Question 1

Which of the following statements about operations master roles is correct?

Accepted Answer

A)  By default,the Infrastructure master is chosen randomly per domain
B)  There can be multiple schema masters per domain
C)  The RID Master is responsible for providing backward compatibility with NT domain controllers
D)  There is only one domain naming master per forest,which must be available whenever domains are added,deleted,or renamed.E) B) and D)
F) A) and C)

Question 2

The part of the SID that's unique for each Active Directory object

Accepted Answer

A)  Forest root domain
B)  directory partition
C)  intrasite replication
D)  One-way trust
E)  LDAPF) Operations masterG) relative identifierH) security principalsI) user principal name (UPN) J) B) and C)
K) F) and G) G

Question 3

The _________________________ is a directory partition and contains the most commonly accessed object attributes to facilitate object searches and user logons across domains.

Accepted Answer

global cat...

Question 4

Explicit permissions never override inherited permissions.

Accepted Answer

A) True 
 B)False

Question 5

What MMC do you use to create OUs?

Accepted Answer

Active Dir...

Question 6

The user "TestUserA" has been added to an objects DACL and assigned the Allow Full control permission.However,"TestUserA" has inherited the Deny Full Control permission for the object from its parent container.What is "TestUserA"'s effective permissions?

Accepted Answer

A)  TestUserA has Full Control permissions
B)  TestUserA has no permissions due to Deny Full Control
C)  TestUserA is given default permissions for the object because Full Control and Deny Full Control cancel each other out
D)  This can't be done because conflicting permissions are not allowed in an object's DACLE) All of the above
F) A) and D) A

Question 7

What can you do to reduce the delay caused by authentication referral?

Accepted Answer

Create a s...

Question 8

Match a term below to the following description
The process for replicating Active Directory objects in which changes to the database can occur on any domain controller and are propagated,or replicated,to all other domain controllers.

Accepted Answer

A)  Multimaster replication
B)  Intersite replication
C)  Intrasite replication
D)  Database replicationE) B) and D)
F) A) and B)

Question 9

What directory partition contains information needed to define Active Directory objects and object attributes for all domains in the forest?

Accepted Answer

A)  Schema directory partition
B)  Global Catalog partition
C)  Application directory partition
D)  Configuration partitionE) A) and B)
F) A) and D) A

Question 10

A(n) ____ is a one-way or two-way nontransitive trust between two domains that aren't in the same forest

Accepted Answer

A)  External trust
B)  Shortcut trust
C)  Forest Trust
D)  Outsite trustE) A) and C)
F) A) and D)

Question 11

A Discretionary access control list (DACL) ____.

Accepted Answer

A)  defines the settings for auditing access to an object
B)  only applies to users accessing resources from a dialup connection
C)  is a list of security principals,with each having a set of permissions that define access to the object
D)  can only be edited by the object ownerE) A) and D)
F) B) and C)

Question 12

To verify who has been delegated control of an OU,you must ____.

Accepted Answer

A)  use the dsview /delegated command
B)  be the owner of the OU
C)  view the OU's permissions
D)  be on the original domain controller where permission was delegatedE) B) and C)
F) A) and B)

Question 13

A process called ____ runs on every domain controller to determine the replication topology which defines the domain controller path that Active Directory changes flow through.

Accepted Answer

A)  Replication
B)  AD Route
C)  Knowledge Consistency Checker (KC
C)  
D)  trust relationshipE) A) and B)
F) A) and C)

Question 14

Which of the following is not a valid operations master role?

Accepted Answer

A)  Schema master
B)  Infrastructure master
C)  User management master
D)  RID masterE) B) and C)
F) All of the above

Question 15

Which of the following is not a valid directory partition type?

Accepted Answer

A)  Domain directory partition
B)  Schema directory partition
C)  Extended directory partition
D)  Global catalog partitionE) C) and D)
F) B) and C)

Question 16

What service most commonly makes use of an application directory partition for it's database?

Accepted Answer

The answer of What service most commonly makes use of...

Question 17

A schema can be changed by an administrator or an application to best suit an organization's needs.

Accepted Answer

A) True 
 B)False

Question 18

What does ISTG stand for?

Accepted Answer

Inter-Site...

Question 19

The first domain created in a new forest

Accepted Answer

A)  Forest root domain
B)  directory partition
C)  intrasite replication
D)  One-way trust
E)  LDAPF) Operations masterG) relative identifierH) security principalsI) user principal name (UPN) J) B) and E)
K) A) and I)

Question 20

Which operations master role is responsible for ensuring that changes made to object names in one domain are updated in references to these objects in other domains?

Accepted Answer

A)  Schema master
B)  Infrastructure master
C)  Domain naming master
D)  RID masterE) B) and D)
F) B) and C)

Exam 4: Active Directory Design and Security Concepts

Which of the following statements about operations master roles is correct?

Correct AnswerverifiedShow Answer

The part of the SID that's unique for each Active Directory object

Correct AnswerverifiedG

The _________________________ is a directory partition and contains the most commonly accessed object attributes to facilitate object searches and user logons across domains.

Correct Answerverifiedglobal cat...View AnswerShow Answer

Explicit permissions never override inherited permissions.

Correct AnswerverifiedShow Answer

What MMC do you use to create OUs?

Correct AnswerverifiedActive Dir...View AnswerShow Answer

The user "TestUserA" has been added to an objects DACL and assigned the Allow Full control permission.However,"TestUserA" has inherited the Deny Full Control permission for the object from its parent container.What is "TestUserA"'s effective permissions?

Correct AnswerverifiedA

What can you do to reduce the delay caused by authentication referral?

Correct AnswerverifiedCreate a s...View AnswerShow Answer

Match a term below to the following description The process for replicating Active Directory objects in which changes to the database can occur on any domain controller and are propagated,or replicated,to all other domain controllers.

Correct AnswerverifiedShow Answer

What directory partition contains information needed to define Active Directory objects and object attributes for all domains in the forest?

Correct AnswerverifiedA

A(n) ____ is a one-way or two-way nontransitive trust between two domains that aren't in the same forest

Correct AnswerverifiedShow Answer

A Discretionary access control list (DACL) ____.

Correct AnswerverifiedShow Answer

To verify who has been delegated control of an OU,you must ____.

Correct AnswerverifiedShow Answer

A process called ____ runs on every domain controller to determine the replication topology which defines the domain controller path that Active Directory changes flow through.

Correct AnswerverifiedShow Answer

Which of the following is not a valid operations master role?

Correct AnswerverifiedShow Answer

Which of the following is not a valid directory partition type?

Correct AnswerverifiedShow Answer

What service most commonly makes use of an application directory partition for it's database?

Correct AnswerverifiedShow Answer

A schema can be changed by an administrator or an application to best suit an organization's needs.

Correct AnswerverifiedShow Answer

What does ISTG stand for?

Correct AnswerverifiedInter-Site...View AnswerShow Answer

The first domain created in a new forest

Correct AnswerverifiedShow Answer

Which operations master role is responsible for ensuring that changes made to object names in one domain are updated in references to these objects in other domains?

Correct AnswerverifiedShow Answer

Correct Answer
verified

Correct Answer
verified
G

Correct Answer
verified
global cat...
View Answer

Correct Answer
verified

Correct Answer
verified
Active Dir...
View Answer

Correct Answer
verified
A

Correct Answer
verified
Create a s...
View Answer

Correct Answer
verified

Correct Answer
verified
A

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
Inter-Site...
View Answer

Correct Answer
verified

Correct Answer
verified