Home
71.
Which of the following groups are used to consolidate groups and accounts that span either multiple domains or the entire forest?
  • A.
    Global
  • B.
    Domain local
  • C.
    Built-in
  • D.
    Universal
  • Answer & Explanation
  • Report
Answer : [D]
Explanation :
A. Incorrect: Global groups cannot contain users from other domains.
B. Incorrect: Domain local groups cannot have permissions for resources in other domains.
C. Incorrect: Built-in groups have no inherent cross-domain qualities.
D. Correct: Universal groups, like global groups, are used to organize users according to their resource access needs. You can use them to organize users to facilitate access to any resource located in any domain in the forest through the use of domain local groups. Universal groups are used to consolidate groups and accounts that span either multiple domains or the entire forest.
Report
Name Email  
72.
Which of the following is not a correct reason for creating an OU?
  • A.
    To create a permanent container that cannot be moved or renamed
  • B.
    To duplicate the divisions in your organization
  • C.
    To delegate administration tasks
  • D.
    To assign different Group Policy settings to a specific group of users or computers
  • Answer & Explanation
  • Report
Answer : [A]
Explanation :
A. Correct: The reasons for creating an OU include duplicating organizational divisions, assigning Group Policy settings, and delegating administration. You can easily move or rename an OU as necessary.
B. Incorrect: Duplicating organizational divisions is a viable reason for creating an OU.
C. Incorrect: Delegating administration tasks is a viable reason for creating an OU.
D. Incorrect: Assigning Group Policy settings is a viable reason for creating an OU.
Report
Name Email  
73.
Which of the following group scope modifications are never permitted? (Choose all that apply.)
  • A.
    Global to universal
  • B.
    Global to domain local
  • C.
    Universal to global
  • D.
    Domain local to universal
  • Answer & Explanation
  • Report
Answer : [B]
Explanation :
A. Incorrect: Global to universal group conversions are sometimes permitted.
B. Correct: Global to domain local group conversions are never permitted.
C. Incorrect: Universal to global group conversions are sometimes permitted.
D. Incorrect: Domain local to universal group conversions are sometimes permitted.
Report
Name Email  
74.
In a domain running at the Windows Server 2012 R2 domain functional level, which of the following security principals can be members of a global group? (Choose all that apply.)
  • A.
    Users
  • B.
    Computers
  • C.
    Universal groups
  • D.
    Global groups
  • Answer & Explanation
  • Report
Answer : [A, B, D]
Explanation :
A. Correct: Users can be security principals in a global group.
B. Correct: Computers can be security principals in a global group.
C. Incorrect: Universal groups cannot be security principals in a global group.
D. Correct: Global groups can be security principals in a global group.
Report
Name Email  
75.
You are attempting to delete a global security group in the Active Directory Users And Computers console but the console will not let you complete the task. Which of the following could possibly be causes for the failure? (Choose all that apply.)
  • A.
    There are still members in the group.
  • B.
    One of the group’s members has the group set as its primary group.
  • C.
    You do not have the proper permissions for the container in which the group is located.
  • D.
    You cannot delete global groups from the Active Directory Users And Computers console
  • Answer & Explanation
  • Report
Answer : [B, C]
Explanation :
A. Incorrect: It is possible to delete a group that has members.
B. Correct: If any member sets the group as its primary group, then the system does not permit the group to be deleted.
C. Correct: You must have the appropriate Active Directory permissions for the container in which the group is located to delete it.
D. Incorrect: It is possible to delete groups by using the Active Directory Users and Groups console.
Report
Name Email