Chapter 4: Global Catalog and Flexible Single Master Operations (FSMO) Roles

Question 1

Active Directory will tolerate a maximum of a 5 minute ______ between a client and the domain controller that authenticates it.

Answer 1

clock skew

Question 2

The ________ is responsible for managing time synchronization within a domain.

Answer 2

PDC Emulator

Question 3

You can improve login times in a site that does not contain a global catalog server by implementing _________

Answer 3

Universal Group membership Caching

Question 4

To add or remove an application directory partition from Active Directory, the _______ needs to be accessible.

Answer 4

Domain Name Master

Question 5

If a domain controller that holds a FSMO role fails and will not be returned to the network, you can _______ the FSMO role to another domain controller.

Answer 5

Role Seizure

Question 6

You can add additional attributes to the_____ by modifying the Active Directory schema.

Answer 6

Partial attribute set (PAS)

Question 7

The _______uniquely identifies an object within an Active Directory domain, but will change if an object is moved from one domain to another.

Answer 7

Security identifier

Question 8

The __________ FSMO role should not be housed on a domain controller that has been configured as a global catalog.

Answer 8

Infrastructure master

Question 9

You can transfer the ________FSMO from one domain controller to another using the Active Directory Domains and Trusts MMC snap-in.

Answer 9

Role Transfer

Question 10

Membership information for a(n) ______ is stored on the global catalog

Answer 10

universal group

Question 11

What is the Active Directory component that contains a reference to all objects within Active Directory called?

Answer 11

Global catalogue

Question 12

Which of the following roles is a forest-wide FSMO role?

Answer 12

Scheme Master

Question 13

To which port does the _gc SRV record listen?

Answer 13

TCP 3268

Question 14

You are the administrator of an Active Directory forest that contains a forest root domain with three child domains. How many of each FSMO does this forest contain?

Answer 14

1 Domain Naming Master, 
1 Schema Master, 
4 PDC Emulators, 
4 Infrastructure Masters,
4 RID Masters

Question 15

The Schema Master FSMO for your forest will be taken offline for a few hours so that your hardware vendor can replace the motherboard of the server. To allow your clients to continue to log in, what is the minimum that you need to do?

Answer 15

Do nothing. Your clients will still be able to log in while the Schema master is offline

Question 16

You are a member of the Domain Admins group of a child domain on an Active Directory network. You have an application that requires you to configure an application directory partition, but you find that you are unable to do so. What could be preventing you from creating an application directory partition in your domain?

Answer 16

You must be a member of the Schema Admins group to create an application directory partition

Question 17

The RID Master FSMO distributes RIDs to domain controllers in increments of _____.

Answer 17

500

Question 18

You are logging on to an Active Directory child domain from a workstation running Windows Vista Business. By default, where will this workstation look to synchronize its clock with the domain?

Answer 18

The PDC Emulator for the child domain.

Question 19

Each object’s SID consists of two components: the domain portion and the ______.

Answer 19

relative identifier

Question 20

You can view and manage the PDC Emulator FSMO role holder using which utility?

Answer 20

Active Directory Users and Computers