Windows Server 2008 Active Directory Flashcards

Which tool is used to raise the domain functional level in Windows Server 2008 Active Directory?

Answer: Active Directory Domains and Trusts

Active Directory Domains and Trusts is the MMC snap-in used to raise both the domain and forest functional levels.

What is the default replication interval for Active Directory changes between domain controllers within the same site?

Answer: 5 minutes

Within a site, AD replication is triggered immediately (notify-based) and occurs within approximately 5 minutes by default.

A user account is disabled in Active Directory. Which of the following best describes the impact?

Answer: The user cannot log on but the account and its permissions remain

Disabling an account prevents logon while preserving the account object, group memberships, and all associated permissions.

Which Active Directory feature allows administrators to recover deleted objects within a configurable period without restoring from backup?

Answer: Active Directory Recycle Bin

The Active Directory Recycle Bin, introduced in Windows Server 2008 R2, allows recovery of deleted AD objects with all attributes intact.

Which type of group scope in Active Directory can contain members from any domain in the forest and be assigned permissions in any domain?

Answer: Universal

Universal groups can contain members from any domain in the forest and can be granted permissions in any domain in the forest.

What does the Active Directory attribute 'userPrincipalName' (UPN) represent?

Answer: The user's logon name in email-like format

The UPN is an internet-style logon name in the format user@domain.com, used for logon across domain boundaries.

Which FSMO role is responsible for ensuring that the same object is not created with the same name in two different domain controllers simultaneously?

Answer: RID Master

The RID Master allocates pools of relative identifiers (RIDs) to domain controllers to ensure uniquely numbered security principals.