Installing and Configuring Windows Server 2012 Exam Active Directory & Identity Services 2 — Questions and Answers
Question 1: Which Active Directory group scope can contain members from any domain in the forest and be assigned permissions in any domain?
- Domain Local
- Global
- Universal (Correct answer)
- Distribution
Correct answer: Universal
Universal groups can contain members from any domain in the forest and be assigned permissions in any domain within the forest.
Question 2: Which user account attribute must be unique within an Active Directory domain?
- Display Name
- SAMAccountName (Correct answer)
- First Name
- Description
Correct answer: SAMAccountName
The SAMAccountName (pre-Windows 2000 logon name) must be unique within the domain for authentication to function correctly.
Question 3: Which command-line tool imports Active Directory user accounts from a CSV file?
- netdom
- dsadd
- csvde (Correct answer)
- ldifde
Correct answer: csvde
CSVDE (CSV Directory Exchange) reads comma-separated value files to bulk-import user accounts and other objects into Active Directory.
Question 4: Which group type is used only for email distribution and cannot be used for security permission assignments?
- Security group
- Distribution group (Correct answer)
- Universal group
- Domain Local group
Correct answer: Distribution group
Distribution groups are email lists only and cannot be used to assign security permissions to resources.
Question 5: Where are new user accounts created by default in Active Directory if no OU is specified?
- Domain root
- Users container (Correct answer)
- Computers container
- Built-in container
Correct answer: Users container
New user accounts created without specifying an OU are placed in the default Users container, which is not an OU and cannot have GPOs linked directly to it.
Question 6: What is the maximum number of objects a single Organizational Unit (OU) can contain in Active Directory?
- 1,000
- 10,000
- 100,000
- No practical limit (Correct answer)
Correct answer: No practical limit
There is no practical limit to the number of objects an OU can contain; Active Directory is designed to scale to millions of objects.
Installing and Configuring Windows Server 2012 Exam Active Directory & Identity Services 2
Which Active Directory group scope can contain members from any domain in the forest and be assigned permissions in any domain?