Administering Windows Server 2012 Active Directory & Identity Management 1 — Questions and Answers
Question 1: Which tool is used to create and manage organizational units (OUs) in Active Directory on Windows Server 2012?
- Active Directory Users and Computers (Correct answer)
- Server Manager
- Group Policy Management Console
- Active Directory Sites and Services
Correct answer: Active Directory Users and Computers
Active Directory Users and Computers (ADUC) is the primary MMC snap-in used to create and manage OUs, users, and groups in AD DS.
Question 2: What is the default tombstone lifetime for deleted objects in Active Directory on Windows Server 2012?
- 30 days
- 60 days
- 90 days (Correct answer)
- 180 days
Correct answer: 90 days
The default tombstone lifetime in Windows Server 2012 Active Directory is 180 days, allowing deleted objects to be recovered within that window.
Question 3: Which Windows Server 2012 feature allows you to recover accidentally deleted Active Directory objects without restoring from backup?
- Shadow Copies
- Active Directory Recycle Bin (Correct answer)
- Windows Server Backup
- Volume Shadow Copy Service
Correct answer: Active Directory Recycle Bin
The Active Directory Recycle Bin, enabled via Active Directory Administrative Center or PowerShell, allows full recovery of deleted AD objects.
Question 4: In Windows Server 2012, which cmdlet is used to install a new Active Directory Domain Services domain controller?
- Add-WindowsFeature AD-Domain-Services
- Install-ADDSDomainController (Correct answer)
- New-ADDomain
- Set-ADForestMode
Correct answer: Install-ADDSDomainController
Install-ADDSDomainController is the PowerShell cmdlet used to promote a server to a domain controller in Windows Server 2012.
Question 5: What is the purpose of a Read-Only Domain Controller (RODC) in Windows Server 2012?
- Provide faster write operations
- Host AD DS in branch offices with limited physical security (Correct answer)
- Replace writable DCs in the main datacenter
- Synchronize time across the forest
Correct answer: Host AD DS in branch offices with limited physical security
RODCs hold a read-only copy of the AD database and are designed for branch offices where physical security cannot be guaranteed.
Question 6: Which Active Directory functional level must be enabled to use Fine-Grained Password Policies (FGPP) in Windows Server 2012?
- Windows Server 2003
- Windows Server 2008 (Correct answer)
- Windows Server 2008 R2
- Windows Server 2012
Correct answer: Windows Server 2008
Fine-Grained Password Policies require a minimum domain functional level of Windows Server 2008.
Administering Windows Server 2012 Active Directory & Identity Management 1
Which tool is used to create and manage organizational units (OUs) in Active Directory on Windows Server 2012?