IT Security and Directory Services
Textbook Exam Questions
Course Introduction
IT Security and Directory Services explores the fundamental principles and practices of securing information technology environments, with a special emphasis on directory services such as Microsoft Active Directory and LDAP. The course covers topics including authentication, authorization, access control, identity management, and secure configuration of directory services within modern enterprise networks. Students will gain practical experience in implementing and managing secure directory structures, integrating directory services with network infrastructure, and applying security best practices to protect digital assets against evolving threats. The course also examines compliance, auditing, and incident response strategies in relation to directory services security.
Recommended Textbook MCTS
649 Verified Questions
649 Flashcards
Source URL: https://quizplus.com/study-set/2145 Page 2
Greg Tomsho
Chapter 1: Introducing Windows Server 2008
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/42752
Sample Questions
Q1) A network interface is composed of two parts:
A)Device driver software and network medium
B)Network interface and network medium
C)Device driver software and network interface
D)Network interface and client software
Answer: C
Q2) A ____________________ is a major function or service that a server provides.
Answer: server role role
Q3) What version of Internet Information Services (IIS)is included with Windows Server 2008?
A)IIS 6.9
B)IIS 7.0
C)IIS 6.9.1
D)IIS 7.5
Answer: B
Q4) Enter the term that corresponds to the following description: A group of Windows computers that share common management and are subject to rules and policies that an administrator defines.
Answer: Windows domain
Page 3
To view all questions and flashcards with answers, click on the resource link above.
Chapter 2: Installing Windows Server 2008
Available Study Resources on Quizplus for this Chatper
49 Verified Questions
49 Flashcards
Source URL: https://quizplus.com/quiz/42753
Sample Questions
Q1) Pick the service below that is required by Active Directory:
A)DHCP
B)DNS
C)WINS
D)NetBIOS
Answer: B
Q2) Select below a valid requirement for the installation of Hyper-V: ____.
A)Windows Server 2008 Datacenter must be installed to use Hyper-V
B)Your CPU must support virtualization extensions
C)You require a Hyper-V license key
D)You must have at least 128 MB of RAM installed
Answer: B
Q3) When using Hyper-V virtual machines,what key combination replaces CTRL + ALT + DELETE?
Answer: CTRL + ALT + END
Q4) When performing a Windows Server 2008 upgrade,what is the pre-existing Windows directory renamed to?
Answer: Windows.old
Q5) What command can you type to force a check for updates?
Answer: wuauclt /detectnow
4
To view all questions and flashcards with answers, click on the resource link above.
Chapter 3: Introducing Active Directory
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/42754
Sample Questions
Q1) When configuring GPOs,which node contains the majority of account policies?
A)Computer Configuration node,Windows Settings folder,Security Settings node
B)Computer Configuration node,Administrative Templates folder,Windows Components node
C)The User Configuration node,Administrative Templates folder
D)The User Configuration node,Windows Settings folder,Security Settings node
Answer: A
Q2) A forest is ____.
A)A grouping of information that describes a network resource,such as a shared printer,or an organizing structure,such as a domain or OU
B)The core structural unit of Active Directory;contains OUs and represents administrative,security,and policy boundaries
C)A collection of one or more Active Directory trees.
D)A database that stores information about a computer network and includes features for retrieving and managing that information
Answer: C
Q3) "John Doe" is an example of which of the following?
Answer: attribute value
To view all questions and flashcards with answers, click on the resource link above.
Chapter 4: Active Directory Design and Security Concepts
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/42755
Sample Questions
Q1) ______________________________ defines the settings for auditing access to an object.
Q2) Each entry in the Discretionary access control list is referred to as an ACE.What does ACE stand for?
A)Acceptable Control Extension
B)Access Control Extension
C)Access Control Entry
D)Applied Control Entry
Q3) What term best fits this description:
A trust in which both domains in the relationship trust each other,so users from both domains can access resources in the other domain.
Q4) Explicit permissions never override inherited permissions.
A)True
B)False
Q5) A site link is needed to connect two or more sites for replication purposes.
A)True
B)False
Q6) Lightweight Directory Access Protocol (LDAP)was created by the
To view all questions and flashcards with answers, click on the resource link above. Page 6
Chapter 5: Account Management
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/42756
Sample Questions
Q1) This functional level is supported by Windows 2000 Server and Windows Server 2003,but not Windows Server 2008.It allows NT DCs to participate in the domain.
Q2) This command line tool modifies existing Active Directory objects
A)DSGET
B)DSMOVE
C)DSRM
D)DSMOD
Q3) This is simply a user account that's copied to create users with common attributes.
Q4) Select below a character that can be used in a user account name:
A)!
B)@
C): D)(?)
Q5) How do you change a profile into a mandatory profile?
A)Delete Ntuser.dat from the profile
B)Rename Ntuser.dat to Ntuser.manual
C)Rename Ntuser.dat to Ntuser.man
D)Delete the AppData folder inside the profile
To view all questions and flashcards with answers, click on the resource link above. Page 7
Chapter 6: Windows File and Print Services
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/42757
Sample Questions
Q1) What command would you use to create a network drive mapping to \\example\shared,with a drive letter of Z?
Q2) A feature on the Windows file system that allows users to access previous versions of files in shared folders and restore files that have been deleted or corrupted
A)Administrative shares
B)disk quotas
C)Distributed File System
D)file system
E)NTFS permissions
F)shadow copies
G)share permissions
H)volume mount points
I)EFS
Q3) The ____________________ uses the syntax \\server\share[\subfolder][\file].
Q4) How would you access all the shares under a DFS namespace in the domain Example and namespace of Test?
Q5) Volume mount points enable you to access a volume as a ____________________ in another volume instead of by using a drive letter.
To view all questions and flashcards with answers, click on the resource link above. Page 8
Chapter 7: Configuring Group Policy
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/42758
Sample Questions
Q1) What would you use to prevent GPOs linked to parent containers from affecting child containers?
A)GPO filtering
B)Enforcing inheritance
C)Loopback policy processing
D)Inheritance blocking
Q2) A new feature in Server 2008,used to set different password and account policies for targeted users and groups
A)Administrative template files
B)domain GPOs
C)fine-grained password policies
D)GPO filtering
E)Group Policy Container
F)Group Policy Template
G)local GPOs
H)Resultant Set of Policy
I)Security templates
Q3) Starter GPOs can be shared with other administrators by placing them into what type of file?
Q4) What is the default setting for "Minimum password age" under Password Policies?
To view all questions and flashcards with answers, click on the resource link above. Page 9
Chapter 8: Introduction to Windows Networking
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/42759
Sample Questions
Q1) Which command is useful for troubleshooting the routing topology of a complex network and finding the bottleneck between a computer and a destination network?
A)nslookup
B)ping
C)arp
D)tracert
Q2) An 8-bit value;a number from 0 to 255 that's one of the four numbers found in a dotted decimal IP address
A)dual-IP layer architecture
B)link-local address
C)metric
D)network connection
E)network discovery
F)network map
G)network provider
H)octet
I)subnet mask
Q3) IPv6 addresses that start with fe80 are called ____________________ addresses
Q4) This command,when typed,will display the routing table on a computer.
To view all questions and flashcards with answers, click on the resource link above. Page 10
Chapter 9: Configuring DNS for Active Directory
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/42760
Sample Questions
Q1) If multiple servers are specified in the forwarders tab of a server's Properties,what happens if a query is made and none of the forwarders provide a response?
A)A normal recursive lookup process is initiated,starting with a root server
B)The query fails and the DNS server sends a failure reply to the client
C)The query is then passed to conditional forwarders
D)The query is cached until it can be resolved
Q2) Which of the commands below can be used to test DNS queries with the default DNS server or a specific DNS server on a Windows computer?
A)nslookup
B)ipconfig
C)dnslint
D)dnscmd
Q3) Glue A records will also appear as an A record in the zone database.
A)True
B)False
Q4) An NS record technically consists of just the name server's FQDN,but this by itself is not useful unless there is an associated ____________________,which if possible,is created automatically in DNS manager by a DNS lookup on the NS record's FQDN.
To view all questions and flashcards with answers, click on the resource link above. Page 11
Chapter 10: Configuring and Maintaining the Active
Directory Infrastructure
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/42761
Sample Questions
Q1) The SMTP protocol is used primarily for e-mail,but can also be used for...
A)Intersite replication
B)Intrasite replication
C)Synchronous communication
D)Securing replication data as it moves between sites
Q2) Which of the following features is not present in Windows Server 2003 domain functional level?
A)Domain controller renaming
B)Selective authentication
C)Logon timestamp replication
D)Fine-grained password policies
Q3) What operations master role is needed when a domain or domain controller is added or removed from the forest?
A)Domain naming master
B)RID master
C)Infrastructure master
D)PDC emulator
Q4) You can't simply delete an account in one domain and re-create it in another without losing the original account's ____________________.
To view all questions and flashcards with answers, click on the resource
Chapter 11: Active Directory Certificate Services
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/42762
Sample Questions
Q1) When using HTTPS,after the web client finds that a CA is trusted and the signature on a certificate is verified,the web client sends additional parameters to the server that are encrypted with the server's....
A)Private key
B)Public key
C)Secret key
D)Ciphertext
Q2) A method of backing up private keys and restoring them if users' private keys are lost
A)issuing CAs
B)root CA
C)intermediate CAs
D)hash algorithm
E)registration authority
F)public key infrastructure
G)key archival
H)Network Device Enrollment Service (NDES)
I)Certificate Practice Statement (CPS)
Q3) This type of CA isn't connected to the network,which makes it less vulnerable to attacks.
To view all questions and flashcards with answers, click on the resource link above. Page 13
Chapter 12: Additional Active Directory Server Roles
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/42763
Sample Questions
Q1) In order for an RMS server to acquire a certificate,it must be able to connect to this service over the internet.
Q2) Installing DNS on an RODC creates a
A)read-write primary zone
B)read-write secondary zone
C)read-only primary zone
D)read-only secondary zone
Q3) This AD FS design involves a network with two Active Directory forests.One forest,located in the perimeter network,is considered the resource partner.The second forest,located in the internal network is the account partner.
Q4) Setting up and testing AD FS with the simplest design requires at least how many computers?
A)2 B)3 C)4 D)8
Q5) Federation servers,federation proxy servers,and Web servers hosting AD FS Web agents must be configured with _____________________________________________,which is used by the HTTPS protocol.
14
To view all questions and flashcards with answers, click on the resource link above.
Chapter 13: Server Management and Monitoring
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/42764
Sample Questions
Q1) What command will restore a backup catalog?
Q2) A boot option available on the Windows Server 2008 installation DVD or by pressing F8 when the system boots
A)authoritative restore
B)data collector set
C)nonauthoritative restore
D)offline defragmentation
E)online defagmentation
F)tombstone lifetime
G)Volume Shadow Copy Service (VSS)
H)Windows Recovery Environment (WinRE)
I)winrs
Q3) In order to activate Windows Server 2008 Core,what command must you type?
A)smlgr.vbs -activate
B)wsus.exe -ato
C)slmgr.vbs -ato
D)net activate windows
Q4) To install AD DS on Server Core,dcpromo must be run in unattended mode.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 15