click below
click below
Normal Size Small Size show me how
CTSYSADL_Week 6
| Question | Answer |
|---|---|
| Active Directory objects are records in the Active Directory database that represent network resources such as users, groups, computers, printers, and other network elements. | True |
| Every Active Directory object has a unique identifier and a set of attributes that define its properties and characteristics. | True |
| A user object in Active Directory represents only a login name and does not store password, contact details, group membership, or permissions. | False. A user object can store username, password, contact details, group memberships, and access permissions. |
| Group objects are used to simplify access control by allowing permissions to be assigned to a group instead of assigning them individually to each user. | True |
| A group object can contain user accounts, computer accounts, or even other groups. | True |
| Computer objects in Active Directory represent physical or virtual devices connected to the network. | True |
| Computer objects normally store only the computer name and cannot store operating system or hardware-related information. | False. Computer objects may store the computer name, IP address, operating system version, and hardware details. |
| Organizational Units are containers used to organize objects inside Active Directory. | True |
| Organizational Units are mainly used for storing printer configuration only and are not related to delegation or group policies. | False. Organizational Units help organize objects, delegate administrative tasks, apply group policies, and manage resources hierarchically. |
| Printer objects represent shared printers on the network and may contain details such as name, location, and configuration settings. | True |
| Contact objects represent authenticated user accounts that can log in to the domain like normal employees. | False. Contact objects represent non-authenticated entities such as external contacts or vendors and store communication details. |
| A contact object can store information such as name, email address, and phone number for communication purposes. | True |
| Common object management in Active Directory includes creating new objects, modifying object properties, and deleting objects. | True |
| Creating a new user object usually requires selecting the proper container or Organizational Unit before creating the account. | True |
| When creating a user object, administrators may provide information such as username, password, display name, and group memberships. | True |
| Group creation may involve specifying whether the group is a security group or a distribution group. | True |
| A distribution group is mainly intended for assigning security permissions to network resources. | False. A distribution group is generally used for communication or email distribution, while a security group is used for assigning permissions. |
| Creating a computer object may involve assigning a computer name and defining properties such as operating system, IP address, or location. | True |
| User properties can be modified to change passwords, update contact information, manage group memberships, and adjust account settings. | True |
| Account expiration and login restrictions are examples of settings that may be adjusted under user object properties. | True |
| Group object properties can include group membership, group type, and group scope. | True |
| Group scope can include domain local, global, or universal. | True |
| A group object cannot be modified after it is created because its group type and scope are permanent. | False. Administrators can modify group properties such as membership, type, and scope depending on configuration and permissions. |
| Computer object properties may include computer description, DNS name, operating system version, and other relevant settings. | True |
| Deleting an Active Directory object is a low-risk operation because deleted objects can always be restored automatically. | False. Deleting objects should be done with caution because it can have significant consequences, and recovery depends on features such as Active Directory Recycle Bin or backups. |
| Administrators can use Active Directory Users and Computers to delete users, groups, computers, or Organizational Units. | True |
| Active Directory Recycle Bin must be enabled for deleted objects to be recoverable through that feature. | True |
| If Active Directory Recycle Bin is not enabled, recovery may require restoring objects from backups. | True |
| Deleting an Organizational Unit can affect multiple contained objects, making OU deletion potentially more dangerous than deleting a single object. | True |
| In a properly managed Active Directory environment, permissions should often be assigned to groups rather than directly to many individual users because this improves manageability. | True |