Windows Server 2012 R2 - Exam 2 - Quiz 7

Which of the following is true about organizational units? (Choose all that apply.)

• OUs can be added to an object’s DACL.

• 1. OUs can be nested.

• 1. A group policy can be linked to an OU.

• 1. Only members of Domain Administrators can work with OUs.

You want to see the permissions set on an OU, so you open Active Directory Users and Computers, right-click the OU, and click Properties. After clicking all the available tabs, you can’t seem to find where permissions are set in the Properties dialog box. What should you do?

• 1. Log on as a member of Enterprise Admins and try again.

• In the Properties dialog box, click the Advanced button.

• 1. Right-click the OU and click Security.

• In Active Directory Users and Computers, click View, Advanced Features.

You have hired a new junior administrator and created an account for her with the logon name JrAdmin. You want her to be able to reset user accounts and modify group memberships for users in the Operations department whose accounts are in the Operations OU. You want to do this with the least effort and without giving JrAdmin broader capabilities. What should you do?

• In Active Directory Administrative Center, right-click the Operations OU, click Properties, and click Managed By.

• 1. In Active Directory Users and Computers, right-click the Operations OU and click Delegate Control.

• Open the Operations Security tab and add JrAdmin to the DACL.

• Add JrAdmin to the Password Managers domain local group.

Another administrator has been changing permissions on the Operations OU by adding some groups and users to the DACL. You’re concerned that the JrAdmin account has been given more access to the OU than it should have. You need to see all permissions the JrAdmin account has to the Operations OU. What should you do?

• In Active Directory Users and Computers, right-click the JrAdmin account, click Properties, and view her group memberships.

• In Active Directory Administrative Center, run the Permissions Wizard and select JrAdmin as the target.

• In Active Directory Users and Computers, enable Advanced Features, open the Operations OU’s Properties dialog box, and navigate to the Effective Access tab.

• In Active Directory Administrative Center, open JrAdmin’s account properties and click the Manager Of tab.

An account named SrAdmin created an OU named QandA under the Operations OU. Which of the following is true by default?

1. 
   

• 1. Domain Admins is the owner of the QandA OU.

• SrAdmin is the owner of the QandA OU and all objects created inside it.

• SrAdmin has all standard permissions except Full control for the QandA OU.

• The Everyone group has Read permission to the QandA OU.

Which of the following is a user account category? (Choose all that apply.)

• 1. Local

• Global

• 1. Domain

• Universal

Which of the following is a built-in user account? (Choose all that apply.)

• 1. Administrator

• Operator

• 1. Anonymous

• 1. Guest

Sam*Snead is a valid user account name. True or False?

• True

• False

Which of the following is true about user accounts in a Windows Server 2012/R2 domain? (Choose all that apply.)

• • The name can be from 1 to 20 characters.

• The name is case sensitive.

• • The name can’t be duplicated in the domain.

• • Using default settings, PASSWORD123 is a valid password.

Which of the following account options can’t be set together? (Choose all that apply.)

• • User must change password at next logon.

• Store password using reversible encryption.

• • Password never expires.

• • Account is disabled.