Advanced Active Directory Infrastructure for Windows Server 2012 R2 Services

Answers

This section contains the answers to the lesson review questions in this chapter.

Lesson 1

1. Correct answer: C

   1. Incorrect. This structure does not support the two different departments that have mutually exclusive Active Directory schema requirements. This structure supports only one Active Directory schema.
   2. Incorrect. This structure does not support the two different departments that have mutually exclusive Active Directory schema requirements. This structure supports only one Active Directory schema.
   3. Correct. This structure supports the two different departments that have mutually exclusive Active Directory schema requirements because each forest has a separate schema.
   4. Incorrect. This structure does not support the two different departments that have mutually exclusive Active Directory schema requirements. This structure supports only one Active Directory schema.

2. Correct answer: C

   1. Incorrect. You need more than one domain to support the two separate domain names.
   2. Incorrect. Implementing this solution requires the creation of additional trust relationships when compared to using a single forest with multiple domain trees.
   3. Correct. You can accomplish this objective with a design that uses two domain trees, one for wingtiptoys.com and one for tailspintoys.com.
   4. Incorrect. With a single domain tree, a child domain of the root domain needs to use a contiguous namespace. The requirements are that two domains with noncontiguous namespaces be available, which means at least two domain trees.

3. Correct answer: A

   1. Correct. You can add domain controllers running the Windows Server 2012 R2 operating system to a domain running at the Windows Server 2003 functional level.
   2. Incorrect. You can add domain controllers running the Windows Server 2012 R2 operating system to a domain running at the Windows Server 2003 functional level.
   3. Incorrect. You can add domain controllers running the Windows Server 2012 R2 operating system to a domain running at the Windows Server 2003 functional level.
   4. Incorrect. You can add domain controllers running the Windows Server 2012 R2 operating system to a domain running at the Windows Server 2003 functional level.

4. Correct answers: A and B

   1. Correct. The Active Directory Recycle Bin is available at the Windows Server 2008 R2 and Windows Server 2012 forest functional levels.
   2. Correct. The Active Directory Recycle Bin is available at the Windows Server 2008 R2 and Windows Server 2012 forest functional levels.
   3. Incorrect. The Active Directory Recycle Bin is available at the Windows Server 2008 R2 and Windows Server 2012 forest functional levels.
   4. Incorrect. The Active Directory Recycle Bin is available at the Windows Server 2008 R2 and Windows Server 2012 forest functional levels.

Lesson 2

1. Correct answer: D

   1. Incorrect. A forest trust is created between two forests when you want users in each forest to access resources in the counterpart forest. In this instance you need to create a shortcut trust between two domains in the same forest.
   2. Incorrect. You configure an external trust between two domains in different forests, often when you don’t want to allow the trust to be transitive. In this instance you need to create a shortcut trust between two domains in the same forest.
   3. Incorrect. You configure a realm trust between an Active Directory domain and a Kerberos V5 realm. In this instance you need to create a shortcut trust between two domains in the same forest.
   4. Correct. In this instance you need to create a shortcut trust between two domains in the same forest.

2. Correct answer: B

   1. Incorrect. In this instance you need to create a shortcut trust between two domains in the same forest. You configure a realm trust between an Active Directory domain and a Kerberos V5 realm.
   2. Correct. You configure a realm trust between an Active Directory domain and a Kerberos V5 realm.
   3. Incorrect. A forest trust is created between two forests when you want users in each forest to access resources in the counterpart forest. You configure a realm trust between an Active Directory domain and a Kerberos V5 realm.
   4. Incorrect. You configure an external trust between two domains in different forests, often when you don’t want to allow the trust to be transitive. You configure a realm trust between an Active Directory domain and a Kerberos V5 realm.

3. Correct answer: B

   1. Incorrect. You configure an external trust between two domains in different forests, often when you don’t want to allow the trust to be transitive.
   2. Correct. A forest trust is created between two forests when you want users in each forest to access resources in the counterpart forest.
   3. Incorrect. You configure a realm trust between an Active Directory domain and a Kerberos V5 realm.
   4. Incorrect. In this instance you need to create a shortcut trust between two domains in the same forest.

4. Correct answer: A

   1. Correct. You configure an external trust between two domains in different forests, often when you don’t want to allow the trust to be transitive.
   2. Incorrect. You configure a realm trust between an Active Directory domain and a Kerberos V5 realm.
   3. Incorrect. In this instance you need to create a shortcut trust between two domains in the same forest.
   4. Incorrect. A forest trust is created between two forests when you want users in each forest to access resources in the counterpart forest.