You may like this!
56.
You are the network administrator for your organization. A new company policy has been released wherein if a user enters their password incorrectly three times within 5 minutes, they are locked out for 30 minutes. What three actions do you need to set to comply with this policy? (Choose all that apply.)
  • A.
    Set Account Lockout Duration to 5 minutes.
  • B.
    Set Account Lockout Duration to 30 minutes.
  • C.
    Set the Account Lockout Threshold setting to 3 invalid logon attempts.
  • D.
    Set the Account Lockout Threshold setting to 30 minutes.
  • E.
    Set the Reset Account Lockout Counter setting to 5 minutes.
  • F.
    Set the Reset Account Lockout Counter setting to 3 times.
  • Answer & Explanation
  • Report
Answer : [B, C, E]
Explanation :
The Account Lockout Duration setting states how long an account will be locked out if the password is entered incorrectly. The Account Lockout Threshold setting is the number of bad password attempts, and the Account Lockout Counter setting is the time in which the bad password attempts are made. Once Account Lockout Counter reaches 0, the number of bad password attempts returns to 0.
Report
Name Email  
57.
You are teaching a Microsoft Active Directory class, and one of your students asks you which of the following folders in the Active Directory Users and Computers tool is used when users from outside the forest are granted access to resources within a domain? What answer would you give your student?
  • A.
    Users
  • B.
    Computers
  • C.
    Domain Controllers
  • D.
    Foreign Security Principals
  • Answer & Explanation
  • Report
Answer : [D]
Explanation :
When resources are made available to users who reside in domains outside the forest, foreign security principal objects are automatically created. These new objects are stored within the Foreign Security Principals folder.
Report
Name Email  
58.
Your manager has decided that your organization needs to use an Active Directory application data partition. Which command can you use to create and manage application data partitions?
  • A.
    DCPromo.exe
  • B.
    NTDSUtil.exe
  • C.
    ADUtil.exe
  • D.
    ADSI.exe
  • Answer & Explanation
  • Report
Answer : [B]
Explanation :
The primary method by which systems administrators create and manage application data partitions is through the ntdsutil tool.
Report
Name Email  
59.
Robert is a system administrator who is responsible for performing backups on several servers. Recently, he has been asked to take over the operations of several new servers, including backup operations. He has the following requirements:
--> The backup must finish as quickly as possible.
--> The backup must use the absolute minimum amount of storage space.
--> He must perform backup operations at least daily with a full backup at least weekly.
Robert decides to use the Windows Server 2012 R2 Windows Server Backup utility to perform the backups. He wants to choose a set of backup types that will meet all of these requirements. He decides to back up all files on each of these servers every week. Then he decides to store only the files that have changed since the last backup operation (regardless of type) during the weekdays. Which of the following types of backup operations should he use to implement this solution? (Choose two.)
  • A.
    Normal
  • B.
    Daily
  • C.
    Copy
  • D.
    Differential
  • E.
    Incremental
  • Answer & Explanation
  • Report
Answer : [A, E]
Explanation :
To meet the requirements, Robert should use the normal backup type to create a full backup every week and the incremental backup type to back up only the data that has been modified since the last full or incremental backup operation.
Report
Name Email  
60.
You are removing a domain controller from your network. This domain controller holds the forestwide operations master roles. Which roles would you need to transfer to another machine before you remove the domain controller? (Choose all that apply.)
  • A.
    PDC Emulator Master
  • B.
    Schema Master
  • C.
    RID Master
  • D.
    Domain Naming Master
  • E.
    Infrastructure Master
  • Answer & Explanation
  • Report
Answer : [B, D]
Explanation :
You would need to transfer the two forestwide operations master roles: Schema Master and Domain Naming Master. This means that there can only be one Schema Master and only one Domain Naming Master per forest. The PDC Emulator Master, RID Master, and Infrastructure Master are all domain-based operations master roles. (Each domain in the forest must have a domain controller with these three roles installed.)
Report
Name Email