ACL ACL in Active Directory & LDAP

Question 1

In Active Directory, what is an Access Control Entry (ACE)?

Accepted Answer

An individual permission rule specifying a trustee and the access rights granted or denied

Answer

A certificate used to authenticate domain users

Answer

A Group Policy Object that controls login permissions

Answer

A Kerberos ticket granting access to domain resources

Question 2

Which tool and setting must be enabled to view and edit ACLs on Active Directory objects?

Accepted Answer

Active Directory Users and Computers with Advanced Features enabled

Answer

Group Policy Management Console

Answer

Windows Defender Firewall

Answer

Event Viewer

Question 3

What is AdminSDHolder in Active Directory?

Accepted Answer

A protected container object whose ACL is periodically applied to privileged accounts and groups

Answer

A service account with domain admin privileges

Answer

A group policy that prevents modification of admin accounts

Answer

A backup domain controller for administrative functions

Question 4

In LDAP implementations, where is access control information typically stored for directory entries?

Accepted Answer

In operational attributes such as `aci` or `entryACI`

Answer

In the cn attribute

Answer

In the objectClass attribute

Answer

In a standard user attribute called aclRights

Question 5

What Active Directory permission allows a user to create new objects within an Organizational Unit?

Accepted Answer

Create Child Objects

Answer

Read

Answer

Write

Answer

Full Control

Question 6

What is ACL-based delegation in Active Directory?

Accepted Answer

Granting specific, limited permissions on AD objects to non-admin users for defined administrative tasks

Answer

Assigning domain admin rights to helpdesk staff

Answer

Delegating Kerberos authentication to a service account

Answer

Transferring FSMO roles between domain controllers