Active Directory - Quiz - WindowsTechno

#1. Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2. The Audit account management policy setting and Audit directory services access setting are enabled for the entire domain. You need to ensure that changes made to Active Directory objects can be logged. The logged changes must include the old and new values of any attributes. What should you do?

Run auditpol.exe and then enable the Audit directory service access setting in the Default Domain policy.

Run auditpol.exe and then configure the Security settings of the Domain Controllers OU.

Enable the Audit account management policy in the Default Domain Controller Policy.

From the Default Domain Controllers policy, enable the Audit directory service access setting and enable directory service changes.

#2. You have two servers named Server1 and Server2. Both servers run Windows Server 2008 R2. Server1 is configured as an enterprise root certification authority (CA). You install the Online Responder role service on Server2. You need to configure Server1 to support the Online Responder. What should you do?

Import the enterprise root CA certificate.

Configure the Certificate Revocation List Distribution Point extension.

Configure the Authority Information Access (AIA) extension.

Add the Server2 computer account to the CertPublishers group.

#3. Your company has file servers located in an organizational unit named Payroll. The file servers contain payroll files located in a folder named Payroll. You create a GPO. You need to track which employees access the Payroll files on the file servers. What should you do?

Enable the Audit process tracking option. Link the GPO to the Domain Controllers organizational unit. On the file servers, configure Auditing for the Authenticated Users group in the Payroll folder.

Enable the Audit process tracking option. Link the GPO to the Payroll organizational unit. On the file servers, configure Auditing for the Everyone group in the Payroll folder.

Enable the Audit object access option. Link the GPO to the domain. On the domain controllers, configure Auditing for the Authenticated Users group in the Payroll folder.

Enable the Audit object access option. Link the GPO to the Payroll organizational unit. On the file servers, configure Auditing for the Everyone group in the Payroll folder.

#4. Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2 and are configured as DNS servers. A domain controller named DC1 has a standard primary zone for contoso.com. A domain controller named DC2 has a standard secondary zone for abc.com. You need to ensure that the replication of the abc.com zone is encrypted. You must not lose any zone data. What should you do?

Convert the primary zone into an Active Directory-integrated zone. Delete the secondary zone.

Convert the primary zone into an Active Directory-integrated stub zone. Delete the secondary zone.

On both servers, modify the interface that the DNS server listens on.

Configure the zone transfer settings of the standard primary zone. Modify the Master Servers lists on the secondary zone.

#5. Your company uses a Windows 2008 Enterprise certificate authority (CA) to issue certificates. You need to implement key archival. What should you do?

Apply the Hisecdc security template to the domain controllers.

Archive the private key on the server.

Configure the certificate for automatic enrollment for the computers that store encrypted files.

Install an Enterprise Subordinate CA and issue a user certificate to users of the encrypted files.

#6. An Active Directory database is installed on the C volume of a domain controller. You need to move the Active Directory database to a new volume. What should you do?

Copy the ntds.dit file to the new volume by using the ROBOCOPY command.

Move the ntds.dit file to the new volume by running the Move-item command in Microsoft Windows PowerShell.

Move the ntds.dit file to the new volume by using Windows Explorer.

Move the ntds.dit file to the new volume by using the Files option in the Ntdsutil utility.

#7. Abc, Ltd. has an Active Directory domain named ad.abc.com. Windowstechno, Inc. has an Active Directory domain named intranet.Windowstechno.com. Windowstechno’s security policy prohibits the transfer of internal DNS zone data outside the Windowstechno network. You need to ensure that the Abc users are able to resolve names from the intranet.Windowstechno.com domain. What should you do?

Create a new stub zone for the intranet.Windowstechno.com domain.

Configure conditional forwarding for the intranet.Windowstechno.com domain.

Create a standard secondary zone for the intranet.Windowstechno.com domain.

Create an Active DirectoryCintegrated zone for the intranet.Windowstechno.com domain.

#8. Your company has an Active Directory domain. All servers run Windows Server 2008 R2. Your company uses an Enterprise Root certificate authority (CA). You need to ensure that revoked certificate information is highly available. What should you do?

Implement an Online Certificate Status Protocol (OCSP) responder by using Network Load Balancing.

Create a new Group Policy Object (GPO) that allows users to trust peer certificates. Link the GPO to the domain.

Implement an Online Certificate Status Protocol (OCSP) responder by using an Internet Security and Acceleration Server array.

Publish the trusted certificate authorities list to the domain by using a Group Policy Object (GPO).

#9. Your company has a single Active Directory domain named intranet.adatum.com. The domain controllers run Windows Server 2008 and the DNS server role. All computers, including non-domain members, dynamically register their DNS records. You need to configure the intranet.adatum.com zone to allow only domain members to dynamically register DNS records. What should you do?

Enable zone transfers to Name Servers.

Set dynamic updates to Secure Only.

Remove the Authenticated Users group.

Deny the Everyone group the Create All Child Objects permission.

#10. Your company has an Active Directory domain that runs Windows Server 2008 R2. The Sales OU contains an OU for Computers, an OU for Groups, and an OU for Users. You perform nightly backups. An administrator deletes the Groups OU. You need to restore the Groups OU without affecting users and computers in the Sales OU. What should you do?

Perform an authoritative restore of the Sales OU.

Perform an authoritative restore of the Groups OU.

Perform a non-authoritative restore of the Sales OU.

Perform a non-authoritative restore of the Groups OU.

Active Directory – Quiz

MicroSoft Active Directory Test

Results

Congratulations On Passing Your Test

Sorry, you have not cleared this test

#3. Your company has file servers located in an organizational unit named Payroll. The file servers contain payroll files located in a folder named Payroll. You create a GPO. You need to track which employees access the Payroll files on the file servers. What should you do?

#5. Your company uses a Windows 2008 Enterprise certificate authority (CA) to issue certificates. You need to implement key archival. What should you do?

#6. An Active Directory database is installed on the C volume of a domain controller. You need to move the Active Directory database to a new volume. What should you do?

#8. Your company has an Active Directory domain. All servers run Windows Server 2008 R2. Your company uses an Enterprise Root certificate authority (CA). You need to ensure that revoked certificate information is highly available. What should you do?

Vipan Kumar

MicroSoft Active Directory Test

Results

Congratulations On Passing Your Test

Sorry, you have not cleared this test

#3. Your company has file servers located in an organizational unit named Payroll. The file servers contain payroll files located in a folder named Payroll. You create a GPO. You need to track which employees access the Payroll files on the file servers. What should you do?

#5. Your company uses a Windows 2008 Enterprise certificate authority (CA) to issue certificates. You need to implement key archival. What should you do?

#6. An Active Directory database is installed on the C volume of a domain controller. You need to move the Active Directory database to a new volume. What should you do?

#8. Your company has an Active Directory domain. All servers run Windows Server 2008 R2. Your company uses an Enterprise Root certificate authority (CA). You need to ensure that revoked certificate information is highly available. What should you do?

Vipan Kumar

Sysvol not accessible?

Group Policy Health Check

Related Articles

How can I check if my environment has multiple domains and domain controllers?

What are some common Sysvol replication issues and how can I troubleshoot them?

Enabling Outbound Replication

sid history

What is Global Catalog

Active Directory Authentication updates