Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

70-742 > Install and configure Active Directory Domain Services > Flashcards

Install and configure Active Directory Domain Services Flashcards

1
Q

What components is Active Directory made up of?

A

Domains, Forests, Sites, Domain Controllers, Organizational Units, FSMO (Flexible single master operation) Roles.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What command sequence is used to transfer a FSMO role?

A
  1. ntdsutil.exe
  2. roles
  3. connections
  4. connect to server
  5. quit
  6. transfer role_name
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Which feature requires raising the forest and domain function levels to Server 2016?

A

Group Membership Expriation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Which command creates the file required to deploy a new domain controller using the Install From Media (IFM) option?

A

ntdsutil

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Your Active Directory environment consists of two forests. Each forest contains two domains.

How many Active Directory schemas exist in this configuration?

A

2

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Which command configures Active Directory of Server Core?

A

Install-ADDSDomainController

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Which two Domain Controller options are enabled by default?

A

DNS

Global Catalog

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Which are two valid fields within a DNS SRV record?

A

Weight

Port

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Which Domain Controller attribute shows that a Global Catalog is active?

A

isGlobalCatalogReady

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Which FSMO role allocates blocks of uniquie IDs to Domain Controllers?

A

RID Master

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What commands would a create IFM data file?

A
  1. ntdsutil
  2. activate instance ntds
  3. ifm
  4. create sysvol full C:\IFM
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is the max numbers of RODC that should be deployed in a site?

A

One

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What tool can be used to verify the Global Catalog?

A

ldp.exe

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What command will show which servers currently hold the FSMO role

A

netdom query fsmo

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

You are attempting to prepopulate user credentials for users at a remote branch office where a RODC is deployed, however the credentials never replicate to the RODC.

Whay should you check?

A

Allowed RODC Passwrod Replication Group

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Which Forest Functional Level is required to deploy a RODC?

A

Server 20018

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What are the two Forest level FSMO roles

A

Schema master - responsible for having a single copy of the schema shared by all domains in the forest.

Domain naming master - ensures that unique domain names are used through the forest.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What are the the three Domain level FSMO roles?

A

Relative identifier (RID) master - used to provide RID pools to domain controllers which in turn are used when creating new security principals.

Primary domain controller (PDC) emulator - responsible for time synchronization and password replication.

Infrastructure master - responsible for the consistency of references to objects between domains within a forest.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What doe the Schema master do?

A

Responsible for having a single copy of the schema shared by all domains in the forest.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What does the Domain naming master do?

A

Ensures that unique domain names are used through the forest.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What does the Relative identifier (RID) master do?

A

Used to provide RID pools to domain controllers which in turn are used when creating new security principals.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What does the Primary domain controller (PDC) emulator do?

A

Responsible for time synchronization and password replication.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What does the Infrastructure master do?

A

Responsible for the consistency of references to objects between domains within a forest.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Which cmdlet can be used to view inactive user accounts?

A

Search-ADAccount

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
What cmdlet is used to install a RODC?
Install-ADDSDomainController -ReadOnly
26
What PowerShell commands will create a first domain controller?
1. Install-WindowsFeature -Name ad-domain-services -IncludeManagementTools 2. Install-ADDSForest -DomainName "company.pri" 3. Enter a safe mode password
27
What PowerShell command add another domain controller to a domain?
1. Install-WindowsFeature -Name ad-domain-services 2. Install-ADDSDomainController -DomainName "company.pri" -Credential (Get-Credential company\administrator) 3. Enter a safe mode password
28
What PowerShell command will remove a domain controller from a domain?
Uninstall-ADDSDOmainController
29
What are the steps for creating IFM media?
1. Launch NTDSUTIL 2. Enter: activate instance ntds 3. Enter ifm 4. Enter create sysvol full
30
What cmdlet will install ADDS from an IFM file?
Install-ADDSDomainController with the -InstallationMediaPath switch
31
What is an Active Directory forest?
A forest is a collestion of AD Domains that share a common schema and are bound by an automatically created two-way trust relationship.
32
What is an AD Domain?
A domain is a logical unit that contains users, groups, computers and other objects..
33
What group can manage multiple domains in a forest?
Enterprise Admins
34
What is a Tree?
A collection AD DS domains that share a common root domain and have a contigous namespace.
35
What is the AD DS schema?
A collection of objects types and their properties (aka attributes), that define what sort of objects you can create and manage within your AD DS forest.
36
What is an OU?
A container within a domain that contains users, groups, computers and other OU.
37
What is a container?
A collection of objects or collections grouped together. **_Cannot_** be linked to GPOs.
38
What is a site?
A logical representation of a physical location within your organisation.
39
What site is created when you install AD DS and create a forest?
Default-First-Site-Name
40
Why should you define subnets?
It makes it possible for the AD DS forest to determine the physical location of a computer in relation to services offered in the forest.
41
What are the three partitions in a domain?
Schema Configuration Domain
42
What is the Schema partition?
A forest-level partition, which changes rarely.
43
What does the schema partition contain?
The AD DS forest schema.
44
What is the Configuration partition?
A forest-level partition that changes rarely.
45
What does the Configuration partation contain?
Configuration data for the forest.
46
What is the Domain partition?
A writable copy of the domain which is stored on all domain controllers. It changes frequently.
47
What does the domain partition contain?
The actual objects , such as users and computers, which exist within your forest.
48
What is a Trust Relationship?
A sceurity agreement between two domains in an AD DS forest, or between a forest and an external security realm.
49
What cmdlet will install the necessary files for AD DS?
Install-WindowsFeature AD-Domain-Services
50
What cmdlet will perform AD DS promotion?
Install-ADDSDomainController -InstallDNS -DomainName
51
What is the default location for the AD DS Database?
C:\Windows\NTDS
52
What is the default location for the AD DS log files?
C:\Windows\NTDS
53
What is the default location for the SYSVOL folder?
C:\Windows\SYSVOL
54
What level of permission is required to add a new domain controller to an existing domain?
Domain Admin
55
What level of permission is required to add a new domain controller in a new domain as part of an existing domain tree or as part of a new domain tree?
Enterprise Admins
56
How do you remove a domain controller from a domain?
Remove the Active Directory Domain Services feature from the computer.
57
What cmdlets will remove a domain controller from a domain?
Uninstall-ADDSDomainController Uninstall-WindowsFeature AD-Domain-Services
58
What is the Global Catalog?
A partial read only copy of all objects in the forestand it hosts a subset of all AD DS account schema attributes
59
Where is adprep.exe located?
Server 2016 media in directory: \Support\Adprep
60
What cmdlets will retrieve information about the current Schema and Domain naming master role holders?
Get-ADForest Get-ADDomain
61
What does the PDC emulator role do?
Acts as a time source in the domain. Propagates password changes Provides a primary source for GPOs for editing purposes
62
What does the Infrastructure master role do?
Maintains inter-domain references, and consequently, this role is only relevant in multidomain forests.
63
What does the RID master role do?
Provides blocks of IDs to each of the domain controllers in its domain.
64
What cmdlet will move an operations master role
Move-ADDirectoryServiceOperationsRole -Identity - OperationMasterRole Use -Force is DC hosting role is offline NTDSUTIL.exe
65
What are the identifier numbers of the operations master role
0 - PDC Emulator 1 - RID Master 2 - Infrastructure Master 3 - Schema Master 4 - Domain Naming Master
66
What AD group can be used instead of Administrators to create users and computers?
Account Operators group
67
Define UPN?
User Principal Name. The user name.
68
What is best practice when it comes to template accounts?
Prevent use of the account by: Disable the account Set: User Cannot Change Password.
69
What cmdlet will reset a users password
Set-ADAccountPassword -Identity 'Path to user object' -Reset -NewPassword (Password)
70
What cmdlet will move an object?
Move-ADObject -Identity -TargetPath -
71
What command line tool can be used to mange users and computers other than PowerShell
dsmod.exe
72
What cmdlet creates user accounts?
New-ADUser
73
What cmdlet modifies the properties of user accounts?
Set-ADUser
74
What cmdlet deletes user accounts?
Remove-ADUser
75
What cmdlet resets the password of a user account?
Set-ADAccountPassword
76
What cmdlet modifies the expiration date of a user account?
Set-ADAccountExpiration
77
What cmdlet unlocks a user account?
Unlock-ADAccount
78
What cmdlet enables a user account?
Enable-ADAccount
79
What cmdlet disables a user account?
Disable-ADAccount
80
What groups have permissions to create computers in any OU?
Enterprise Admins Domain Admins Administrators Account Operators
81
Where would you change the maximum numbers of computers a standard user can add to a domain?
Active Directory Services Interfaces Editor ADSI Edit
82
What cmdlet creates a new computer account?
New-ADComputer
83
What cmdlet displays the properties of a computer account?
Get-ADComputer
84
What cmdlet modifies the properties of a computer account?
Set-ADComputer
85
What cmdlet deletes a computer account?
Remove-ADComputer
86
What cmdlet verifies or repairs the trust relationship between a compter and the domain?
Test-ComputerSecureChannel
87
What cmdlet resets the password for a computer account?
Reset-ComputerMachinePassword -Repair
88
Where are universal groups membership lists maintained?
Global Catalog
89
What cmdlet creates a new group?
New-ADGroup
90
What cmdlet modifies the properties of groups?
Set-ADGroup
91
What cmdlet displays the properties of groups?
Get-ADGroup
92
What cmdlet deletes groups?
Remove-ADGroup
93
What cmdlet adds members to groups?
Add-ADGroupMember
94
What cmdlet displays the members of a group?
Get-ADGroupMember
95
What cmdlet removes members from a group?
Remove-ADGroupMember
96
What cmdlet adds group membership to objects?
Add-ADPrincipalGroupMembership
97
What cmdlet displays group membership of objects?
Get-ADPrincipalGroupMembership
98
What cmdlet removes group membership from an object?
Remove-ADPrincipalGroupMembership
99
What cmdlet will create OUs?
New-ADOrganizationalUnit
100
What cmdlet modifies the properties of OUs?
Set-ADOrganizationalUnit
101
What cmdlet displays the properties of OUs?
Get-ADOrganizationalUnit
102
What cmdlet will delete OUs?
Remove-ADOrganizationalUnit
103
What three accounts should be used for services instead of a standard account
NT AUTHORITY\SYSTEM NT AUTHORITY\LOCAL SERVICE NT AUTHORITY\NETWORK SERVICE
104
Where are MSAs stored in ActiveDirectory
Managed Service Accounts container. Advanced Feature view must be enbaled.
105
What is a SPN?
Service Principal Name A unique identifier for a specific service instance and are used to associate a service instance with a service account.
106
What do you need to create a gMSA
* Client computers must run at least Windows 8 * You must create a key distribution services (KDS) root key for your domain * At least one domain controller must be running Windows Server 2012 or later
107
What cmdlet will create a key distribution services (KDS) root key.
Add-KdsRootKey –EffectiveImmediately
108
How long before a key distribution services (KDS) becomes active?
10 hours. This is to allow AD DS to replicate the change throughout your forest.
109
What site is created when you first install AD DS and create your forest?
Default-First-Site-Name

70-742 (2 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions