NTC 324 Week 4 Best Answer 100% Correct

NTC 324 Week 4 Best Answer Chapter 13
Best Answer
Choose the letter that corresponds to the best answer. More than one answer choice may achieve the
goal. Select the BEST answer.
1. What is the key difference between groups and Organizational Units (OUs)?
a. Because groups are independent from domain structure, its members may be located
anywhere in the domain or outside the domain.
b. You cannot apply Group Policy settings directly to group objects.
c. OUs are containers, whereas groups are not containers.
d. There is essentially no difference between OUs and groups.


2. An Active Directory functional level must be low enough to ensure interoperability
between domain controllers running different versions of Windows Server. How does the
functional level affect the AD forest?
a. Higher functional level means more efficient AD communication.
b. Higher functional level means few Global Catalog errors.
c. Lower functional level means fewer features available.
d. Lower functional level means time to upgrade the lowest servers.



3. What is the primary reason for creating different sites on an Active Directory network?
a. To create geographical divisions within the Active Directory
b. To provide another boundary when applying Group Policy settings (along with
domains and OUs)
c. To provide a layer of access control between objects in differing sites
d. To control the amount of traffic passing over the relatively slow and expensive WAN
links between locations



4. What is the simplest way for administrators to upgrade their Active Directory Domain
Services (AD DS) infrastructure to Windows Server 2012?
a. Upgrade all existing down-level domain controllers (DCs) to Windows Server 2012.
b. In Server Manager, use the Active Directory Domain Services Configuration Wizard
to update a DC.
c. Add a new Windows Server 2012 server to your existing Directory Services installation.
d. Use Adprep.exe, included in the operating system.



5. Is it possible to add AD DS on a computer running Server Core?
a. No, you require the full GUI installation of Windows Server 2012.
b. Yes, you use Dcpromo.exe and accompanying answer files.
c. No, unless all servers are already running Windows 2012.
d. Yes, you use PowerShell, by first installing AD DS role, and then promoting the
server to a DC.

Chapter 14
1. What is the primary means by which people access resources on an Active Directory
Domain Service (AD DS) network?
a. By having a computer account
b. Being within the proper site and domain
c. By having elevated privileges
d. By having a user account


2. What differences matter most in creating a single user versus multiple users?
a. Single user creation is often done from the graphical user interface (GUI), whereas
creating multiple users typically requires using command-line tools.
b. Creating a single user is simple, but manual work.
c. Time does not permit automating the creation of a single user.
d. When creating multiple users, not as many parameters are involved.
. 

3. What two graphical tools will help create either user or computer objects?
a. Server Manager and PowerShell
b. Active Directory Administrative Center and Active Directory Users and Computer
c. Server Core and PowerShell
d. LDIFDE.exe and CSVDE.exe


4. What is a key benefit to using ADAC or the Active Directory Users and Computers console?
a. ADAC allows you to modify the properties of both multiple users and multiple
computers at once.
b. ADAC allows you to import multiple objects at once.
c. ADAC allows you to modify the properties of multiple users or multiple computers
at once.
d. ADAC not only helps create user and computer objects, but it helps join them to a
domain.

5. Are typical, authenticated users able to create computer objects in an Active Directory?
a. No, it requires administrative rights to create a computer object.
b. Yes, if they are specially granted the Add Workstations To The Domain right.
c. No, users are not able to do so by default.
d. Yes, by default, users who are successfully authenticated to Active Directory are permitted
to join up to 10 workstations to the domain, thus creating up to 10 associated
computer objects.

Chapter 15
1. Select the best reasons for using organizational units (OUs)?
a. Organizing by geography, assigning Group Policy settings, and applying security
boundaries
b. Applying security boundaries, assigning Group Policy settings, and organizing by
geography
c. Duplicating organizational divisions, assigning Group Policy settings, and delegating
administration
d. Assigning Group Policy settings, administering delegation, and delegating
administratio





2. What is the primary difference between universal groups and global groups in Windows
Server 2012?
a. Global groups use less data in the global catalog. So, in considering replication traffic,
universal groups should be within a site.
b. Universal groups use less data in the global catalog. So, in considering replication
traffic, global groups should be within a site.
c. Universal groups use more data in the global catalog. However, global groups are best
in general, both within a site and across sites.
d. Global groups use less data than universal groups, but not significantly.

3. Generally, how do groups differ from OUs?
a. Groups are security principals, meaning you assign access permissions to a resource
based on membership to a group. OUs are for organization and for assigning Group
Policy settings.
b. Groups are created by the Server Manager, but you create OUs by scripts.
c. OUs are security principals, meaning you assign access permissions to a resource
based on membership to an organizational unit. Groups are for organization and for
delegating permissions.
d. Organizational units are container objects made from the Active Directory Users and
Computers console.



4. What are the different kinds of groups?
a. There are two types: security and distribution.
b. There are two types: security and distribution, and three group scopes: domain local,
global, and universal.
c. There are three group scopes: domain local, global, and universal.
d. There are three group types: domain local, global, and universal.


5. What command-line utility allows administrators to modify groups’ type and scope as
well as add or remove members?
a. PowerShell and the applicable cmdlet
b. Active Directory Users and Computers console
c. Active Directory Administrative Center
d. Dsmod.exe