Active Directory 5

Question 1

What setspn.exe command is used to create an SPN?

Answer 1

the setspn -s command

Question 2

What would you run from the command line to register SPN http/srv55.nutex.com for a Windows Server 2012 R2 server named srv55?

Answer 2

setspn -S http/srv55.nutex.com srv55

Question 3

Which Kerberos policy setting determines the maximum time difference that Kerberos V5 tolerates between the client clock and the clock on the domain controller that performs authentication?

Answer 3

Maximum tolerance for computer clock synchronization

Question 4

What parameter of the Install-ADDSDomainController cmdlet is used to install and configure DNS on the domain controller?

Answer 4

the -InstallDns parameter

Question 5

What commands must you run at the ntdsutil prompt to clean up server metadata?

Answer 5

metadata cleanup

remove selected server

Question 6

When you use the Dsamain tool to offer LDAP services to a mounted ntds.dit file, which port number can you NOT use for the ldapport number?

Answer 6

389

Question 7

How can you restore the values of an object’s attributes after they have been modified?

Answer 7

Mount an Active Directory snapshot, export the object, and import the object to the live Active Directory database.

Question 8

What PowerShell cmdlet would allow you to view the settings of a Password Settings Object (PSO)?

Answer 8

the Get-ADFineGrainedPasswordPolicy cmdlet

Question 9

Which cmdlet is used to restore deleted objects from the Active Directory Recycle Bin to their original location?

Answer 9

Restore-ADObject

Question 10

What two conditions govern the presence or absence of the Delegation tab on the properties of a service?

Answer 10

an SPN must exist and the domain must be at the Windows Server 2003 level, or later

Question 11

To what container should you set the Base DN to in the Search box of the ldp.exe tool when performing tombstone reanimation of a user account in nutex.com?

Answer 11

CN=Deleted Objects, DC=nutex, DC=com

Question 12

To use Kerberos authentication with SQL Server, which two conditions are required?

Answer 12

The client and server computers must be part of the same Windows domain, or in trusted domains.
Service Principal Name (SPN) must be registered with Active Directory

Question 13

If you have enabled the Active Directory Recycle Bin in the forest, what container in Active Directory will contain users, groups, and other objects after they have been deleted?

Answer 13

The Deleted Objects container