Week 4 Best Answers
George Macdonald
NTC/324
Feb 15, 2016
Professor Jason Kaluzny

Lesson 13 Best Answer

What is the key difference between groups and Organizational Units (OUs)?
a. Because groups are independent from domain structure, its members may be located anywhere in the domain or outside the domain.
b. You cannot apply Group Policy settings directly to group objects.
c. OUs are containers, whereas groups are not containers.
d. There is essentially no difference between OUs and groups.

2. An Active Directory functional level must be low enough to ensure interoperability between domain controllers running different versions of Windows Server. How does the functional level affect the AD forest?
a. Higher functional level means more efficient AD communication.
b. Higher functional level means few Global Catalog errors.
c. Lower functional level means fewer features available.
d. Lower functional level means time to upgrade the lowest servers. 3. What is the primary reason for creating different sites on an Active Directory network?
a. To create geographical divisions within the Active Directory
b. To provide another boundary when applying Group Policy settings (along with domains and OUs)
c. To provide a layer of access control between objects in differing sites
d. To control the amount of traffic passing over the relatively slow and expensive WAN links between locations

4. What is the simplest way for administrators to upgrade their Active Directory Domain
Services (AD DS) infrastructure to Windows Server 2012?
a. Upgrade all existing down-level domain controllers (DCs) to Windows Server 2012.
b. In Server Manager, use the Active Directory Domain Services Configuration Wizard to update a DC.
c. Add a new Windows Server 2012 server to your existing Directory Services installation.
d. Use Adprep.exe, included in the operating system.

5. Is it possible to add AD DS on a computer running Server Core?
a. No, you require the full GUI installation of Windows Server 2012.
b. Yes, you use Dcpromo.exe and accompanying answer files.
c. No, unless all servers are already running Windows 2012.
d. Yes, you use PowerShell, by first installing AD DS role, and then promoting the server to a DC.

Lesson 14 Best Answer

1. What is the primary means by which people access resources on an Active Directory
Domain Service (AD DS) network?
a. By having a computer account
b. Being within the proper site and domain
c. By having elevated privileges
d. By having a user account

2. What differences matter most in creating a single user versus multiple users?
a. Single user creation is often done from the graphical user interface (GUI), whereas creating multiple users typically requires using command-line tools.
b. Creating a single user is simple, but manual work.
c. Time does not permit automating the creation of a single user.
d. When creating multiple users, not as many parameters are involved.

3. What two graphical tools will help create either user or computer objects?
a. Server Manager and PowerShell
b. Active Directory Administrative Center and Active Directory Users and Computer
c. Server Core and PowerShell
d. LDIFDE.exe and CSVDE.exe

4. What is a key benefit to using ADAC or the Active Directory Users and Computers console?
a. ADAC allows you to modify the properties of both multiple users and multiple computers at once.
b. ADAC allows you to import multiple objects at once.
c. ADAC allows you to modify the properties of multiple users or multiple computers at once.
d. ADAC not only helps create user and computer objects, but it helps join them to a domain. 5. Are typical, authenticated users able to create computer objects in an Active Directory?
a. No, it requires administrative rights to create a computer object.
b. Yes, if they are specially granted the Add Workstations To The Domain right.
c. No, users are not able to do so by default.
d. Yes, by default, users who are successfully authenticated to Active Directory are permitted to join up to 10 workstations to the domain, thus creating up to 10 associated computer objects.

Lesson 15 Best Answer
1. Select the best reasons for using organizational units (OUs)?
a. Organizing by geography, assigning Group Policy settings, and applying security boundaries b. Applying security boundaries, assigning Group Policy settings, and organizing by geography c. Duplicating organizational divisions, assigning Group Policy settings, and delegating administration d. Assigning Group Policy settings, administering delegation, and delegating administration 2. What is the primary difference between universal groups and global groups in Windows
Server 2012?
a. Global groups use less data in the global catalog. So, in considering replication traffic, universal groups should be within a site.
b. Universal groups use less data in the global catalog. So, in considering replication traffic, global groups should be within a site.
c. Universal groups use more data in the global catalog. However, global groups are best in general, both within a site and across sites.
d. Global groups use less data than universal groups, but not significantly.

3. Generally, how do groups differ from OUs?

a. Groups are security principals, meaning you assign access permissions to a resource based on membership to a group. OUs are for organization and for assigning Group
Policy settings.
b. Groups are created by the Server Manager, but you create OUs by scripts.
c. OUs are security principals, meaning you assign access permissions to a resource based on membership to an organizational unit. Groups are for organization and for delegating permissions.
d. Organizational units are container objects made from the Active Directory Users and
Computers console.

4. What are the different kinds of groups?
a. There are two types: security and distribution.
b. There are two types: security and distribution, and three group scopes: domain local, global, and universal.
c. There are three group scopes: domain local, global, and universal.
d. There are three group types: domain local, global, and universal.
5. What command-line utility allows administrators to modify groups’ type and scope as well as add or remove members?
a. PowerShell and the applicable cmdlet
b. Active Directory Users and Computers console
c. Active Directory Administrative Center
d. Dsmod.exe