Session 5-Install and Administer AD

What is the primary purpose of a directory service like Active Directory Domain Services (AD DS)?

• To store and manage users’ personal data

• To manage network hardware and software configurations

• To provide a repository for network resource information, including authentication
  
  

• To create backup copies of all network data

What is a key difference between an Organizational Unit (OU) and a domain in AD DS?

• An OU is a container object that can hold other OUs or leaf objects, while a domain is a logical boundary for directory functions

• An OU is a security division independent of the domain, while a domain inherits security policies from OUs

• A domain can hold only users, while an OU can hold groups and computers
  
  

• Domains allow for the inheritance of group policies, while OUs do not

You need to delegate administrative tasks for a specific set of users and computers within a domain but want to retain control over other parts of the domain. Which object should you use to achieve this?

• A Group object

• A domain controller

• An Organizational Unit (OU)

• A domain tree

You need to create two separate domains in your Active Directory environment: one for "contoso.com" and another for "adatum.com." However, you want them to trust each other and be part of a larger infrastructure. What should you do?

• Create two separate forests for each domain
  
  

• Create two domains within the same domain tree
  
  

• Create two separate domain trees and join them in a forest

• Create a single domain for both "contoso.com" and "adatum.com"

When you create the first domain in Active Directory, which of the following occurs?

• A forest is automatically created, and the first domain becomes the forest root domain
  
  

• The first domain is part of a domain tree in a new forest
  
  

• The domain is created without any relationship to a forest

• A new domain tree is automatically created with a parent domain

What is the purpose of the global catalog in Active Directory Domain Services (AD DS)?

• To store only the objects in the root domain of the forest
  
  

• To list all objects in the forest and provide a subset of each object’s attributes for client searches
  
  

• To replicate data across all domain controllers in the forest

• To track changes to domain controller configurations

What is the consequence of a failed DNS registration for a domain controller in Active Directory?

• The domain controller cannot be replicated with other domain controllers
  
  

• Users in the domain cannot log on

• Computers cannot join the domain
  
  

• All of the above

What is the main difference between local user accounts and domain user accounts in Windows Server 2012 R2?

• Local accounts provide access to both local and network resources, while domain accounts only provide access to local resources

• Local accounts are stored in the SAM database and cannot be used to access network resources, while domain accounts are stored in AD DS and can access network resources

• Domain accounts cannot access local resources, but local accounts can access network resources
  
  

• Both local and domain user accounts are stored in the SAM database but are replicated to different servers

What is the primary difference between CSVDE.exe and LDIFDE.exe in Active Directory?

• CSVDE.exe can modify and delete records, while LDIFDE.exe cannot
  
  

• CSVDE.exe is used for importing data only, whereas LDIFDE.exe can also modify existing records

• LDIFDE.exe is used only for exporting data, while CSVDE.exe is used for importing data

• CSVDE.exe supports the LDAP Data Interchange Format (LDIF), while LDIFDE.exe uses CSV format

You need to create a new computer account and join a computer to the domain. What are the two essential steps involved?

• Creating a user account and setting the domain password

• Creating a computer account and configuring the network settings

• Creating a computer account and joining the computer to the domain
  
  

• Creating a group and assigning permissions to the computer