It Security: Concept And Certification Options

By Author: jdskfjh
Total Articles: 286
Comment this article

You are planning the placement of the operations masters within Coho Vineyard's Active Directory network. The root domain of the forest will free it certification.
You wish to ensure absolute security on the operations master roles. In this forest, you will have three infrastructure masters, one
per domain. For which operations masters will you have only one operations master role to secure for the forest?
A. The PDC emulator
B. The domain naming master
C. The RID master
D. The schema master
5. You have installed 12 domain controllers in three domains. Your naming scheme is to concatenate the letters "dc" with the number of the domain controller in sequence of installation. Therefore, the fifth domain controller that you install is DC05. The domains are named contoso.com, branch.contoso.com, and leaf.contoso.com. You do not transfer any of the operations master roles after installation. You attempt to rename a group
of users in the root domain, but are unable to. Which of the following domain ccna exam download ...
... controllers is probably down or unable to communicate?
A. dc05.branch.contoso.com
B. dc01.contoso.com
C. dc03-contoso.com
D. dcll.leaf.contoso.com
Correct Answers: D
A.Incorrect: The infrastructure master role is used for moving and renaming objects, not for adding domains. In addition, you would not be able to transfer the role without the domain controller that owns the role, presumably dcOl.root.con- toso.com, being online.
B. Incorrect: The global catalog provides an index of information across the domains but will not affect the addition of a domain.
C. Incorrect: The RID master is used for creating objects within a domain, and each domain has its own. However, any RID master being down will not affect the addition of a new domain to the forest.
D. Correct: The domain naming master role is used to make changes to the domains within the forest, including the addition or deletion of domains. When you seize the domain naming master role, you "will not be able to bring the original holder of that role back online; therefore, you should reinstall it as a new domain controller or server within the domain.
4. Correct Answers: B, D
A. Incorrect: There is a PDC emulator for each domain within the forest.
B. Correct: The domain naming master is in charge of changes to the domain structure in the forest. There is only one domain naming master in each forest. The first domain controller installed in the root domain, will hold this role unless it is transferred to another domain controller.
C. Incorrect: The RID master is in charge of providing the SID information to new objects in the domain. Each domain has its own RID master to provide the domain's unique SID to its own newly created objects. Coho Vineyard will have three.
D. Correct: The schema master determines what types of objects and attributes can be held within the forest. There is only one schema master per forest. This role will be held by the first domain controller installed into free Microsoft practice tests unless it is transferred to another domain controller.