Active Directory - Quiz - WindowsTechno

#1. Your company has a single Active Directory domain named intranet.adatum.com. The domain controllers run Windows Server 2008 and the DNS server role. All computers, including non-domain members, dynamically register their DNS records. You need to configure the intranet.adatum.com zone to allow only domain members to dynamically register DNS records. What should you do?

Enable zone transfers to Name Servers.

Set dynamic updates to Secure Only.

Remove the Authenticated Users group.

Deny the Everyone group the Create All Child Objects permission.

#2. Your company uses a Windows 2008 Enterprise certificate authority (CA) to issue certificates. You need to implement key archival. What should you do?

Apply the Hisecdc security template to the domain controllers.

Archive the private key on the server.

Configure the certificate for automatic enrollment for the computers that store encrypted files.

Install an Enterprise Subordinate CA and issue a user certificate to users of the encrypted files.

#3. Your company has file servers located in an organizational unit named Payroll. The file servers contain payroll files located in a folder named Payroll. You create a GPO. You need to track which employees access the Payroll files on the file servers. What should you do?

Enable the Audit process tracking option. Link the GPO to the Domain Controllers organizational unit. On the file servers, configure Auditing for the Authenticated Users group in the Payroll folder.

Enable the Audit process tracking option. Link the GPO to the Payroll organizational unit. On the file servers, configure Auditing for the Everyone group in the Payroll folder.

Enable the Audit object access option. Link the GPO to the domain. On the domain controllers, configure Auditing for the Authenticated Users group in the Payroll folder.

Enable the Audit object access option. Link the GPO to the Payroll organizational unit. On the file servers, configure Auditing for the Everyone group in the Payroll folder.

#4. Your company, ABC, Ltd., has a main office and a branch office. The offices are connected by a WAN link. ABC has an Active Directory forest that contains a single domain named ad.contoso.com. The ad.abc.com domain contains one domain controller named DC1 that is located in the main office. DC1 is configured as a DNS server for the ad.contoso.com DNS zone. This zone is configured as a standard primary zone. You install a new domain controller named DC2 in the branch office. You install DNS on DC2. You need to ensure that the DNS service can update records and resolve DNS queries in the event that a WAN link fails. What should you do?

Convert the ad.abc.com zone on DC1 to an Active Directory-integrated zone

Configure the DNS server on DC2 to forward requests to DC1.

Create a new standard secondary zone named ad.abc.com on DC2.

Create a new stub zone named ad.abc.com on DC2.

#5. Your company has an Active Directory domain that runs Windows Server 2008 R2. The Sales OU contains an OU for Computers, an OU for Groups, and an OU for Users. You perform nightly backups. An administrator deletes the Groups OU. You need to restore the Groups OU without affecting users and computers in the Sales OU. What should you do?

Perform an authoritative restore of the Sales OU.

Perform an authoritative restore of the Groups OU.

Perform a non-authoritative restore of the Sales OU.

Perform a non-authoritative restore of the Groups OU.

#6. your company has an Active Directory domain. The company has two domain controllers named DC1 and DC2. DC1 holds the Schema Master role. DC1 fails. You log on to Active Directory by using the administrator account. You are not able to transfer the Schema Master Operations role. You need to ensure that DC2 holds the Schema Master role. What should you do?

Log off and log on again to Active Directory by using an account that is a member of the Schema Administrators group. Start the Active Directory Schema snap-in.

Configure DC2 as a bridgehead server.

Register the Schmmgmt.dll. Start the Active Directory Schema snap-in.

On DC2, seize the Schema Master role.

#7. You have a single Active Directory domain. All domain controllers run Windows Server 2008 and are configured as DNS servers. The domain contains one Active Directory-integrated DNS zone. You need to ensure that outdated DNS records are automatically removed from the DNS zone. What should you do?

From the properties of the zone, modify the TTL of the SOA record.

From the properties of the zone, enable scavenging.

From the command prompt, run ipconfig /flushdns.

From the properties of the zone, disable dynamic updates.

#8. Your network consists of an Active Directory forest that contains one domain named abc.com. All domain controllers run Windows Server 2008 R2 and are configured as DNS servers. You have two Active Directory-integrated zones: abc.com and nwtraders.com. You need to ensure a user is able to modify records in the abc.com zone. You must prevent the user from modifying the SOA record in the nwtraders.com zone. What should you do?

From the Active Directory Users and Computers console, modify the permissions of the Domain Controllers organizational unit (OU).

From the DNS Manager console, modify the permissions of the nwtraders.com zone.

From the DNS Manager console, modify the permissions of the abc.com zone.

From the Active Directory Users and Computers console, run the Delegation of Control Wizard.

#9. Abc, Ltd. has an Active Directory domain named ad.abc.com. Windowstechno, Inc. has an Active Directory domain named intranet.Windowstechno.com. Windowstechno’s security policy prohibits the transfer of internal DNS zone data outside the Windowstechno network. You need to ensure that the Abc users are able to resolve names from the intranet.Windowstechno.com domain. What should you do?

Create a new stub zone for the intranet.Windowstechno.com domain.

Configure conditional forwarding for the intranet.Windowstechno.com domain.

Create a standard secondary zone for the intranet.Windowstechno.com domain.

Create an Active DirectoryCintegrated zone for the intranet.Windowstechno.com domain.

#10. Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2. The Audit account management policy setting and Audit directory services access setting are enabled for the entire domain. You need to ensure that changes made to Active Directory objects can be logged. The logged changes must include the old and new values of any attributes. What should you do?

Run auditpol.exe and then enable the Audit directory service access setting in the Default Domain policy.

Run auditpol.exe and then configure the Security settings of the Domain Controllers OU.

Enable the Audit account management policy in the Default Domain Controller Policy.

From the Default Domain Controllers policy, enable the Audit directory service access setting and enable directory service changes.

Active Directory – Quiz

MicroSoft Active Directory Test

Results

Congratulations On Passing Your Test

Sorry, you have not cleared this test

#2. Your company uses a Windows 2008 Enterprise certificate authority (CA) to issue certificates. You need to implement key archival. What should you do?

#3. Your company has file servers located in an organizational unit named Payroll. The file servers contain payroll files located in a folder named Payroll. You create a GPO. You need to track which employees access the Payroll files on the file servers. What should you do?

#7. You have a single Active Directory domain. All domain controllers run Windows Server 2008 and are configured as DNS servers. The domain contains one Active Directory-integrated DNS zone. You need to ensure that outdated DNS records are automatically removed from the DNS zone. What should you do?

Vipan Kumar

MicroSoft Active Directory Test

Results

Congratulations On Passing Your Test

Sorry, you have not cleared this test

#2. Your company uses a Windows 2008 Enterprise certificate authority (CA) to issue certificates. You need to implement key archival. What should you do?

#3. Your company has file servers located in an organizational unit named Payroll. The file servers contain payroll files located in a folder named Payroll. You create a GPO. You need to track which employees access the Payroll files on the file servers. What should you do?

Vipan Kumar

Sysvol not accessible?

Group Policy Health Check

Related Articles

Remove confidential attributes from Read-Only Domain Controllers

How to enable netlogon debugging log for domain controller

How to Find the GUID of Domain controller

How does the KDC verify the identity of the user requesting a Kerberos ticket?

How can you check the login event?

Edb.log