Active Directory Infrastructure Design Flashcards

Which FSMO role updates cross-domain object references (phantom objects) to keep them consistent across domains in the forest?

Answer: Infrastructure Master

The Infrastructure Master is responsible for updating references to objects in other domains so that cross-domain group memberships remain accurate.

When designing a Read-Only Domain Controller (RODC) deployment, which policy controls which account passwords are allowed to be cached on the RODC?

Answer: Password Replication Policy

The Password Replication Policy on each RODC defines the Allowed and Denied lists of accounts whose credentials may be cached locally.

What is the recommended placement for the PDC Emulator FSMO role in a multi-site Active Directory environment?

Answer: At the site with the best connectivity to all other sites

The PDC Emulator should be at the best-connected site because it receives urgent replication notifications from all DCs and handles time synchronization.

Which AD DS component stores information about the physical network topology and is used by the KCC to generate an optimal replication topology?

Answer: Site

AD DS Sites represent well-connected IP subnets and are used by the Knowledge Consistency Checker (KCC) to build the inter-site replication topology.

Which replication protocol is preferred for inter-site Active Directory replication because it supports synchronous replication of all directory partitions?

Answer: RPC over IP

RPC over IP is preferred for inter-site replication because it replicates all naming contexts synchronously, whereas SMTP only works for non-domain partitions.

What Windows Server 2012 feature exposed to virtual machines prevents USN rollback when a Hyper-V snapshot of a domain controller is restored?

Answer: VM-GenerationID

VM-GenerationID notifies the domain controller when a VM snapshot has been applied, triggering automatic USN rollback protection and safe virtualization handling.