Active Directory Flashcards

Which Active Directory functional level is required to enable the Dynamic Access Control feature?

Answer: Windows Server 2012

Dynamic Access Control requires a domain functional level of Windows Server 2012, which introduced claim-based access control and central access policies.

What replication protocol is used for inter-site Active Directory replication by default?

Answer: RPC over IP

Inter-site replication defaults to RPC over IP (synchronous), while SMTP is only supported for domains not requiring urgent replication.

Which command verifies that all Active Directory DNS records are properly registered for a domain controller?

Answer: dcdiag /test:dns

Dcdiag /test:dns runs a comprehensive suite of DNS tests to verify SRV record registration and DNS health for domain controllers.

What is a lingering object in Active Directory?

Answer: An object that exists on a DC but has been deleted and tombstoned on all other DCs

A lingering object exists on a DC that was offline longer than the tombstone lifetime, causing it to miss the deletion and keep a stale copy.

In Active Directory, what does the 'last writer wins' conflict resolution rule apply to?

Answer: Attribute-level conflicts during replication

AD uses attribute-level replication and resolves same-attribute conflicts using the version number and then timestamp (last writer wins) at the attribute level.

Which Group Policy processing order correctly reflects how conflicting settings are applied (from lowest to highest precedence)?

Answer: Local → Site → Domain → OU

GPOs are processed in Local → Site → Domain → OU order, with later-processed GPOs (OU) taking precedence over earlier ones.

What is the purpose of the Active Directory Schema snap-in registration command 'regsvr32 schmmgmt.dll'?

Answer: Registers the MMC snap-in DLL so the Schema snap-in appears in MMC

Running regsvr32 schmmgmt.dll registers the Schema Management snap-in DLL, making it available to add in the MMC console.