Home/Active Directory/Quiz/Active Directory – Quiz

Active Directory – Quiz

Last Updated: May 6, 2023

981

Hand pressing blue quiz button isolated on white background

Active Directory is a Microsoft service or product use for management of users and computers in server base network. You can test your knowledge related to domain controller by taking this online Quiz.

MicroSoft Active Directory Test

This online Quiz is related to Microsoft Active Directory. Each question is worth one point. Select the best answer or answers for each question.

Results

%3Ch2%3ECongratulations%3Cstrong%3E%C2%A0On%20Passing%20Your%20Test%3C%2Fstrong%3E%3C%2Fh2%3E%0ACongratulations%20on%20passing%20your%20test%0AWe%20knew%20that%20you%20could%20do%20it%0Abecause%20you%5C’re%20smarter%20than%20the%20rest%0Aand%20you%20have%20a%20lot%20of%20wit

%3Ch2%3ESorry%2C%20you%20have%20not%20cleared%20this%20test%3C%2Fh2%3E%0APlease%20try%20next%20time.

#1. Your company has a single Active Directory domain named intranet.adatum.com. The domain controllers run Windows Server 2008 and the DNS server role. All computers, including non-domain members, dynamically register their DNS records. You need to configure the intranet.adatum.com zone to allow only domain members to dynamically register DNS records. What should you do?

Enable zone transfers to Name Servers.

Set dynamic updates to Secure Only.

Remove the Authenticated Users group.

Deny the Everyone group the Create All Child Objects permission.

#2. Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2. The Audit account management policy setting and Audit directory services access setting are enabled for the entire domain. You need to ensure that changes made to Active Directory objects can be logged. The logged changes must include the old and new values of any attributes. What should you do?

Run auditpol.exe and then enable the Audit directory service access setting in the Default Domain policy.

Run auditpol.exe and then configure the Security settings of the Domain Controllers OU.

Enable the Audit account management policy in the Default Domain Controller Policy.

From the Default Domain Controllers policy, enable the Audit directory service access setting and enable directory service changes.

#3. Your company has an Active Directory domain. All servers run Windows Server 2008 R2. Your company uses an Enterprise Root certificate authority (CA). You need to ensure that revoked certificate information is highly available. What should you do?

Implement an Online Certificate Status Protocol (OCSP) responder by using Network Load Balancing.

Create a new Group Policy Object (GPO) that allows users to trust peer certificates. Link the GPO to the domain.

Implement an Online Certificate Status Protocol (OCSP) responder by using an Internet Security and Acceleration Server array.

Publish the trusted certificate authorities list to the domain by using a Group Policy Object (GPO).

#4. Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2 and are configured as DNS servers. A domain controller named DC1 has a standard primary zone for contoso.com. A domain controller named DC2 has a standard secondary zone for abc.com. You need to ensure that the replication of the abc.com zone is encrypted. You must not lose any zone data. What should you do?

Convert the primary zone into an Active Directory-integrated zone. Delete the secondary zone.

Convert the primary zone into an Active Directory-integrated stub zone. Delete the secondary zone.

On both servers, modify the interface that the DNS server listens on.

Configure the zone transfer settings of the standard primary zone. Modify the Master Servers lists on the secondary zone.

#5. Your network consists of an Active Directory forest that contains one domain named abc.com. All domain controllers run Windows Server 2008 R2 and are configured as DNS servers. You have two Active Directory-integrated zones: abc.com and nwtraders.com. You need to ensure a user is able to modify records in the abc.com zone. You must prevent the user from modifying the SOA record in the nwtraders.com zone. What should you do?

From the Active Directory Users and Computers console, modify the permissions of the Domain Controllers organizational unit (OU).

From the DNS Manager console, modify the permissions of the nwtraders.com zone.

From the DNS Manager console, modify the permissions of the abc.com zone.

From the Active Directory Users and Computers console, run the Delegation of Control Wizard.

#6. You are decommissioning domain controllers that hold all forest-wide operations master roles. You need to transfer all forest-wide operations master roles to another domain controller. Which two roles should you transfer? (Each correct answer presents part of the solution. Choose two.)

Domain naming master / Schema master

Infrastructure master / Domain naming master

Schema master / RID master

RID master / PDC emulator

PDC emulator / RID master

#7. Your company has a server that runs an instance of Active Directory Lightweight Directory Service (AD LDS). You need to create new organizational units in the AD LDS application directory partition. What should you do?

Use the dsadd OU command to create the organizational units.

Use the ADSI Edit snap-in to create the organizational units on the AD LDS application directory partition.

Use the Active Directory Users and Computers snap-in to create the organizational units on the AD LDS application directory partition.

Use the dsmod OU command to create the organizational units.

#8. Your company, ABC, Ltd., has a main office and a branch office. The offices are connected by a WAN link. ABC has an Active Directory forest that contains a single domain named ad.contoso.com. The ad.abc.com domain contains one domain controller named DC1 that is located in the main office. DC1 is configured as a DNS server for the ad.contoso.com DNS zone. This zone is configured as a standard primary zone. You install a new domain controller named DC2 in the branch office. You install DNS on DC2. You need to ensure that the DNS service can update records and resolve DNS queries in the event that a WAN link fails. What should you do?

Convert the ad.abc.com zone on DC1 to an Active Directory-integrated zone

Configure the DNS server on DC2 to forward requests to DC1.

Create a new standard secondary zone named ad.abc.com on DC2.

Create a new stub zone named ad.abc.com on DC2.

#9. your company has an Active Directory domain. The company has two domain controllers named DC1 and DC2. DC1 holds the Schema Master role. DC1 fails. You log on to Active Directory by using the administrator account. You are not able to transfer the Schema Master Operations role. You need to ensure that DC2 holds the Schema Master role. What should you do?

Log off and log on again to Active Directory by using an account that is a member of the Schema Administrators group. Start the Active Directory Schema snap-in.

Configure DC2 as a bridgehead server.

On DC2, seize the Schema Master role.

#10. An Active Directory database is installed on the C volume of a domain controller. You need to move the Active Directory database to a new volume. What should you do?

Copy the ntds.dit file to the new volume by using the ROBOCOPY command.

Move the ntds.dit file to the new volume by running the Move-item command in Microsoft Windows PowerShell.

Move the ntds.dit file to the new volume by using Windows Explorer.

Move the ntds.dit file to the new volume by using the Files option in the Ntdsutil utility.

Finish

If you have any questions feel free to contact us on admin@windowstechno.com also follow us on facebook@windowstechno to get updates about new blog posts.

How useful was this post?

Click on a star to rate it!

As you found this post useful...

Was this article helpful?

YesNo

MicroSoft Active Directory Test

Results

#3. Your company has an Active Directory domain. All servers run Windows Server 2008 R2. Your company uses an Enterprise Root certificate authority (CA). You need to ensure that revoked certificate information is highly available. What should you do?

#6. You are decommissioning domain controllers that hold all forest-wide operations master roles. You need to transfer all forest-wide operations master roles to another domain controller. Which two roles should you transfer? (Each correct answer presents part of the solution. Choose two.)

#7. Your company has a server that runs an instance of Active Directory Lightweight Directory Service (AD LDS). You need to create new organizational units in the AD LDS application directory partition. What should you do?

#10. An Active Directory database is installed on the C volume of a domain controller. You need to move the Active Directory database to a new volume. What should you do?

Vipan Kumar

Sysvol not accessible?

Group Policy Health Check

Related Articles

ITIL V4 Foundation Certification – Part-14

How to Reset DSRM Password

Windows Server 2012 R2 Will End of Life – Oct 2023

After the November patches, Windows Kerberos authentication fails

Active Directory Schema Tools and Settings

Domain Controller promotion fails