Administering Windows Server 2012 Active Directory & Identity Management 2 — Questions and Answers
Question 1: In Active Directory, what is a Global Catalog server used for?
- Storing FSMO roles only
- Enabling cross-domain object searches and universal group membership resolution (Correct answer)
- Managing DNS zones
- Handling Kerberos ticket granting
Correct answer: Enabling cross-domain object searches and universal group membership resolution
A Global Catalog server stores a partial replica of all objects in the forest, enabling cross-domain searches and resolving universal group memberships during logon.
Question 2: Which FSMO role is responsible for handling password changes and account lockout processing in Active Directory?
- Schema Master
- RID Master
- PDC Emulator (Correct answer)
- Infrastructure Master
Correct answer: PDC Emulator
The PDC Emulator FSMO role handles password changes, account lockouts, and acts as the authoritative time source for the domain.
Question 3: What does the command 'netdom query fsmo' do in Windows Server 2012?
- Transfers FSMO roles to another DC
- Displays which DC holds each FSMO role (Correct answer)
- Seizes FSMO roles after a DC failure
- Lists all domain controllers in the forest
Correct answer: Displays which DC holds each FSMO role
Running 'netdom query fsmo' displays the current holders of all five FSMO roles in the domain and forest.
Question 4: In Windows Server 2012 AD DS, what is the purpose of a Site Link?
- Define trust relationships between domains
- Control replication traffic between AD sites (Correct answer)
- Link GPOs to OUs
- Manage FSMO role placement
Correct answer: Control replication traffic between AD sites
Site links define the replication schedule, cost, and interval for AD replication between sites, helping optimize WAN bandwidth usage.
Question 5: Which Windows Server 2012 feature enables you to deploy multiple password policies to different users or groups within the same domain?
- Group Policy password settings
- Fine-Grained Password Policies (PSOs) (Correct answer)
- Local Security Policy
- Default Domain Policy
Correct answer: Fine-Grained Password Policies (PSOs)
Fine-Grained Password Policies use Password Settings Objects (PSOs) to apply distinct password requirements to specific users or global security groups.
Question 6: What is the role of the Schema Master FSMO in Windows Server 2012 Active Directory?
- Manage domain-wide RID pools
- Control all writes to the AD schema (Correct answer)
- Synchronize time between DCs
- Resolve inter-domain group memberships
Correct answer: Control all writes to the AD schema
The Schema Master is the only DC that can process writes to the Active Directory schema, such as those performed when extending the schema for Exchange or Lync.
Administering Windows Server 2012 Active Directory & Identity Management 2
In Active Directory, what is a Global Catalog server used for?