|
In Windows Server 2012 R2, after a user logs on to Active Directory, a(an) ________ is created that identifies the user and all the user’s group memberships. access token |
access token |
|
Some of the following groups might grant or deny permissions to any resource located in any domain in the forest. Of them, which one’s membership is replicated only in the domain controllers of the same domain? Universal groups |
Global groups |
|
Of the key reasons for creating organizational units, which of the following is NOT one of them? Delegating administration Assigning Group Policy settings Duplicating organizational divisions Assigning permissions to network resources |
Assigning permissions to network resources |
|
What command-line utility allows administrators to modify a group’s type and scope as well as add or remove members? PowerShell and the applicable cmdlet Active Directory Users and Computers console Active Directory Administrative Center Dsmod.exe |
Dsmod.exe |
|
What are the different kinds of groups? There are two types: security and distribution. There are two types: security and distribution; and there are three group scopes: domain local, global, and universal. There are three group scopes: domain local, global, and universal. There are three group types: domain local, global, and universal. |
There are two types: security and distribution; and there are three group scopes: domain local, global, and universal. |
|
Members of a universal group can come ______. from different organizational units from different domains from trusted forests only from within the domain |
from trusted forests |
|
What is a key difference between a domain tree hierarchy and the organizational unit (OU) hierarchy within a domain?
Ability to apply Group Policy |
Inheritance |
|
Which of these groups is not related to security and cannot have permissions assigned to it? Universal groups |
Distribution groups |
|
You are planning an Active Directory implementation for a company that currently has sales, accounting, and marketing departments. All department heads want to manage their own users and resources in Active Directory. What feature will permit you to set up Active Directory to allow each manager to manage his or her own container but not any other containers? Multimaster replication |
Delegation of control |
|
Which of these groups would an administrator use to assign permissions to resources in the same domain? Universal groups |
Domain local groups |
|
What is the group scope for Domain Admins, Domain Controllers, and Domain Users default groups? Distribution |
Global |
|
What is the only OU created by default after installing Active Directory? Users OU |
Domain Controllers OU |
|
Which of the following is NOT an example of a special identity?
Dialup Service |
Dialup Service |
|
What is the primary difference between universal groups and global groups in Windows Server 2012 R2? Global groups use less data in the global catalog. So, in considering replication traffic, universal groups should be within a site. Universal groups use less data in the global catalog. So, in considering replication traffic, global groups should be within a site. Universal groups use more data in the global catalog. However, global groups are best in general, both within a site and across sites. Global groups use less data than universal groups, but not significantly. |
Global groups use less data in the global catalog. So, in considering replication traffic, universal groups should be within a site. |
|
Which of these groups’ membership is stored in the global catalog? Universal groups |
Universal groups |
|
Even when OUs have been nested to many levels, they still will not adversely affect the response time to resource requests or complicate the application of Group Policy settings. T/F |
False |
|
Which of the following is NOT a group scope? Universal groups |
Security groups |
|
Which of the following default groups is a universal group? Certificate Publishers |
Enterprise Admins |
|
An administrator needs to grant an e-mail distribution group of 100 members access to a database, how would the administrator proceed? The e-mail group is obsolete and can be dissolved. Assign the necessary access permissions to the database to the distribution group. Create a new group with the 100 members, then assign permissions. Remove the distribution group, and then convert the members into a universal group, granting access permissions. Convert the distribution group to a security group and then assign the group access permissions. |
Convert the distribution group to a security group and then assign the group access permissions. |
|
Of the default groups created when Active Directory is installed, what are the types of those groups? Distribution groups |
Security groups |
|
How do groups differ from OUs? Groups are security principals, meaning you assign access permissions to a resource based on membership in a group. OUs are for organization and for assigning Group Policy settings. Groups are created by Server Manager, but you create OUs by scripts. OUs are security principals, meaning you assign access permissions to a resource based on membership in an organizational unit. Groups are for organization and for delegating permissions. |
Groups are security principals, meaning you assign access permissions to a resource based on membership in a group. OUs are for organization and for assigning Group Policy settings. |
|
Within a domain, the primary hierarchical building block is the _________.
forest |
organizational unit |
|
You are attempting to delete a global security group in the Active Directory Users and Computers console, and the console will not let you complete the task. Which of the following could possibly be causes for the failure? (Choose all answers that are correct.) One of the group’s members has the group set as its primary group. You cannot delete global groups from the Active Directory Users and Computers console. There are still members in the group. One of the group’s members has the group set as its primary group. |
You do not have the proper permissions for the container in which the group is located. One of the group’s members has the group set as its primary group. |
|
The Delegation of Control Wizard is capable of ________ permissions. granting |
granting |
|
You can use a security group to grant permissions to resources and to enable email access. A distribution group, however, can only be used for email purposes; it cannot bu used to secure resources on your network. T/F |
T |
Share This
Flashcard
