AD -- Chapter One

Lesson 1

Overview of Active Directory Domain Services

Knowledge Assessment

Fill in the Blank

Complete the following sentences by writing the correct word or words in the blanks provided.

1.     The Active Directory database is stored on each domain controller in a file called _____ntds.dit____.

2.     The Active Directory __forest____ is considered the security boundary for an Active Directory environment.

3.     To provide fault tolerance, Active Directory utilizes a _multimaster_ replication model.

4.     To create a trust relationship with an NT4 domain, you will configure a(n) __external trust__.

5.     The _ Domain_ naming context is replicated across the domain.

6.     Each object in the schema must have a unique ___OID___.

7.     A(n) __cross-forest trust__ provides a two-way transitive trust relationship between all domains within two forests.

8.     Each domain in an Active Directory forest has a(n) ___two-way transitive___ trust relationship with every other domain in a forest.

9.     ___Universal group caching___ allows a user at a remote site to be able to log into Active Directory without needing to contact a global catalog server.

10.   Active Directory clients rely on ___SRV records___ in DNS to locate Active Directory resources such as domain controllers and global catalog servers.

Multiple Choice

Circle the correct choice.

1.     Which of the following items is a valid leaf object in Active Directory?

        a.     Domain

        b.     User

        c.     Application partition

        d.     OU

        Except for a user object, all of the listed choices are container objects that can contain additional Active Directory objects within them. A user object is the only leaf object listed.

2.     Which of the following domain controllers can be joined to a forest that is currently set at the Windows Server 2008 forest functional level?

        a.     Windows 2000

        b.     Windows Server 2003

        c.     Windows Server 2008

        d.     Windows NT 4.0

        When an Active Directory forest is set to the Windows Server 2008 forest functional level, only Windows Server 2008 domain controllers can be joined to any domain within the forest from that point forward.

3.     You are planning an Active Directory implementation for a company that currently has sales, accounting, and marketing departments. All department heads want to manage their own users and resources in Active Directory. What feature will permit you to set up Active Directory to allow each manager to manage his or her own container but not any other containers?

        a.     Delegation of control

        b.     Read-only domain controller

        c.     Multimaster replication

        d.     SRV records

        Using delegation of control within Active Directory, you can assign granular permissions within the directory. Therefore, delegated administrators can have elevated rights to only the specified objects and/or containers.

4.     What is required by DNS for Active Directory to function?

        a.     Dynamic update support

        b.     DHCP forwarding support

        c.     SRV records support

        d.     Active Directory integration

        Of the listed choices, only SRV records support is required by DNS for Active Directory to function. Dynamic update support is helpful in supporting an Active Directory environment, but it is not a requirement.

5.     If the user named Amy is located in the sales OU of the domain, what is the correct syntax for referencing this user in a command line utility?



        c.     cn=amy,ou=sales,dc=central,dc=cohowinery,dc=com

        d.     dc=com,dn=cohowinery,ou=sales,cn=amy

        The correct syntax of a distinguished name lists the leaf object first, any OUs or containers second, and the components of the Active Directory domain name last.

6.     RODCs do not participate in which of the following?

        a.     Replication

        b.     Cross-forest trusts

        c.     Outbound replication

        d.     External trusts

        Read-Only Domain Controllers do not perform any type of outbound replication within Active Directory. They accept inbound changes from writeable domain controllers, but do not replicate any local changes to the rest of the domain or forest.

7.     Which naming context contains forest-wide data about the physical topology of an Active Directory forest?

        a.     Schema

        b.     ForestDNSZones

        c.     Configuration

        d.     DomainDNSZones

        The Configuration NC is replicated forest-wide. It contains data about Active Directory sites, subnets, and other forest-wide configuration data.

8.     Which of the following is a container object within Active Directory?

        a.     Folder

        b.     Group

        c.     User

        d.     OU

        Of the listed choices, only the organizational unit (OU) is a container object within Active Directory. A folder may contain other objects within the file system, but of the choices here, only an OU may contain other objects within Active Directory.

9.     What is the first domain installed in a new Active Directory forest called?

        a.     Forest root domain

        b.     Parent root domain

        c.     Domain tree root

        d.     Domain root

        The forest root domain is the first domain installed in an Active Directory forest; while it can subsequently be renamed, it cannot be decommissioned without decommissioning the entire forest.

10.   Which of the following is the security boundary within Active Directory?

        a.     Forest

        b.     Domain

        c.     Domain tree

        d.     OU

        The security boundary within Active Directory is the forest. Active Directory domains provide administrative boundaries, but the true security boundary is at the forest level.