MCM Active Directory 1 — Questions and Answers
Question 1: What is the primary purpose of Active Directory?
- To manage system updates.
- To monitor network traffic.
- To centralize resource management and security. (Correct answer)
- To configure hardware devices.
Correct answer: To centralize resource management and security.
Active Directory's primary purpose is to provide a centralized, hierarchical directory service for managing network resources like users, computers, and groups. It enables administrators to enforce security policies, authenticate users, and control access to resources across an entire Windows domain. This centralization simplifies administration and enhances security.
Question 2: Which protocol is used by Active Directory for communication?
- HTTP
- LDAP (Correct answer)
- FTP
- SNMP
Correct answer: LDAP
Active Directory primarily uses the Lightweight Directory Access Protocol (LDAP) for communication between clients and servers. LDAP is a standard protocol for accessing and maintaining distributed directory information services. It allows users and applications to query and modify directory data efficiently.
Question 3: What does the Group Policy feature in Active Directory do?
- Manages email accounts.
- Manages and enforces security settings and configurations. (Correct answer)
- Monitors network bandwidth.
- Controls user internet access.
Correct answer: Manages and enforces security settings and configurations.
Group Policy is a powerful feature within Active Directory that allows administrators to manage and enforce security settings, software installations, and various configurations for users and computers. It provides a centralized way to define the working environment for users and computer accounts. This ensures consistent security and operational policies across the organization.
Question 4: Which tool is used to manage Active Directory on Windows Server?
- Server Manager
- Active Directory Users and Computers (Correct answer)
- Task Scheduler
- Event Viewer
Correct answer: Active Directory Users and Computers
Active Directory Users and Computers (ADUC) is the primary graphical user interface (GUI) tool used by administrators to manage Active Directory objects. It allows for the creation, modification, and deletion of users, groups, computers, and organizational units within a domain. This tool is essential for day-to-day Active Directory administration.
Question 5: What does the term 'Trust Relationship' in Active Directory refer to?
- A link between two network devices.
- A secure communication protocol.
- A security relationship between two domains. (Correct answer)
- A backup system for domain controllers.
Correct answer: A security relationship between two domains.
A Trust Relationship in Active Directory establishes a secure communication path and allows users in one domain to be authenticated by a domain controller in another domain. This enables users and resources in different domains to access each other, facilitating resource sharing and centralized management across multiple domains. It's crucial for multi-domain environments.
Question 6: What is an Organizational Unit (OU) in Active Directory?
- A type of domain.
- A physical device in the network.
- A container used to organize resources within a domain. (Correct answer)
- A service that monitors user activity.
Correct answer: A container used to organize resources within a domain.
An Organizational Unit (OU) is a container object within an Active Directory domain that allows for the hierarchical organization of users, groups, computers, and other OUs. OUs are used to delegate administrative control and apply Group Policy settings to specific subsets of objects. This structure simplifies management and allows for granular control within a domain.
Question 7: Which of the following is a key feature of Active Directory Domain Services (AD DS)?
- It provides a web hosting solution.
- It provides centralized user authentication and authorization. (Correct answer)
- It handles email management.
- It provides database management services.
Correct answer: It provides centralized user authentication and authorization.
Active Directory Domain Services (AD DS) is the core component of Active Directory, providing a centralized system for user authentication and authorization. It allows users to log in once and access various network resources based on their assigned permissions. This enhances security, simplifies access management, and provides a single sign-on experience.
Question 8: What is the function of DNS in Active Directory?
- It manages user authentication.
- It resolves domain names to IP addresses for locating resources. (Correct answer)
- It provides file sharing services.
- It monitors network traffic.
Correct answer: It resolves domain names to IP addresses for locating resources.
DNS (Domain Name System) is critical for Active Directory because it resolves human-readable domain names to numerical IP addresses, allowing computers to locate domain controllers and other network resources. Without proper DNS resolution, Active Directory services would not function correctly. It acts as the 'phone book' for the network.
Question 9: Which of the following is an example of a default Active Directory group?
- Domain Admins (Correct answer)
- Marketing Team
- Network Admins
- Finance Team
Correct answer: Domain Admins
"Domain Admins" is a powerful default security group created automatically when an Active Directory domain is established. Members of this group have full administrative control over the entire domain, including all domain controllers and objects. It is a critical built-in group for managing the Active Directory environment.
MCM Active Directory 1
What is the primary purpose of Active Directory?