Active Directory Components and Configuration, Exams of Advanced Education

An overview of the key components of the active directory structure, including domains, organizational units (ous), built-in containers, objects, and domain controllers. It also covers how to configure a new computer to join a domain, as well as best practices for organizing ous and assigning resource rights using group accounts. Additionally, the document discusses administrative templates, which are registry-based settings that can be used to control a computer system and user experience, such as restricting access to control panel features and managing notifications. The document also covers troubleshooting issues related to hidden control panel options and the application of group policy settings.

Typology: Exams

2024/2025

Available from 10/17/2024

alex-david-34
alex-david-34 🇿🇦

4.5

(4)

5.6K documents

1 / 6

Toggle sidebar

This page cannot be seen from the preview

Don't miss anything!

bg1
8.1.13 PRACTICE QUESTIONS
Match each Active Directory definition on the left with its corresponding component on the right. -
Domain
> A collection of network resources that share a common directory database.
Organizational unit (OU)
> A folder-like container that organizes network resources.
Built-in containers
> Default containers used to organize Active Directory objects that cannot be deleted.
Object
> A resource within Active Directory.
Domain controller
> A Windows server that holds a copy of the Active Directory database.
Explanation:
The Active Directory structure contains the following components:
- A domain is a collection of network resources that share a common directory database.
- An organizational unit (OU) is a folder-like container that organizes network resources.
- A built-in container is a default container used to organize
- Active Directory objects. It cannot be deleted.
- An object is a resource within Active Directory.
- A domain controller is a Windows server that holds a copy of the Active Directory database.
A new computer has been added to the sales department and needs to be joined to the CorpNet
domain.
pf3
pf4
pf5

Partial preview of the text

Download Active Directory Components and Configuration and more Exams Advanced Education in PDF only on Docsity!

8.1.13 PRACTICE QUESTIONS

Match each Active Directory definition on the left with its corresponding component on the right. - Domain

A collection of network resources that share a common directory database. Organizational unit (OU) A folder-like container that organizes network resources. Built-in containers Default containers used to organize Active Directory objects that cannot be deleted. Object A resource within Active Directory. Domain controller A Windows server that holds a copy of the Active Directory database. Explanation: The Active Directory structure contains the following components:

  • A domain is a collection of network resources that share a common directory database.
  • An organizational unit (OU) is a folder-like container that organizes network resources.
  • A built-in container is a default container used to organize
  • Active Directory objects. It cannot be deleted.
  • An object is a resource within Active Directory.
  • A domain controller is a Windows server that holds a copy of the Active Directory database. A new computer has been added to the sales department and needs to be joined to the CorpNet domain.

Which of the following System Properties settings must you use to make the change? - > System Properties > Computer Name Explanation: The Computer Name tab lets you view, change, or join a computer to a domain. The System Protection tab lets you configure and create system restore points. The Advanced tab lets you configure settings such as Performance, User Profiles, and Startup and Recovery. The Remove tab lets you configure Remote Assistance and Remote Desktop settings. You are your company's Active Directory system administrator. The company has branch offices in several countries, including Mexico, Argentina, Canada, and the UK. The company only has a total of 250 employees organized in the same departments in each office. However, the company is projected to expand rapidly in the next two years. You want to create a tree of organizational units (OUs) that can adapt to the rapid growth without re- organizing the OU structure in the near future. You also want to be able to easily assign rights to certain network resources based on departmental organizational roles. Which of the following solutions would BEST meet your requirements? - > Organize the OUs at the top level by office (country); then use group accounts to help control resource rights. Explanation: Because the branch office in each country is organized similarly, the best recommendation would be to use departmental OUs at the top with office (country) OUs underneath. You could then create resource containers under each office. You could then easily utilize group accounts to assign resource rights to specific roles departmentally as the company hires more employees. Organizing the top level using one container for employees and another for resources would make it hard to keep track of which employees belong to which office and department. Assigning individual rights to each user would take much more time than assigning group accounts to users. Organizing the top level using one container for resources and one for each country would make it difficult to see which resources are located in which office. Assigning individual rights to each user would take much more time than assigning group accounts to users.

Explanation: Administrative Templates are Registry-based settings that you can configure within a GPO to control a computer system and its overall user experience. They include the ability to do things like control notifications and restrict access to Control Panel features. Software restriction policies allow you to identify allowed or blocked software, let users run only the files you specify, and determine who can add trusted publishers. A user has complained about not being able to remove a program that is no longer needed on a computer. The Programs option is not available in Control Panel. You suspect that a policy is enabled that hides this option from the user. But after opening the Local Group Policy Editor, you see that the policy to hide Programs is not configured. You know that other users in this domain can access the Programs option. Where should you look next to determine whether the policy is enabled? - > GPOs linked to organizational units that contain this user's object. Explanation: You should look at GPOs linked to organizational units that contain this user's object to see where the Hide Programs and Features Page policy might be enabled. If the policy were enabled in a GPO linked to the domain, it would be applied to all users in the domain. The next level that GPOs are applied from is any GPO linked to organizational units that contain the user's object. Drag each Group Policy setting on the left to the appropriate description of how the setting is enforced on the right. - Causes the policy to be enforced

Enabled Does not change the current setting for the policy Not configured

Prevents the policy from being enforced

Disabled Explanation> Each policy can be configured using one of the settings listed below.

  • Not Configured has no value and does not change the current setting for this policy.
  • Enabled causes the policy to be enforced.
  • Disabled prevents the policy from being enforced. The Hide Programs setting is configured for a specific user as follows:

    Policy:

    Setting: Local Group Policy Enabled Default Domain Policy GPO. Not configured GPO linked to the user's organizational unit. Disabled After logging in, the user is able to see the Programs and Features option. Why did this happen? - > The GPO linked to the user's organizational unit is applied last, so this setting takes precedence. Explanation: The GPO linked to the user's organizational unit is applied last, so the setting that disables the policy to hide the Programs and Features page takes precedence. In this question's scenario, Local Group Policy enables the policy to hide the Programs and Features page. When the Default Domain Policy GPO is applied, this policy is set to Not configured, so it doesn't