Configuring Windows Server® 2012 Advanced Services: Advanced Active Directory Infrastructure

Answers

This section contains the answers to the lesson review questions in this chapter.

Lesson 1

1. Correct Answer: C

   1. Incorrect: This structure does not support the two different departments that have mutually exclusive Active Directory schema requirements. This structure supports only one Active Directory schema.

   2. Incorrect: This structure does not support the two different departments that have mutually exclusive Active Directory schema requirements. This structure supports only one Active Directory schema.

   3. Correct: This structure supports the two different departments that have mutually exclusive Active Directory schema requirements because each forest has a separate schema.

   4. Incorrect: This structure does not support the two different departments that have mutually exclusive Active Directory schema requirements. This structure supports only one Active Directory schema.

2. Correct Answer: C

   1. Incorrect: You need more than one domain to support the two separate domain names.

   2. Incorrect: Implementing this solution requires the creation of additional trust relationships when compared to using a single forest with multiple domain trees.

   3. Correct: You can accomplish this objective with a design that uses two domain trees, one for wingtiptoys.com and one for tailspintoys.com.

   4. Incorrect: With a single domain tree, a child domain of the root domain needs to use a contiguous namespace. The requirements are that two domains with noncontiguous namespaces be available, which means at least two domain trees.

3. Correct Answer: A

   1. Correct: You can add domain controllers running the Windows Server 2012 operating system to a domain running at the Windows Server 2003 functional level.

   2. Incorrect: You can add domain controllers running the Windows Server 2012 operating system to a domain running at the Windows Server 2003 functional level.

   3. Incorrect: You can add domain controllers running the Windows Server 2012 operating system to a domain running at the Windows Server 2003 functional level.

   4. Incorrect: You can add domain controllers running the Windows Server 2012 operating system to a domain running at the Windows Server 2003 functional level.

4. Correct Answers: A and B

   1. Correct: The Active Directory Recycle Bin is available at the Windows Server 2008 R2 and Windows Server 2012 forest functional levels.

   2. Correct: The Active Directory Recycle Bin is available at the Windows Server 2008 R2 and Windows Server 2012 forest functional levels.

   3. Incorrect: The Active Directory Recycle Bin is available at the Windows Server 2008 R2 and Windows Server 2012 forest functional levels.

   4. Incorrect: The Active Directory Recycle Bin is available at the Windows Server 2008 R2 and Windows Server 2012 forest functional levels.

Lesson 2

1. Correct Answer: D

   1. Incorrect: A forest trust is created between two forests when you want users in each forest to access resources in the counterpart forest. In this instance you need to create a shortcut trust between two domains in the same forest.

   2. Incorrect: You configure an external trust between two domains in different forests, often when you don’t want to allow the trust to be transitive. In this instance you need to create a shortcut trust between two domains in the same forest.

   3. Incorrect: You configure a realm trust between an Active Directory domain and a Kerberos V5 realm. In this instance you need to create a shortcut trust between two domains in the same forest.

   4. Correct: In this instance you need to create a shortcut trust between two domains in the same forest.

2. Correct Answer: B

   1. Incorrect: In this instance you need to create a shortcut trust between two domains in the same forest. You configure a realm trust between an Active Directory domain and a Kerberos V5 realm.

   2. Correct: You configure a realm trust between an Active Directory domain and a Kerberos V5 realm.

   3. Incorrect: A forest trust is created between two forests when you want users in each forest to access resources in the counterpart forest. You configure a realm trust between an Active Directory domain and a Kerberos V5 realm.

   4. Incorrect: You configure an external trust between two domains in different forests, often when you don’t want to allow the trust to be transitive. You configure a realm trust between an Active Directory domain and a Kerberos V5 realm.

3. Correct Answer: B

   1. Incorrect: You configure an external trust between two domains in different forests, often when you don’t want to allow the trust to be transitive.

   2. Correct: A forest trust is created between two forests when you want users in each forest to access resources in the counterpart forest.

   3. Incorrect: You configure a realm trust between an Active Directory domain and a Kerberos V5 realm.

   4. Incorrect: In this instance you need to create a shortcut trust between two domains in the same forest.

4. Correct Answer: A

   1. Correct: You configure an external trust between two domains in different forests, often when you don’t want to allow the trust to be transitive.

   2. Incorrect: You configure a realm trust between an Active Directory domain and a Kerberos V5 realm.

   3. Incorrect: In this instance you need to create a shortcut trust between two domains in the same forest.

   4. Incorrect: A forest trust is created between two forests when you want users in each forest to access resources in the counterpart forest.