Upgrade to remove ads
Only $2.99/month

Server 15

Terms in this set (25)

In Windows Server 2012 R2, after a user logs on to Active Directory, a(an) ________ is created that identifies the user and all the user's group memberships.

access token
access control entry
authentication token
universal group
access token
Some of the following groups might grant or deny permissions to any resource located in any domain in the forest. Of them, which one's membership is replicated only in the domain controllers of the same domain?

Universal groups
Global groups
Domain local groups
Distribution groups
Global groups
Of the key reasons for creating organizational units, which of the following is NOT one of them?

Delegating administration

Assigning Group Policy settings

Duplicating organizational divisions

Assigning permissions to network resources
Assigning permissions to network resources
What command-line utility allows administrators to modify a group's type and scope as well as add or remove members?

PowerShell and the applicable cmdlet

Active Directory Users and Computers console

Active Directory Administrative Center

Dsmod.exe
Dsmod.exe
What are the different kinds of groups?

There are two types: security and distribution.

There are two types: security and distribution; and there are three group scopes: domain local, global, and universal.

There are three group scopes: domain local, global, and universal.

There are three group types: domain local, global, and universal.
There are two types: security and distribution; and there are three group scopes: domain local, global, and universal.
Members of a universal group can come ______.

from different organizational units

from different domains

from trusted forests

only from within the domain
from trusted forests
What is a key difference between a domain tree hierarchy and the organizational unit (OU) hierarchy within a domain?


Ability to apply Group Policy
Members allowed within
Inheritance
Membership
Inheritance
Which of these groups is not related to security and cannot have permissions assigned to it?

Universal groups
Global groups
Domain local groups
Distribution groups
Distribution groups
You are planning an Active Directory implementation for a company that currently has sales, accounting, and marketing departments. All department heads want to manage their own users and resources in Active Directory. What feature will permit you to set up Active Directory to allow each manager to manage his or her own container but not any other containers?

Multimaster replication
Read-only domain controller
Manager control
Delegation of control
Delegation of control
Which of these groups would an administrator use to assign permissions to resources in the same domain?

Universal groups
Global groups
Domain local groups
Distribution groups
Domain local groups
What is the group scope for Domain Admins, Domain Controllers, and Domain Users default groups?

Distribution
Universal
Global
Domain local
Global
What is the only OU created by default after installing Active Directory?

Users OU
Domain Controllers OU
Global OU
Computers OU
Domain Controllers OU
Which of the following is NOT an example of a special identity?


Dialup Service
Creator Owner
Authenticated Users
Anonymous Logon
Dialup Service
What is the primary difference between universal groups and global groups in Windows Server 2012 R2?

Global groups use less data in the global catalog. So, in considering replication traffic, universal groups should be within a site.

Universal groups use less data in the global catalog. So, in considering replication traffic, global groups should be within a site.

Universal groups use more data in the global catalog. However, global groups are best in general, both within a site and across sites.

Global groups use less data than universal groups, but not significantly.
Global groups use less data in the global catalog. So, in considering replication traffic, universal groups should be within a site.
Which of these groups' membership is stored in the global catalog?

Universal groups
Global groups
Domain local groups
Distribution groups
Universal groups
Even when OUs have been nested to many levels, they still will not adversely affect the response time to resource requests or complicate the application of Group Policy settings.

T/F
False
Which of the following is NOT a group scope?

Universal groups
Global groups
Domain local groups
Security groups
Security groups
Which of the following default groups is a universal group?

Certificate Publishers
Enterprise Admins
Domain Users
Domain Admins
Enterprise Admins
An administrator needs to grant an e-mail distribution group of 100 members access to a database, how would the administrator proceed? The e-mail group is obsolete and can be dissolved.

Assign the necessary access permissions to the database to the distribution group.

Create a new group with the 100 members, then assign permissions.

Remove the distribution group, and then convert the members into a universal group, granting access permissions.

Convert the distribution group to a security group and then assign the group access permissions.
Convert the distribution group to a security group and then assign the group access permissions.
Of the default groups created when Active Directory is installed, what are the types of those groups?

Distribution groups
Security groups
Domain groups
All the above
Security groups
How do groups differ from OUs?



Groups are security principals, meaning you assign access permissions to a resource based on membership in a group. OUs are for organization and for assigning Group Policy settings.

Groups are created by Server Manager, but you create OUs by scripts.

OUs are security principals, meaning you assign access permissions to a resource based on membership in an organizational unit. Groups are for organization and for delegating permissions.
Organizational units are container objects made from the Active Directory Users and Computers console.
Groups are security principals, meaning you assign access permissions to a resource based on membership in a group. OUs are for organization and for assigning Group Policy settings.
Within a domain, the primary hierarchical building block is the _________.


forest
group
organizational unit
user
organizational unit
You are attempting to delete a global security group in the Active Directory Users and Computers console, and the console will not let you complete the task. Which of the following could possibly be causes for the failure? (Choose all answers that are correct.)



One of the group's members has the group set as its primary group.

You cannot delete global groups from the Active Directory Users and Computers console.

There are still members in the group.

One of the group's members has the group set as its primary group.
You do not have the proper permissions for the container in which the group is located.

One of the group's members has the group set as its primary group.
The Delegation of Control Wizard is capable of ________ permissions.

granting
modifying
removing
all the above
granting
You can use a security group to grant permissions to resources and to enable email access. A distribution group, however, can only be used for email purposes; it cannot bu used to secure resources on your network.

T/F
T
THIS SET IS OFTEN IN FOLDERS WITH...