Information Technology Reference
In-Depth Information
7. What is the program for migrating users from one forest to another?
8. Which of the following is associated with Active Directory migration? (Choose all that
apply.)
a. Ntdsutil
b. Adprep
c. SID history
d. Security translation
9. You're going to configure a forest trust between ForestA and ForestB and are logged on to
a domain controller in the root of ForestA. You try to ping a domain controller in the root
domain of ForestB and get the reply “Please check the name and try again.” You have the
IP address of the domain controller in the other forest, so you try pinging again with this IP
address, and it's successful. You know you have the correct server and domain name. What
should you do before you attempt to create the trust?
a. Verify the IP address assignment of the remote domain controller.
b. Configure a stub zone.
c. Verify that Kerberos v5 is configured correctly in both forests.
d. Configure a standard primary zone.
10. If you configure a trust between ForestA and ForestB, and a trust exists between ForestB and
ForestC, then ForestA trusts ForestC. True or False?
11. Which of the following should you configure if you want users in a trusted forest to have
access only to certain resources in your forest, regardless of permission settings on these
resources?
a. SID filtering
b. Trust transitivity
c. Selective authentication
d. One-way trust
12. Bob is an administrator in a trusted forest, and you have some concerns about his trust-
worthiness. You want to be sure he can't gain privileged access to resources in your forest
while masquerading as a user in his forest who doesn't normally have privileged access in
your forest. What should you configure in the forest trust?
a. SID filtering
b. Trust transitivity
c. Selective authentication
d. One-way trust
13. You want to change the replication schedule between two domain controllers in the same
site—and only these two domain controllers—to occur four times per hour. The KCC has
generated all your intrasite connection objects. What's the best way to make this change?
a.
10
In the General tab of the connection object's Properties dialog box, click Change
Schedule, and change the replication schedule to four times per hour. Make sure the
object is marked as automatically generated.
b.
Create a new connection object for the two domain controllers, and set the schedule to
four times per hour. Tell the KCC to check the replication topology.
c.
In the Site Settings tab of the NTDS Site Settings Properties dialog box, click Change
Schedule, and set the schedule to four times per hour.
d.
In the Schedule tab of the server's Properties dialog box, click Change Schedule, and set
the schedule to four times per hour.
Search WWH ::
Custom Search