StudyDroid: FlashCards on the web, and in your hand!

When a user initiates a search for an object in Active Directory, the request is automatically sent to TCP port 3389, which is used by Active Directory to direct these requests to a global catalog server.

False

The domain controller that hosts the global catalog must have enough space on the hard drive to house the global catalog. As a rule of thumb, you should estimate 75 percent of the size of the ntds.dit file of every other domain in the forest when sizing hardware for a global catalog server.

False

The Infrastructure Master FSMO role is responsible for reference updates from its domain objects to other domains.

True

The PDC Emulator is responsible for managing time synchronization within an Active Directory domain.

True

The Domain Naming Master is responsible for managing changes to the Active Directory schema.

False

What holds a subset of forest-wide Active Directory objects and acts as a central repository by holding a complete copy of all objects from the host server’s local domain with a partial copy of all objects from other domains within the same forest?

global catalog

What is a partial copy of all objects from other domains within the same forest that is held on a global catalog server?

partial attribute set

What port is used by Active Directory to direct search requests to a global catalog server?

3268

Which of the following is not a function performed by a global catalog server?

maintaining a backup of all data stored on a domain controller

What Windows Server 2008 feature stores universal group memberships on a local domain controller that can be used for logon to the domain, eliminating the need for frequent access to a global catalog server?

universal group membership caching

As a rule of thumb, you should estimate __________ percent of the size of the ntds.dit file of every other domain in the forest when sizing hardware for a global catalog server.

50

How many FSMO roles does Active Directory support?

5

Which FSMO role is responsible for reference updates from its domain objects to other domains?

Infrastructure Master

Which FSMO role has the authority to manage the creation and deletion of domains, domain trees, and application data partitions in the forest?

Domain Naming Master

Which of these design aspects should you consider when planning the appropriate location of FSMO role holders?

all of the above

the number of domains that are or will be part of the forest, the physical structure of the network, and the number of domain controllers that will be available in each domain.

What process is used when you move a FSMO role gracefully from one domain controller to another?

role transfer

What procedure is used only when you have experienced a catastrophic failure of a domain controller that holds a FSMO role and you need to recover that role?

role seizure

What console must be used to move the Domain Naming Master FSMO role?

Active Directory Domains and Trusts

What tool is used to seize a FSMO role?

ntdsutil

The RID Master FSMO role distributes RIDs to domain controllers in what increments?

500

What is used to uniquely identify an object throughout the Active Directory domain?

security identifier

Each object’s SID consists of two components: the domain portion and the __________.

relative identifier

How many RID Masters can a domain have?

1

What types of memberships are stored in the global catalog?

universal

What allows a user to be able to log on using a cached copy of his or her logon credentials that have been stored on his or her local workstation?

cached credentials

The global __________ holds a subset of forest-wide Active Directory objects and acts as a central repository by holding a complete copy of all objects from the host server’s local domain with a partial copy of all objects from other domains within the same forest.

catalog

Domain local and __________ group memberships are stored at the domain level.

global

Each __________ should contain a global catalog server to facilitate user logons.

site

Port __________ is used for Active Directory object searches.

3268

Active Directory supports __________ FSMO roles.

five, 5

Password changes, account lockouts, and time synchronization for the domain are managed by the PDC __________.

Emulator

The __________ identifier is a variable-length number that is assigned to objects at creation and becomes part of the object’s security identifier.

relative

The Domain __________ Master has the authority to manage the creation and deletion of domains, domain trees, and application data partitions in the forest.

Naming

The role __________ process is used when you move a FSMO role gracefully from one domain controller to another.

transfer

__________ is used to perform a seizure of an FSMO role.

ntdsutil

What is a partial copy of all objects from other domains within the same forest?

partial attribute set

What types of group memberships are stored in the global catalog?

universal group memberships

Universal group membership caching is enabled on what type of basis?

per-site

The Directory Services Event Viewer will display what event when the computer is ready to advertise itself as a global catalog server?

Event ID 1119

What FSMO role is responsible for assigning relative identifiers to domain controllers in the domain?

Relative Identifier Master

What is a 128-bit hexadecimal number assigned to each object at the time that it is created in the Active Directory forest?

globally unique identifier, GUID

What tool can be used to check the status of update sequence numbers?

repadmin

What are assigned to domain controllers to perform single-master operations?

operations master roles

What does a global catalog server do?

The global catalog holds a subset of forest-wide Active Directory objects and acts as a central repository by holding a complete copy of all objects from the host server’s local domain with a partial copy of all objects from other domains within the same forest.

What is universal group membership caching?

It stores universal group memberships on a local domain controller that can be used for logon to the domain, eliminating the need for frequent access to a global catalog server.

When planning for the installation of a new global catalog server, what should be taken into consideration in regard to storage space?

As a rule of thumb, you should estimate 50 percent of the size of the ntds.dit file of every other domain in the forest when sizing hardware for a global catalog server.

What are the three domain-wide FSMOs?

Relative Identifier Master, Infrastructure Master, Primary Domain Controller Emulator

What is the relation of a relative identifier to a security identifier?

The RID is a variable-length number that is assigned to objects at creation and becomes part of the object’s security identifier.

What are the two forest-wide FSMOs?

Domain Naming Master and Schema Master

What is the difference between role transfer and role seizure?

Role transfer is used when you move a FSMO role gracefully from one domain controller to another. Role seizure is used only when you have experienced a catastrophic failure of a domain controller that holds a FSMO role.



Front		Back
When a user initiates a search for an object in Active Directory, the request is automatically sent to TCP port 3389, which is used by Active Directory to direct these requests to a global catalog server.		False
The domain controller that hosts the global catalog must have enough space on the hard drive to house the global catalog. As a rule of thumb, you should estimate 75 percent of the size of the ntds.dit file of every other domain in the forest when sizing hardware for a global catalog server.		False
The Infrastructure Master FSMO role is responsible for reference updates from its domain objects to other domains.		True
The PDC Emulator is responsible for managing time synchronization within an Active Directory domain.		True
The Domain Naming Master is responsible for managing changes to the Active Directory schema.		False
What holds a subset of forest-wide Active Directory objects and acts as a central repository by holding a complete copy of all objects from the host server’s local domain with a partial copy of all objects from other domains within the same forest?		global catalog
What is a partial copy of all objects from other domains within the same forest that is held on a global catalog server?		partial attribute set
What port is used by Active Directory to direct search requests to a global catalog server?		3268
Which of the following is not a function performed by a global catalog server?		maintaining a backup of all data stored on a domain controller
What Windows Server 2008 feature stores universal group memberships on a local domain controller that can be used for logon to the domain, eliminating the need for frequent access to a global catalog server?		universal group membership caching
As a rule of thumb, you should estimate __________ percent of the size of the ntds.dit file of every other domain in the forest when sizing hardware for a global catalog server.		50
How many FSMO roles does Active Directory support?		5
Which FSMO role is responsible for reference updates from its domain objects to other domains?		Infrastructure Master
Which FSMO role has the authority to manage the creation and deletion of domains, domain trees, and application data partitions in the forest?		Domain Naming Master
Which of these design aspects should you consider when planning the appropriate location of FSMO role holders?		all of the above the number of domains that are or will be part of the forest, the physical structure of the network, and the number of domain controllers that will be available in each domain.
What process is used when you move a FSMO role gracefully from one domain controller to another?		role transfer
What procedure is used only when you have experienced a catastrophic failure of a domain controller that holds a FSMO role and you need to recover that role?		role seizure
What console must be used to move the Domain Naming Master FSMO role?		Active Directory Domains and Trusts
What tool is used to seize a FSMO role?		ntdsutil
The RID Master FSMO role distributes RIDs to domain controllers in what increments?		500
What is used to uniquely identify an object throughout the Active Directory domain?		security identifier
Each object’s SID consists of two components: the domain portion and the __________.		relative identifier
How many RID Masters can a domain have?		1
What types of memberships are stored in the global catalog?		universal
What allows a user to be able to log on using a cached copy of his or her logon credentials that have been stored on his or her local workstation?		cached credentials
The global __________ holds a subset of forest-wide Active Directory objects and acts as a central repository by holding a complete copy of all objects from the host server’s local domain with a partial copy of all objects from other domains within the same forest.		catalog
Domain local and __________ group memberships are stored at the domain level.		global
Each __________ should contain a global catalog server to facilitate user logons.		site
Port __________ is used for Active Directory object searches.		3268
Active Directory supports __________ FSMO roles.		five, 5
Password changes, account lockouts, and time synchronization for the domain are managed by the PDC __________.		Emulator
The __________ identifier is a variable-length number that is assigned to objects at creation and becomes part of the object’s security identifier.		relative
The Domain __________ Master has the authority to manage the creation and deletion of domains, domain trees, and application data partitions in the forest.		Naming
The role __________ process is used when you move a FSMO role gracefully from one domain controller to another.		transfer
__________ is used to perform a seizure of an FSMO role.		ntdsutil
What is a partial copy of all objects from other domains within the same forest?		partial attribute set
What types of group memberships are stored in the global catalog?		universal group memberships
Universal group membership caching is enabled on what type of basis?		per-site
The Directory Services Event Viewer will display what event when the computer is ready to advertise itself as a global catalog server?		Event ID 1119
What FSMO role is responsible for assigning relative identifiers to domain controllers in the domain?		Relative Identifier Master
What is a 128-bit hexadecimal number assigned to each object at the time that it is created in the Active Directory forest?		globally unique identifier, GUID
What tool can be used to check the status of update sequence numbers?		repadmin
What are assigned to domain controllers to perform single-master operations?		operations master roles
What does a global catalog server do?		The global catalog holds a subset of forest-wide Active Directory objects and acts as a central repository by holding a complete copy of all objects from the host server’s local domain with a partial copy of all objects from other domains within the same forest.
What is universal group membership caching?		It stores universal group memberships on a local domain controller that can be used for logon to the domain, eliminating the need for frequent access to a global catalog server.
When planning for the installation of a new global catalog server, what should be taken into consideration in regard to storage space?		As a rule of thumb, you should estimate 50 percent of the size of the ntds.dit file of every other domain in the forest when sizing hardware for a global catalog server.
What are the three domain-wide FSMOs?		Relative Identifier Master, Infrastructure Master, Primary Domain Controller Emulator
What is the relation of a relative identifier to a security identifier?		The RID is a variable-length number that is assigned to objects at creation and becomes part of the object’s security identifier.
What are the two forest-wide FSMOs?		Domain Naming Master and Schema Master
What is the difference between role transfer and role seizure?		Role transfer is used when you move a FSMO role gracefully from one domain controller to another. Role seizure is used only when you have experienced a catastrophic failure of a domain controller that holds a FSMO role.



	x of y cards	Next >\|