MCQ Flashcards

Which Group Policy setting prevents local administrators on member computers from overriding domain GPO settings?

Answer: Enforced (No Override)

Setting a GPO to Enforced prevents child OUs from blocking the policy using Block Inheritance.

A company needs to allow users in a child domain to access resources in a parent domain. Which trust type is created automatically?

Answer: Parent-child trust

Parent-child trusts are created automatically when a child domain is added to an existing domain tree.

What is the purpose of the Infrastructure Master FSMO role?

Answer: Updates cross-domain group-to-user references

The Infrastructure Master updates references to objects in other domains, such as group memberships.

Which Windows Server 2008 feature provides web-based enrollment for digital certificates?

Answer: AD CS Web Enrollment

Active Directory Certificate Services includes a Web Enrollment role service for browser-based certificate requests.

GPO processing order from lowest to highest priority is:

Answer: Local, Site, Domain, OU

GPOs are applied in the order Local → Site → Domain → OU, with later policies winning conflicts.

Which replication topology generator automatically creates connection objects between domain controllers?

Answer: KCC (Knowledge Consistency Checker)

The KCC automatically builds and maintains the intra-site replication topology by creating connection objects.

What minimum functional level is required to enable the Recycle Bin feature in Active Directory?

Answer: Windows Server 2008 R2 forest functional level

The AD Recycle Bin requires the forest functional level to be raised to Windows Server 2008 R2.