Windows Server 2008 Active Directory Flashcards
7 cards from real MCTS practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Windows Server 2008 Active Directory flashcards as text
Which replication topology is automatically generated by the Knowledge Consistency Checker (KCC) in Active Directory?
Answer: Ring topology with bidirectional connections
The KCC automatically builds a ring topology with bidirectional connections ensuring no more than three hops between any two domain controllers within a site.
An administrator runs 'repadmin /showrepl' and notices a replication error on one domain controller. What does this command primarily help diagnose?
Answer: Active Directory replication status and errors between domain controllers
Repadmin /showrepl displays the replication status, last replication attempt, and any errors for each replication partner of a domain controller.
What is the purpose of an Active Directory site link in Windows Server 2008?
Answer: Represent network connections between AD sites to control inter-site replication
Site links define the replication paths and costs between Active Directory sites, controlling how and when replication occurs over WAN connections.
Which Group Policy setting prevents users from accessing the Control Panel on their workstations?
Answer: User Configuration > Administrative Templates > Control Panel > Prohibit access to the Control Panel
The 'Prohibit access to the Control Panel' setting is found under User Configuration > Administrative Templates > Control Panel in Group Policy.
Which Windows Server 2008 Active Directory role service provides a way to store directory data for directory-enabled applications without requiring a full AD domain?
Answer: Active Directory Lightweight Directory Services (AD LDS)
AD LDS (formerly ADAM) provides a standalone LDAP directory store for applications that need directory services but don't require a full domain infrastructure.
What is the effect of enabling the 'Block Policy Inheritance' option on an OU in Active Directory?
Answer: All GPOs linked to parent containers are blocked from applying to the OU
Block Policy Inheritance prevents GPOs linked to parent OUs, the domain, or sites from flowing down to the OU where it is enabled.
An administrator needs to find all user accounts in Active Directory that have not logged on in the past 90 days. Which tool provides a built-in query interface for this task?
Answer: Saved Queries in Active Directory Users and Computers
Active Directory Users and Computers supports Saved Queries using LDAP filter syntax, allowing administrators to find accounts based on lastLogonTimestamp and other attributes.