Home > Sample chapters

Configuring Windows Server® 2012 Advanced Services: Advanced Active Directory Infrastructure

Answers

This section contains the answers to the lesson review questions in this chapter.

Lesson 1

  1. Correct Answer: C

    1. Incorrect: This structure does not support the two different departments that have mutually exclusive Active Directory schema requirements. This structure supports only one Active Directory schema.

    2. Incorrect: This structure does not support the two different departments that have mutually exclusive Active Directory schema requirements. This structure supports only one Active Directory schema.

    3. Correct: This structure supports the two different departments that have mutually exclusive Active Directory schema requirements because each forest has a separate schema.

    4. Incorrect: This structure does not support the two different departments that have mutually exclusive Active Directory schema requirements. This structure supports only one Active Directory schema.

  2. Correct Answer: C

    1. Incorrect: You need more than one domain to support the two separate domain names.

    2. Incorrect: Implementing this solution requires the creation of additional trust relationships when compared to using a single forest with multiple domain trees.

    3. Correct: You can accomplish this objective with a design that uses two domain trees, one for wingtiptoys.com and one for tailspintoys.com.

    4. Incorrect: With a single domain tree, a child domain of the root domain needs to use a contiguous namespace. The requirements are that two domains with noncontiguous namespaces be available, which means at least two domain trees.

  3. Correct Answer: A

    1. Correct: You can add domain controllers running the Windows Server 2012 operating system to a domain running at the Windows Server 2003 functional level.

    2. Incorrect: You can add domain controllers running the Windows Server 2012 operating system to a domain running at the Windows Server 2003 functional level.

    3. Incorrect: You can add domain controllers running the Windows Server 2012 operating system to a domain running at the Windows Server 2003 functional level.

    4. Incorrect: You can add domain controllers running the Windows Server 2012 operating system to a domain running at the Windows Server 2003 functional level.

  4. Correct Answers: A and B

    1. Correct: The Active Directory Recycle Bin is available at the Windows Server 2008 R2 and Windows Server 2012 forest functional levels.

    2. Correct: The Active Directory Recycle Bin is available at the Windows Server 2008 R2 and Windows Server 2012 forest functional levels.

    3. Incorrect: The Active Directory Recycle Bin is available at the Windows Server 2008 R2 and Windows Server 2012 forest functional levels.

    4. Incorrect: The Active Directory Recycle Bin is available at the Windows Server 2008 R2 and Windows Server 2012 forest functional levels.

Lesson 2

  1. Correct Answer: D

    1. Incorrect: A forest trust is created between two forests when you want users in each forest to access resources in the counterpart forest. In this instance you need to create a shortcut trust between two domains in the same forest.

    2. Incorrect: You configure an external trust between two domains in different forests, often when you don’t want to allow the trust to be transitive. In this instance you need to create a shortcut trust between two domains in the same forest.

    3. Incorrect: You configure a realm trust between an Active Directory domain and a Kerberos V5 realm. In this instance you need to create a shortcut trust between two domains in the same forest.

    4. Correct: In this instance you need to create a shortcut trust between two domains in the same forest.

  2. Correct Answer: B

    1. Incorrect: In this instance you need to create a shortcut trust between two domains in the same forest. You configure a realm trust between an Active Directory domain and a Kerberos V5 realm.

    2. Correct: You configure a realm trust between an Active Directory domain and a Kerberos V5 realm.

    3. Incorrect: A forest trust is created between two forests when you want users in each forest to access resources in the counterpart forest. You configure a realm trust between an Active Directory domain and a Kerberos V5 realm.

    4. Incorrect: You configure an external trust between two domains in different forests, often when you don’t want to allow the trust to be transitive. You configure a realm trust between an Active Directory domain and a Kerberos V5 realm.

  3. Correct Answer: B

    1. Incorrect: You configure an external trust between two domains in different forests, often when you don’t want to allow the trust to be transitive.

    2. Correct: A forest trust is created between two forests when you want users in each forest to access resources in the counterpart forest.

    3. Incorrect: You configure a realm trust between an Active Directory domain and a Kerberos V5 realm.

    4. Incorrect: In this instance you need to create a shortcut trust between two domains in the same forest.

  4. Correct Answer: A

    1. Correct: You configure an external trust between two domains in different forests, often when you don’t want to allow the trust to be transitive.

    2. Incorrect: You configure a realm trust between an Active Directory domain and a Kerberos V5 realm.

    3. Incorrect: In this instance you need to create a shortcut trust between two domains in the same forest.

    4. Incorrect: A forest trust is created between two forests when you want users in each forest to access resources in the counterpart forest.