to increase security in branch-office deployments because many companies find it necessary to deploy domain controllers in far-removed locations that are not secured as well as a centralized data center.
    • Difficulty: Medium
    • Section Ref: Introducing Active Directory Domain Service
  47. What are the four types of Active Directory container objects?
    • Ans: forests, domain trees, domains, OUs
    • Difficulty: Easy
    • Section Ref: Introducing Active Directory Domain Service
  48. What are the two components of the Active Directory schema?
    • Ans: object classes and attributes
    • Difficulty: Medium
    • Section Ref: Introducing Active Directory Domain Service
  49. What are SRV records used for in conjunction with DNS and Active Directory?
    • Ans: SRV records are the locator records within DNS that allow clients to locate an Active Directory domain controller or global catalog. Without the ability to resolve SRV records, clients will be unable to authenticate against Active Directory.
    • Difficulty: Medium
    • Section Ref: Introducing Active Directory Domain Service
  50. What is the function of a trust relationship in an Active Directory domain?
    • Ans: A trust relationship allows administrators from a particular domain to grant access to their domain’s resources to users in other domains.
    • Difficulty: Hard
    • Section Ref: Introducing Active Directory Domain Service
Author
pacheco2001usa
ID
215463
Card Set
Chapter 001 Windows Server 2008 R2 70-640
Description
Chapter 001 70-640 Overview of Active Directory Domain Services Windows Server 2008 R2
Updated