Active Directory - Quiz - WindowsTechno

#1. An Active Directory database is installed on the C volume of a domain controller. You need to move the Active Directory database to a new volume. What should you do?

Copy the ntds.dit file to the new volume by using the ROBOCOPY command.

Move the ntds.dit file to the new volume by running the Move-item command in Microsoft Windows PowerShell.

Move the ntds.dit file to the new volume by using Windows Explorer.

Move the ntds.dit file to the new volume by using the Files option in the Ntdsutil utility.

#2. Your company uses a Windows 2008 Enterprise certificate authority (CA) to issue certificates. You need to implement key archival. What should you do?

Apply the Hisecdc security template to the domain controllers.

Archive the private key on the server.

Configure the certificate for automatic enrollment for the computers that store encrypted files.

Install an Enterprise Subordinate CA and issue a user certificate to users of the encrypted files.

#3. Your company has an Active Directory forest that runs at the functional level of Windows Server 2008. You implement Active Directory Rights Management Services (AD RMS). You install Microsoft SQL Server 2005. When you attempt to open the AD RMS administration Web site, you receive the following error message: “SQL Server does not exist or access denied.” You need to open the AD RMS administration Web site. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

Start the MSSQLSVC and IIS services.

Install Message Queuing.

Manually delete the Service Connection Point in AD DS and restart AD RMS.

#4. You have two servers named Server1 and Server2. Both servers run Windows Server 2008 R2. Server1 is configured as an enterprise root certification authority (CA). You install the Online Responder role service on Server2. You need to configure Server1 to support the Online Responder. What should you do?

Import the enterprise root CA certificate.

Configure the Certificate Revocation List Distribution Point extension.

Configure the Authority Information Access (AIA) extension.

Add the Server2 computer account to the CertPublishers group.

#5. Your company has a main office and a branch office. You deploy a read-only domain controller (RODC) that runs Microsoft Windows Server 2008 to the branch office. You need to ensure that users at the branch office are able to log on to the domain by using the RODC. What should you do?

Decrease the replication interval for all connection objects by using the Active Directory Sites and Services console.

Configure a new bridgehead server in the main office.

Add another RODC to the branch office.

Configure the Password Replication Policy on the RODC.

#6. Abc, Ltd. has an Active Directory domain named ad.abc.com. Windowstechno, Inc. has an Active Directory domain named intranet.Windowstechno.com. Windowstechno’s security policy prohibits the transfer of internal DNS zone data outside the Windowstechno network. You need to ensure that the Abc users are able to resolve names from the intranet.Windowstechno.com domain. What should you do?

Create a new stub zone for the intranet.Windowstechno.com domain.

Configure conditional forwarding for the intranet.Windowstechno.com domain.

Create a standard secondary zone for the intranet.Windowstechno.com domain.

Create an Active DirectoryCintegrated zone for the intranet.Windowstechno.com domain.

#7. your company has an Active Directory domain. The company has two domain controllers named DC1 and DC2. DC1 holds the Schema Master role. DC1 fails. You log on to Active Directory by using the administrator account. You are not able to transfer the Schema Master Operations role. You need to ensure that DC2 holds the Schema Master role. What should you do?

Log off and log on again to Active Directory by using an account that is a member of the Schema Administrators group. Start the Active Directory Schema snap-in.

Configure DC2 as a bridgehead server.

Register the Schmmgmt.dll. Start the Active Directory Schema snap-in.

On DC2, seize the Schema Master role.

#8. Your network consists of an Active Directory forest that contains one domain named abc.com. All domain controllers run Windows Server 2008 R2 and are configured as DNS servers. You have two Active Directory-integrated zones: abc.com and nwtraders.com. You need to ensure a user is able to modify records in the abc.com zone. You must prevent the user from modifying the SOA record in the nwtraders.com zone. What should you do?

From the Active Directory Users and Computers console, modify the permissions of the Domain Controllers organizational unit (OU).

From the DNS Manager console, modify the permissions of the nwtraders.com zone.

From the DNS Manager console, modify the permissions of the abc.com zone.

From the Active Directory Users and Computers console, run the Delegation of Control Wizard.

#9. Your company has file servers located in an organizational unit named Payroll. The file servers contain payroll files located in a folder named Payroll. You create a GPO. You need to track which employees access the Payroll files on the file servers. What should you do?

Enable the Audit process tracking option. Link the GPO to the Domain Controllers organizational unit. On the file servers, configure Auditing for the Authenticated Users group in the Payroll folder.

Enable the Audit process tracking option. Link the GPO to the Payroll organizational unit. On the file servers, configure Auditing for the Everyone group in the Payroll folder.

Enable the Audit object access option. Link the GPO to the domain. On the domain controllers, configure Auditing for the Authenticated Users group in the Payroll folder.

Enable the Audit object access option. Link the GPO to the Payroll organizational unit. On the file servers, configure Auditing for the Everyone group in the Payroll folder.

#10. Your company has a server that runs an instance of Active Directory Lightweight Directory Service (AD LDS). You need to create new organizational units in the AD LDS application directory partition. What should you do?

Use the dsadd OU command to create the organizational units.

Use the ADSI Edit snap-in to create the organizational units on the AD LDS application directory partition.

Use the Active Directory Users and Computers snap-in to create the organizational units on the AD LDS application directory partition.

Use the dsmod OU command to create the organizational units.

Active Directory – Quiz

MicroSoft Active Directory Test

Results

Congratulations On Passing Your Test

Sorry, you have not cleared this test

#1. An Active Directory database is installed on the C volume of a domain controller. You need to move the Active Directory database to a new volume. What should you do?

#2. Your company uses a Windows 2008 Enterprise certificate authority (CA) to issue certificates. You need to implement key archival. What should you do?

#5. Your company has a main office and a branch office. You deploy a read-only domain controller (RODC) that runs Microsoft Windows Server 2008 to the branch office. You need to ensure that users at the branch office are able to log on to the domain by using the RODC. What should you do?

#9. Your company has file servers located in an organizational unit named Payroll. The file servers contain payroll files located in a folder named Payroll. You create a GPO. You need to track which employees access the Payroll files on the file servers. What should you do?

#10. Your company has a server that runs an instance of Active Directory Lightweight Directory Service (AD LDS). You need to create new organizational units in the AD LDS application directory partition. What should you do?

Vipan Kumar

MicroSoft Active Directory Test

Results

Congratulations On Passing Your Test

Sorry, you have not cleared this test

#1. An Active Directory database is installed on the C volume of a domain controller. You need to move the Active Directory database to a new volume. What should you do?

#2. Your company uses a Windows 2008 Enterprise certificate authority (CA) to issue certificates. You need to implement key archival. What should you do?

#5. Your company has a main office and a branch office. You deploy a read-only domain controller (RODC) that runs Microsoft Windows Server 2008 to the branch office. You need to ensure that users at the branch office are able to log on to the domain by using the RODC. What should you do?

#9. Your company has file servers located in an organizational unit named Payroll. The file servers contain payroll files located in a folder named Payroll. You create a GPO. You need to track which employees access the Payroll files on the file servers. What should you do?

#10. Your company has a server that runs an instance of Active Directory Lightweight Directory Service (AD LDS). You need to create new organizational units in the AD LDS application directory partition. What should you do?

Vipan Kumar

Sysvol not accessible?

Group Policy Health Check

Related Articles

Transitive Trusts

DCDIAG /Test:DNS

What is ADMT and how we can migrate the users.

Object protected by accidental deletion

After the November patches, Windows Kerberos authentication fails

How to increase the Kerberos ticket time?