MCQ Flashcards

Which AD DS partition is replicated to every domain controller in the entire forest?

Answer: Schema partition

The Schema partition is replicated forest-wide to every domain controller, as is the Configuration partition.

A new Windows Server 2008 domain controller must be added to an existing site. What must be configured for the DC to be placed in the correct site?

Answer: A subnet object associated with the site

Subnet objects in AD Sites and Services map IP subnets to sites, determining where DCs are automatically placed.

What does the 'gpresult /r' command display?

Answer: The RSoP (Resultant Set of Policy) summary for the current user and computer

Gpresult /r shows a summary of applied GPOs and their details for the logged-on user and computer.

Which service replicates SYSVOL content between domain controllers in Windows Server 2008 domains at the Windows Server 2008 functional level?

Answer: DFS-R (Distributed File System Replication)

Windows Server 2008 domain functional level uses DFS-R instead of the older FRS to replicate SYSVOL.

An administrator wants to prevent a specific GPO from applying to one security group in an OU while still applying to others. What should be used?

Answer: Deny Apply Group Policy permission for that security group

Denying the 'Apply Group Policy' permission for a security group prevents that GPO from affecting group members.

Which Active Directory role service issues and manages digital certificates for an organization?

Answer: AD CS (Certificate Services) — Certification Authority

The Certification Authority role service within AD CS issues, revokes, and manages digital certificates.

What is the primary purpose of Universal groups in Active Directory?

Answer: To consolidate group memberships across multiple domains in a forest

Universal groups are used to aggregate members from multiple domains and are stored in the Global Catalog.