MCQ Flashcards

Which tool allows an administrator to perform an authoritative restore of accidentally deleted AD objects?

Answer: ntdsutil with authoritative restore

Ntdsutil is used in Directory Services Restore Mode to mark objects as authoritative so they replicate back to other DCs.

AD Federation Services (AD FS) is used primarily to enable which scenario?

Answer: Single sign-on across organizational boundaries using claims

AD FS provides web-based SSO and identity federation using standards like SAML to share identity claims across organizations.

What is the default tombstone lifetime in Windows Server 2008 Active Directory?

Answer: 180 days

Windows Server 2008 raises the default tombstone lifetime to 180 days, up from 60 days in older versions.

Which group scope should be used to assign permissions to a resource, following Microsoft's AGDLP best practice?

Answer: Domain Local group

AGDLP: Accounts → Global groups → Domain Local groups → Permissions; Domain Local groups are assigned to resources.

A forest trust between two separate AD forests requires which minimum functional level?

Answer: Windows Server 2003

Forest trusts require both forests to be at Windows Server 2003 forest functional level or higher.

Which AD LDS (Lightweight Directory Services) feature differentiates it from full AD DS?

Answer: AD LDS can run multiple instances on the same server without a domain

AD LDS runs as an independent service and supports multiple instances on one server, without requiring AD DS domain membership.

Which command verifies Active Directory replication status between domain controllers?

Answer: repadmin /replsummary

Repadmin /replsummary provides a high-level summary of replication successes and failures across all DCs.