Information Technology Reference
In-Depth Information
Correct answer:
B
3.
Incorrect
. The Set-Service cmdlet does not allow you to set the account that the
service runs as.
A.
Correct
. In the Services console, you can set the Log On As property for the
service.
B.
Incorrect
. You do not need to create an account; it already virtually exists.
C.
Incorrect
. You don't need to assign an account to the computer; it already
virtually exists.
D.
Objective 5.2: thought experiment
No. Creating a separate subdomain would increase the administrative overhead for
a small office. Without local IT support, you'd also likely need to assign a Domain
Administrator in the branch office, increasing the security risks.
1.
Maybe. Depending on the number of users, the level of connectivity, and the users'
tolerance for delays, there are several possible scenarios for the branch office running
in shared space, including using a Remote Desktop Session Host (RDSH) server. But in
most cases, having a local domain controller improves the overall responsiveness per-
ception of the users. The domain controller should be configured as an RODC because
of the shared space and lack of a local administrator.
2.
No. You can give delegated authority to manage the RODC to one of the
administrative staff without promoting them to a Domain Administrator. They can log
on locally to the RODC to perform maintenance operations, but any Active Directory
write operations are redirected to the domain controllers in the main datacenter.
3.
Objective 5.2: review
Correct answers:
A, C, E
1.
Correct
. This command generates the CustomDCCloneAllowList.xml file.
A.
Incorrect
. This command doesn't exist. The Windows PowerShell
Get-ADDCCloningExcludedApplicationList cmdlet is used to identify applications
to exclude from testing by adding to the CustomDCCloneAllowList.xml file.
B.
Correct
. This command adds the computer account to the Cloneable Domain
Controllers group, allowing it to be cloned.
C.
Incorrect
. The Get-ADDomainController command does not provide the correct
input object to the Add-ADGroupMember cmdlet.
D.
Correct
. This command generates the DCCloneConfig.xml file that is used to
control the cloning of the domain controller.
E.
