- Home
- Server Administration
- Windows
- Identity with Windows server 2016 (70-742)
11.
You are the administrator of an organization with a single Active Directory domain. A user
who left the company returns after 16 weeks. The user tries to log on to their old computer
and receives an error stating that authentication has failed. The user’s account has been
enabled. You need to ensure that the user is able to log on to the domain using that computer.
What do you do?
- A.Reset the computer account in Active Directory. Disjoin the computer from the domain, and then rejoin the computer to the domain.
- B.Run the ADadd command to rejoin the computer account.
- C.Run the MMC utility on the user’s computer, and add the Domain Computers snap-in.
- D.Re-create the user account and reconnect the user account to the computer account.
- Answer & Explanation
- Report
Answer : [A]
Explanation :
Explanation :
| A computer account and the domain authenticate each other by using a password. The password resets every 30 days. Since the machine has not connected to the domain for 16 weeks, the computer needs to be rejoined to the domain. |
12.
You are the administrator of an organization with a single Active Directory domain. One of
your senior executives tries to log on to a machine and receives the error “This user account
has expired. Ask your administrator to reactivate your account.” You need to make sure
that this doesn’t happen again to this user. What do you do?
- A.Configure the domain policy to disable account lockouts.
- B.Configure the password policy to extend the maximum password age to 0.
- C.Modify the user’s properties to set the Account Never Expires setting.
- D.Modify the user’s properties to extend the maximum password age to 0.
- Answer & Explanation
- Report
Answer : [C]
Explanation :
Explanation :
| Checking the box Account Never Expires will prevent this user’s account from expiring again. |
13.
You need to create a new user account using the command prompt. Which command would
you use?
- A.dsmodify
- B.dscreate
- C.dsnew
- D.dsadd
- Answer & Explanation
- Report
Answer : [D]
Explanation :
Explanation :
| The dsadd command allows you to add an object (user’s account) to the Active Directory database. |
14.
Maria is a user who belongs to the Sales distribution global group. She is not able to access
the laser printer that is shared on the network. The Sales global group has full access to the
laser printer. How do you fix the problem?
- A.Change the group type to a security group.
- B.Add the Sales global group to the Administrators group.
- C.Add the Sales global group to the Printer Operators group.
- D.Change the Sales group to a local group.
- Answer & Explanation
- Report
Answer : [A]
Explanation :
Explanation :
| Distribution groups are for emails only, and distribution groups cannot be assigned rights and permissions to objects. |
15.
You are a domain administrator for a large domain. Recently, you have been asked to make
changes to some of the permissions related to OUs within the domain. To restrict security
for the Texas OU further, you remove some permissions at that level. Later, a junior system
administrator mentions that she is no longer able to make changes to objects within the Austin OU (which is located within the Texas OU). Assuming that no other changes have been made to Active Directory permissions, which of the following characteristics of OUs
might have caused the change in permissions?
- A.Inheritance
- B.Group Policy
- C.Delegation
- D.Object properties
- Answer & Explanation
- Report
Answer : [A]
Explanation :
Explanation :
| Inheritance is the process by which permissions placed on parent OUs affect child OUs. In this example, the permissions change for the higher-level OU (Texas) automatically caused a change in permissions for the lower-level OU (Austin). |
|
|
||||||||||||||||||||||||||||
