click below
click below
Normal Size Small Size show me how
CTSYSADL_Week 4
| Question | Answer |
|---|---|
| 1: Active Directory is mainly a decentralized storage system where every client computer independently manages user accounts and network resource permissions. | False. Active Directory is a centralized database that stores information about network resources and allows administrators to manage access, organization, and delegation of administrative tasks. |
| 2: Active Directory supports a hierarchical structure, which helps administrators organize resources and delegate administrative responsibilities more efficiently. | True. |
| 3: Centralized Management in Active Directory means that each user must manually configure their own computer, group memberships, and network permissions without administrator control. | False. Centralized Management means administrators can manage users, groups, computers, and network resources from a central directory. |
| 4: Single Sign-On in Active Directory allows users to access multiple network resources using one set of credentials. | True. |
| 5: Active Directory security is limited to storing usernames and passwords and does not include authentication or access control features. | False. Active Directory provides security features such as authentication and access control to help protect network resources. |
| 6: Authentication in Active Directory verifies the identity of users and computers before access to network resources is granted. | True. |
| 7: Authorization in Active Directory determines access based only on the physical location of a computer in the network. | False. Authorization controls access based on user permissions and group memberships defined in the directory. |
| 8: Active Directory integrates with DNS services to provide name resolution for network resources. | True. |
| 9: Replication in Active Directory is used to prevent changes from spreading to other domain controllers. | False. Replication synchronizes directory changes across all domain controllers in the network. |
| 10: A Domain Controller stores a writable copy of the Active Directory database for a domain and helps authenticate users. | True. |
| 11: Domain Controllers are optional client computers that only store temporary login records and cannot enforce security policies. | False. Domain Controllers are servers that store a writable copy of the Active Directory database, authenticate users, enforce security policies, and manage access to resources. |
| 12: An Active Directory domain is a logical grouping of network objects such as users, computers, and devices that share a common directory database. | True. |
| 13: Domains do not provide security boundaries because all objects in every forest automatically share identical permissions. | False. Domains provide centralized management and security boundaries within a network. |
| 14: Organizational Units are containers inside a domain that can be used to organize objects, apply Group Policies, and delegate administrative tasks. | True. |
| 15: Organizational Units and forests are the same because both are collections of multiple domains that share a global catalog. | False. OUs are containers within a domain, while forests are collections of multiple domains or domain trees that share a common schema, configuration, and global catalog. |
| 16: An Active Directory forest is a collection of multiple domains that share a common schema, configuration, and global catalog. | True. |
| 17: In Active Directory, a tree is a collection of domains that share a contiguous namespace. | True. |
| 18: A forest must always contain exactly one domain tree and cannot be used to establish trust relationships across domains. | False. A forest can contain one or more domain trees and can establish trust relationships between different domains. |
| 19: Active Directory domains can be arranged in parent-child relationships to support centralized management, delegation, and resource access control. | True. |
| 20: User accounts in Active Directory can only be created manually through Active Directory Users and Computers and cannot be created through PowerShell. | False. User accounts can be created through Active Directory Users and Computers or by using PowerShell cmdlets for automation and bulk creation. |
| 21: Security Groups in Active Directory are used to assign permissions to resources, while Distribution Groups are used for email distribution lists. | True. |
| 22: Group Policy Objects contain settings that can be applied to users or computers within an Active Directory domain. | True. |
| 23: In a one-way trust where Domain A trusts Domain B, users in Domain A automatically gain access to Domain B resources. | False. In that one-way trust, users in Domain B can access resources in Domain A, but users in Domain A do not automatically access resources in Domain B. |