Active Directory Flashcards

Which Active Directory partition is replicated to all domain controllers in the entire forest?

Answer: Schema partition

The Schema partition is forest-wide and replicated to every DC in the forest, unlike the Domain partition which is replicated only within its domain.

What is the maximum number of trusts a single domain can have in Active Directory?

Answer: No hard limit

Active Directory does not impose a hard limit on the number of trusts a domain can have, though practical limits apply based on hardware and network resources.

In AD DS, which command-line tool is used to seize FSMO roles if the current role holder is permanently offline?

Answer: ntdsutil

Ntdsutil is used to seize FSMO roles forcibly when the current role holder cannot be brought back online.

Which Active Directory feature allows you to restore accidentally deleted objects without restoring from backup?

Answer: Active Directory Recycle Bin

The Active Directory Recycle Bin, introduced in Windows Server 2008 R2, allows full restoration of deleted objects with all attributes intact.

What does the Global Catalog store in addition to a full replica of its host domain's objects?

Answer: Partial replicas of all other domains in the forest

The Global Catalog stores a full replica of its host domain and a partial replica (subset of attributes) of all other domains in the forest.

Which authentication protocol does Active Directory use by default in Windows Server 2008 and later environments?

Answer: Kerberos v5

Kerberos v5 is the default authentication protocol in Active Directory environments running Windows Server 2008 and later.

What is the default tombstone lifetime in Active Directory on Windows Server 2003 SP1 and later?

Answer: 180 days

Starting with Windows Server 2003 SP1, the default tombstone lifetime was increased from 60 to 180 days to allow longer DC offline periods.