Home/Active Directory/Quiz/Active Directory – Quiz

Active Directory – Quiz

Last Updated: May 6, 2023

903

Hand pressing blue quiz button isolated on white background

Active Directory is a Microsoft service or product use for management of users and computers in server base network. You can test your knowledge related to domain controller by taking this online Quiz.

MicroSoft Active Directory Test

This online Quiz is related to Microsoft Active Directory. Each question is worth one point. Select the best answer or answers for each question.

Results

%3Ch2%3ECongratulations%3Cstrong%3E%C2%A0On%20Passing%20Your%20Test%3C%2Fstrong%3E%3C%2Fh2%3E%0ACongratulations%20on%20passing%20your%20test%0AWe%20knew%20that%20you%20could%20do%20it%0Abecause%20you%5C’re%20smarter%20than%20the%20rest%0Aand%20you%20have%20a%20lot%20of%20wit

%3Ch2%3ESorry%2C%20you%20have%20not%20cleared%20this%20test%3C%2Fh2%3E%0APlease%20try%20next%20time.

#1. Your company has an Active Directory forest that contains a single domain. The domain member server has an Active Directory Federation Services (AD FS) role installed. You need to configure AD FS to ensure that AD FS tokens contain information from the Active Directory domain. What should you do?

Add and configure a new resource partner.

Add and configure a new account store.

Add and configure a new account partner.

Add and configure a Claims-aware application.

#2. Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2. The Audit account management policy setting and Audit directory services access setting are enabled for the entire domain. You need to ensure that changes made to Active Directory objects can be logged. The logged changes must include the old and new values of any attributes. What should you do?

Run auditpol.exe and then enable the Audit directory service access setting in the Default Domain policy.

Run auditpol.exe and then configure the Security settings of the Domain Controllers OU.

Enable the Audit account management policy in the Default Domain Controller Policy.

From the Default Domain Controllers policy, enable the Audit directory service access setting and enable directory service changes.

#3. Your company has a server that runs an instance of Active Directory Lightweight Directory Service (AD LDS). You need to create new organizational units in the AD LDS application directory partition. What should you do?

Use the dsadd OU command to create the organizational units.

Use the ADSI Edit snap-in to create the organizational units on the AD LDS application directory partition.

Use the Active Directory Users and Computers snap-in to create the organizational units on the AD LDS application directory partition.

Use the dsmod OU command to create the organizational units.

#4. Your company has a single Active Directory domain named intranet.adatum.com. The domain controllers run Windows Server 2008 and the DNS server role. All computers, including non-domain members, dynamically register their DNS records. You need to configure the intranet.adatum.com zone to allow only domain members to dynamically register DNS records. What should you do?

Enable zone transfers to Name Servers.

Set dynamic updates to Secure Only.

Remove the Authenticated Users group.

Deny the Everyone group the Create All Child Objects permission.

#5. You have a single Active Directory domain. All domain controllers run Windows Server 2008 and are configured as DNS servers. The domain contains one Active Directory-integrated DNS zone. You need to ensure that outdated DNS records are automatically removed from the DNS zone. What should you do?

From the properties of the zone, modify the TTL of the SOA record.

From the properties of the zone, enable scavenging.

From the command prompt, run ipconfig /flushdns.

From the properties of the zone, disable dynamic updates.

#6. Your company has an Active Directory forest that runs at the functional level of Windows Server 2008. You implement Active Directory Rights Management Services (AD RMS). You install Microsoft SQL Server 2005. When you attempt to open the AD RMS administration Web site, you receive the following error message: “SQL Server does not exist or access denied.” You need to open the AD RMS administration Web site. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

Start the MSSQLSVC and IIS services.

Install Message Queuing.

Manually delete the Service Connection Point in AD DS and restart AD RMS.

#7. Your company has file servers located in an organizational unit named Payroll. The file servers contain payroll files located in a folder named Payroll. You create a GPO. You need to track which employees access the Payroll files on the file servers. What should you do?

Enable the Audit process tracking option. Link the GPO to the Domain Controllers organizational unit. On the file servers, configure Auditing for the Authenticated Users group in the Payroll folder.

Enable the Audit process tracking option. Link the GPO to the Payroll organizational unit. On the file servers, configure Auditing for the Everyone group in the Payroll folder.

Enable the Audit object access option. Link the GPO to the domain. On the domain controllers, configure Auditing for the Authenticated Users group in the Payroll folder.

Enable the Audit object access option. Link the GPO to the Payroll organizational unit. On the file servers, configure Auditing for the Everyone group in the Payroll folder.

#8. Your company has a main office and a branch office. You deploy a read-only domain controller (RODC) that runs Microsoft Windows Server 2008 to the branch office. You need to ensure that users at the branch office are able to log on to the domain by using the RODC. What should you do?

Decrease the replication interval for all connection objects by using the Active Directory Sites and Services console.

Configure a new bridgehead server in the main office.

Add another RODC to the branch office.

Configure the Password Replication Policy on the RODC.

#9. Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2 and are configured as DNS servers. A domain controller named DC1 has a standard primary zone for contoso.com. A domain controller named DC2 has a standard secondary zone for abc.com. You need to ensure that the replication of the abc.com zone is encrypted. You must not lose any zone data. What should you do?

Convert the primary zone into an Active Directory-integrated zone. Delete the secondary zone.

Convert the primary zone into an Active Directory-integrated stub zone. Delete the secondary zone.

On both servers, modify the interface that the DNS server listens on.

Configure the zone transfer settings of the standard primary zone. Modify the Master Servers lists on the secondary zone.

#10. Your company has an Active Directory domain. A user attempts to log on to a computer that was turned off for twelve weeks. The administrator receives an error message that authentication has failed. You need to ensure that the user is able to log on to the computer. What should you do?

Run the netsh command with the set and machine options.

Run the Active Directory Users and Computers console to disable, and then enable the computer account.

Reset the computer account. Disjoin the computer from the domain, and then rejoin the computer to the domain.

Run the netdom TRUST /reset command.

Finish

If you have any questions feel free to contact us on admin@windowstechno.com also follow us on facebook@windowstechno to get updates about new blog posts.

How useful was this post?

Click on a star to rate it!

As you found this post useful...

Was this article helpful?

YesNo

MicroSoft Active Directory Test

Results

#3. Your company has a server that runs an instance of Active Directory Lightweight Directory Service (AD LDS). You need to create new organizational units in the AD LDS application directory partition. What should you do?

#7. Your company has file servers located in an organizational unit named Payroll. The file servers contain payroll files located in a folder named Payroll. You create a GPO. You need to track which employees access the Payroll files on the file servers. What should you do?

#8. Your company has a main office and a branch office. You deploy a read-only domain controller (RODC) that runs Microsoft Windows Server 2008 to the branch office. You need to ensure that users at the branch office are able to log on to the domain by using the RODC. What should you do?

#10. Your company has an Active Directory domain. A user attempts to log on to a computer that was turned off for twelve weeks. The administrator receives an error message that authentication has failed. You need to ensure that the user is able to log on to the computer. What should you do?

Vipan Kumar

Sysvol not accessible?

Group Policy Health Check

Related Articles

Group Policy Objects

What are some common issues that can arise during the migration process?

Finding Out the Last Time a User Logged On

Active Directory Domain Services Overview

How to Check AD Schema Version using PowerShell

Troubleshooting AD Replication error 8418: The replication operation failed because of a schema mismatch between the servers involved.