click below
click below
Normal Size Small Size show me how
70-294
Microsoft Windows Server 2003 Active Directory
Question | Answer |
---|---|
What is a forest? | Collection of domains that share a common schema and configuration. |
What is a tree? | Collection of domains that share a contiguous namespace. |
What is a domain? | Collection of resources that share a common namespace. |
What is an OU? | A domain specific container that allows for the management of Active Directory resources through GPOs and Delegations. |
What is the global catalog? | A subset of attributes for all objects in Active Directory. |
How many global catalogs exisit by default per forest? | 1 |
How many global catalog server can be configured within a forest? | As many as needed. |
A global catalog server can only be configured on a server functioning as a ___________. | Domain controller |
Where is a global catalog enabled? | Active Directory Sites and Services > Sites > Site Name > Servers > Server Name > NTDS Settings > Properties |
A global catalog should be configured in any location with more than __________ users. | 100 |
A global catalog should be configured in any location that hosts an _________ ___________ application that queries the global catalog. | Active Directory Aware. |
Based on the configuration information given below which cities, in addition to headquarters, should contain global catalog server to enhance the performance of the CosmosAD application which queries the global catalog. | Rio De Janeiro: 700 Computers, CosmosAD application server Nashville: 55 computers, CosmosAD application server.Shanghai: 40 computers, CosmosAD application server. |
How can response time be improved for enterprise level Active Directory aware applications used by clients in all locations? | Configure a global catalog server in each site. |
How can response times be improved for logons at all sites without increasing replication traffic? | Configure UGMC at each site. UGMC = Universal Group Membership Caching. |
How can response time be improved for logons at sites with slow connections? | Enable UGMC to all the sites connected by slow links. |
What two configuration options are available for reducing the amount of logon traffic transferred over wide area networks? | 1. Configure a global catalog server on each side of the wide are network.2. Enable the Universal Group Membership Caching option in sites without a global catalog server OR in addition to GC for fault tolerance for authentication. |
What is the purpose of Universal Group Membership Caching? | To minimize replication traffic over WAN links and facilitate network logons in locations withou a global catalog by caching user's membership in universal groups. |
How often does a server configured with UGMC contact a global catalog to update universal group membership data? | Every 8 hours. |
In a multi-site network what can be done to prevent logon failures in the event of domain controller or WAN link failure? | 1. Configure two servers per site as global catalog servers.2. Configure one global catalog server per site, enable universal group membership caching for each site. |
How is universal group membership caching enabled? | Active Directory Sites and Servers > NTDS Site Settings Properties. |
In a multi-domain environment the _____ operations master role should not be configured on a system that is also functioning as a ______ ______ | Infrastructure, Global catalog |
Where should the PDC Emulator be deployed for optimal network utilization? | In a location with a significant number of clients running legacy operating systems like Windows 98 and Windows NT 4.0 |
Before being able to upgrade a Windows 2000 domain to Windows Server 2003 what utility must be executed? | adprep.exe / forestprep and adprep.exe / domain prep |
Executing the adprep.exe/forestprep utility requires ______ administrator privileges and should be run on the domain controller funcioning as the ______ operations master. | enterprise, schema master |
What utility installs Active Directory? | Dcpromo |
What utility removes Active Directory? | Dcpromo |
How can Active Directory be installed from backup media? | Dcpromo /adv |
How can Actice Directory be removed from a system that has been taken offline and had all AD references deleted? | Dcpromo /forceremoval |
In order to successfully add a new child domain to the forest the account proveded uring the dcpromo process must have what level of credentials? | Enterprise Admins |
What must be done before being able to promote a new domain controller with the same name as a previous domain controller that experienced hardware failure? | The ntdsutil must be run with the metadata cleanup option |
How should DNS be configured for a server that is to be promoted as the first domain controller of a child domain? | The DNS settings should point to a server that is authoritative for the parent domain. |
How should the Active Directory infrastructure be configured to prevent authentication failures and data loss in each site? | Configure at least 2 domain controllers for each site. |