Active Directory L3 Interview Questions

Hello All,

Hope this post finds you in good health and spirit.

I’m sharing a list of Active Directory interview questions to help you prepare for the AD L3 interview.I’m working on publishing the answers to these questions. The most recent answers are listed below.

Also, you may get the answers to these questions on our WindowsPortal by searching the question in the portal search box.

If there is no answer to a questions please submit it on WindowsTechno Community and our technical expert will respond as soon as possible.

In a hurry? Save this article as a PDF.

PDF Download: Active Directory L3 Interview Questions

Real time Active Directory Interview Question’s Answers.

You will be redirected to the answer page if you click the question.

1. How to restrict user login for particular system or time
2. How can we check where from user getting authenticated?
3. What is the authentication process?
4. How user get authenticated from Dc?  
5. What is netlogon process?
6. If netlogon service stopped, will it impact user login?
7. User getting slow login issue, what could be the cause?
8. How to resolve the slow authentication issue
9. How we can make the DC secure from vulnerability
10. What is TGT?
11. How DC provide the TGT token to user?
12. How does the user renew the TGT token?
13. How does the KDC verify the identity of the user requesting a Kerberos ticket?
14. What happens if the timestamps and nonces don’t match during the authentication process?
15. What is KDC?
16. How KDC initiate the authentication?
17. How does the KDC verify the identity of the user?
18. Where is the KDC located?
19. What are the 3 main parts of Kerberos?
20. What is TGS?
21. How long ticket get valid once KDC allocated?
22. Can we increase the Kerberos ticket time?
23. What happens if the TGT token is not renewed before it expires?
24. What is NTLM?
25. How we can secure the NTLM
26. How we can secure the Kerberos  
27. if you are seeing number of failure event in dc, how you will resolve this?
28. How can you check the login event?
29. How can you enable the net logon debugging logs?
30. What information contain net logon logs?
31. What are sites? What are they used for?
32. What are the staging and production sites?
33. What are the steps to move the DC in production site after promotion?
34. What are the steps to move the DC in production site after demotion?
35. If domain controller down for some time, is it good to move this to staging site? if yes then why?
36. How we can make the DC secure from vulnerability
37. How can we secure the DC from unauthorized access?
38. What is AD database
39. Where AD database resides?
40. What are the files inside NTDS folder?
41. Explain all the files which are inside ntds folder?
42. Is it possible to move or change the location of AD database? if yes how we can change the location?
43. What is the command required to change the AD database location?
44. How can we secure the AD database?
45. Can we keep Sysol or net logon folder as default? in c drive?
46. How data write in AD database?
47. How data store in AD database?
48. What are the tables in AD database?
49. How are table linked to each other?
50. What are AD partitions?
51. What is the schema partition?
52. What information store in domain partition/configuration partition?
53. In which partition users’ information stored?
54. How can we take the backup of AD partition? does it come under system state backup?
55. How can I check if my environment has multiple domains and domain controllers?
56. What is ADLDS?
57. What is the purpose of ADLDS instance?
58. What are the advantages of using ADLDS over a full Active Directory deployment?
59. What is the last logon?
60. How can you find the last logon for user/computers?
61. What is KCC?
62. What is ISTG?
63. What is site cost?
64. What is site link?
65. What factors should I consider when designing site links?
66. If one of the domain controllers goes down in site, will there any impact? if yes tell me.
67. If entire site goes down, will there any impact?
68. What are the details required while creating the site and subnet in active directory?
69. Is it possible to make the bridge head server manually? if yes then how?
70. How KCC chose the bridge head server?
71. How replication works
72. What is bridge head server
73. How can I designate a bridgehead server for a site?
74. Is it possible to make the bridge head server manually? if yes then how?
75. What are the best practices for securing a bridgehead server?
76. What is subnet and how we can add or remove?
77. How we can redirect specific user’s subnet to get the authentication from particular AD site
78. If bridge head server goes down, what will be impact
79. What is the difference between a schema and a class?
80. What are the FSMO roles?
81. What is PDC?
82. What is RODC?
83. What is IM?
84. What is RID master
85. What is schema?
86. What is domain naming master?
87. What is the impact if any of fsmo role goes down?
88. Can we put IM and GC on same domain controller? if yes tell, if not also tell why not?  
89. If GC down, will there any impact?
90. What are the details required while creating the site and subnet in active directory?
91. Will there any impact If entire AD site goes down.
92. How to Handle Situations Where a DC with FSMO Roles Is Offline
93. How to Quickly check FSMO roles
94. How to Seize FSMO roles
95. How to transfer FSMO roles
96. What is Difference between Transferring and Seizing FSMO Roles
97. What happens when a FSMO Role Fails
98. What is impact if Data corruption in single server?
99. What is the impact if Loss of network connection to site?
100. If one of the domain controllers goes down in site, will there any impact?
101. What is the impact if Schema Master goes down
102. What is impact if PDC Emulator goes down?
103. What is impact if RID master goes down
104. What is impact if IM goes down?
105. What happen if Domain Naming Master Failure
106. How IM works? is it related to group membership?
107. How can we see the RID pool?
108. How RID master allocate the RID pool to other domain controllers?
109. Is it possible to increase the RID pool? if yes how?
110. Explain what is SYSVOL?
111. What inside Sysol. explain the structure of Sysol
112. What is DFSR?
113. What is FRS?
114. What SYSVOL contains?
115. How can we restore the Sysol?
116. How can we rebuild the SYSVOL? what is authoritative Sysol restore?
117. How can I monitor the health of the Sysvol folder?
118. What are the common causes of Sysvol corruption?
119. What is net Logon folder?
120. What is the path of Sysol and net Logon folders?
121. What are some common Sysvol replication issues and how can I troubleshoot them?
122. How can I use DFS Management console to check the replication status?
123. What is staging folder in Sysvol?
124. What is RODC? Why do we configure RODC?

Don’t forget the check Azure Active Directory Interview Questions.

So, that’s all in this blog. I will meet you soon with next stuff. Have a nice day!!!

Guys please don’t forget to like and share the post. Also join our WindowsTechno Community and where you can post your queries/doubts and our experts will address them.

You can also share the feedback on below windows techno email id. If you have any questions feel free to contact us on admin@windowstechno.com also follow us on facebook@windowstechno to get updates about new blog posts.