127 Midterm Cards Flashcards

Question

How does the leasing process work?

Answer 1

Leasing is when a client is given an address from a DHCP server. The DHCP server is configured with a lease duration. When the lease time is at 50%, The client will send a new request message to the server, and restart the DORA process. If the DHCP server receives the request, and would like to continue the lease, a new ACK is sent and the client gets to keep the address. If there is no response from the server, another request will be sent at 87.5% of the lease time. If no response from the DHCP server is heard by the end of the lease, the client will have to release the address and restart the DORA process over again completely.

Answer 2

Lease duration is dependent on the type of environment you are working in. The default lease time is 8 days. If you are working in a network environment that is public with a lot of people coming and going in short intervals, you are going to want to set your lease time to something short so that you don't run out of addresses. If you are in a home or an office environment, you will want a longer lease time so that computers are not constantly shifting addreses. Remember your scope. The maximum number of addresses you could possibly have in your scope is aroudn 250. If you think that more than 250 will be coming and going in a day, then you will want a lease duration that is less than 1 day.

Answer 3

DHCP Scopes and address ranges. DHCP Exclusions and Reservations DHCP Lease Durations Active Directory and Dynamic DNS Integration Link-Layer MAC Filtering

Answer 4

The DHCP scope is the range of IP address parameters allocated by a DHCP server. One subnet will normally only have one scope. Superscopes are when a single DHCP server offers multiple scopes to multiple clients and subnets.

Answer 5

An exclusion is an address within the DHCP scope that you never want it to assign. An exclusion would be something like the default gateway of your network. A reservation is an IP address within your scope that you want to lease to a device perminantly. You would want to use this on things such a printers or file servers which are part of the network and need a constant IP address.

Answer 6

There are two main types of split scopes: Manual Split Scopes: The administrator manually divides the allocation of addresses between multiple servers. Usually with scopes that are either: * 50/50 - Both servers share the equal load of the scope * 80/20 - One server carries the majority of the scope, while the other acts as a backup incase there is an issue with the primary server. * 100/100 This requires that each server has the same ammount of addresses leading to a larger scope. Automatic split scopes with failover: Administrator divides allocation between multiple servers using a configuration wizard. The two main styles of automatic split scopes are: Hot standby, Similar to the 80/20 split where there is one active server at a time and the rest exist for redundancy. Load balanced - Both servers share responsibility of responding to request. Usually a 50/50 scope.

Answer 7

AD DS Is an enterprise directory service. IT contains information about each element of the domain including users, applications and devices, all of which are controlled by Domain Controllers. AD DS is logical and can be split up into as many organizational structures as the specific environment requires.

Answer 8

Authentication - The process of permitting or denying individuals or computers to access a network. This would involve creating security protocols such as password requirements. Authorization - This is the process of defining levels of access when a user is inside of the network. Authorization includes processes such as creating organizational units and groups to make sure certain users have access to what they need, and nothing more. Accounting - This involves auditing and trackign the activities of users or computers across a network. This would involve alerting administrators if a user tried to access an area of a network they shouldn't be.

Answer 9

Forests - Forests connect root domains. In any topology we are given, there will only be 1 forest. Trees - Trees are domains with sub domains branching off them. Trees connect directly to forests. You can recognize a tree by the branches that connect to the sub directories, or the fact that they are directly connected to a forest. Domains - In topologies, domains are represented by triangles. Domains contain organizational units and other objects. Sites- The physical area where the domain has been created. Sites are independent of domains. There could be multiple domains in a single site, or multiple sites in a single domain.

Answer 10

Trusts are logical agreements allowing multiple domains to authenticate inside of eachothers to access both domains resources. There are 2 different kinds of trusts. Implicit (Transitive) - There by default. If you are in the same tree, you are automatically trusting the other domains in your tree. Explicit Trusts - Need to be explicitly defined. This would include trusts between trees that need to be set up manually to work.

Answer 11

AD DS is object oriented. Its like a file system where the files are full of objects. Each object has its own attributes and properties depending on its function. The directory schema defines the attributes for each objects. You can configure the schema if you want to. Objects are stored inside of a global catalog, and domains maintain global catalog servers to resolve object queries. Objects are divided into OUs (organizational units) which provide logical organization and security as well as administrative division between objects.

Answer 12

Active Directory Domains and Trusts - Allows administrators to view and change information related to various domains. AD Sites and Services - Used to create and manage AD sites and services to map a physical network infrastructure AD Users and Computers - Allows you to set machine and user specific settings across the domain as well as create users and groups. AD Module for PowerShell - Allows you to access a group of special cmdlets to be used in managing AD through PS.

Answer 13

Create a proper internal and external namespace Choose suitible domain and site hierarchy Establish an internal organizational framework using OUs, groups, and GPOs.

Answer 14

Create names with the idea in mind that you can't change them. You can but its a whole thing. Use a simple, common DNS namespace. Start with the external namespace. Create this based on the external registered top level domain name. Integrate this external namespace with a unique internal one, making your namespace more secure.

Answer 15

AD Recycle Bin - Allows you to restore your domains in case of deletion. Activated by default. Fine-Grained Password Policies. These include things such as - Case sensitivity, minimum characters, character types, and time before a password needs to be changed. Domain Rename function - Allows you to change a domain name after creation Cross forests-Transitive trusts relationships - Allows you to set up transitive trusts between multiple domains in the same forest.

Answer 16

The first domain you create in a tree will always be known as the root domain. All other domains in the tree will be subdomains of the root. The tree is populated with subdomains as long as they share a contiguous namespace. Every domain in a tree is treated as a seperate security entity and has their own settings, users, permissions ect.

Answer 17

Single domain Model - Everything inside this model is contained inside of the root domain Multiple Domain Model - This is where we expand from the tree and begin to add sub domains Multiple Domain Single Forest Model - One domain is set as the forest root and controls the schema, while other domains occupy their own name space. Trusts must be explicitly configured between domains. Federated Forests Model - Two domains with completely different schema that share an explicit trust. This contains multiple forest roots and unique namespaces. Empty Root Model - Used for enhanced security, the schema master and domain control is guarded closely and kept completely unpopulated. Great for security but hard on infrastructure.

Answer 18

* Know what you're doing before attempting to design an AD DS domain. * Implement fine grained password policies and AD Recycle Bin to reduce the need for additional domains (both are activated by default in newer versions of Server) * Secure and register a desired external namespace so it isn't taken before you can access it. * Start by considering a single domain model and then expand from there * Use multiple domians for specific needs. Don't make your trees complex for no reason. * Control and optomize replication traffic through the use of sites. * Upgrade any down level clients to reduce administration and maintenance. * Avoid using domain rename until it is a last resort (SUFFOCATION, NO BREATHING DON'T GIVE A

127 Midterm Cards Flashcards

(43 cards)