B. Incorrect: The Dsmod command would be appropriate for a member server in VS .NET

Encoder QR Code JIS X 0510 in VS .NET B. Incorrect: The Dsmod command would be appropriate for a member server

B. Incorrect: The Dsmod command would be appropriate for a member server
QR Creation In VS .NET
Using Barcode maker for ASP.NET Control to generate, create Denso QR Bar Code image in ASP.NET applications.
www.OnBarcode.com
Drawing Bar Code In .NET Framework
Using Barcode printer for ASP.NET Control to generate, create barcode image in ASP.NET applications.
www.OnBarcode.com
computer, but is not applicable to a domain controller. Domain controller passwords cannot be reset using the Dsmod command.
Denso QR Bar Code Creator In C#
Using Barcode maker for .NET framework Control to generate, create QR Code image in VS .NET applications.
www.OnBarcode.com
Encoding Quick Response Code In .NET
Using Barcode maker for .NET Control to generate, create QR Code ISO/IEC18004 image in .NET applications.
www.OnBarcode.com
C. Correct: This command, run with the syntax of Netdom /resetpwd at the console
Denso QR Bar Code Drawer In Visual Basic .NET
Using Barcode generation for .NET framework Control to generate, create Quick Response Code image in .NET framework applications.
www.OnBarcode.com
Paint Code 3 Of 9 In .NET
Using Barcode drawer for ASP.NET Control to generate, create Code39 image in ASP.NET applications.
www.OnBarcode.com
of the domain controller, will reset the password.
Making 2D Barcode In .NET Framework
Using Barcode printer for ASP.NET Control to generate, create Matrix 2D Barcode image in ASP.NET applications.
www.OnBarcode.com
Data Matrix Maker In .NET Framework
Using Barcode maker for ASP.NET Control to generate, create DataMatrix image in ASP.NET applications.
www.OnBarcode.com
D. Incorrect: The recovery console cannot be used to reset a computer s domain
1D Barcode Creator In Visual Studio .NET
Using Barcode generation for ASP.NET Control to generate, create Linear image in ASP.NET applications.
www.OnBarcode.com
UPC Symbol Printer In .NET
Using Barcode printer for ASP.NET Control to generate, create UPC-A Supplement 2 image in ASP.NET applications.
www.OnBarcode.com
account.
Encoding EAN128 In Visual Studio .NET
Using Barcode printer for ASP.NET Control to generate, create GS1 128 image in ASP.NET applications.
www.OnBarcode.com
Uniform Symbology Specification Code 93 Generation In .NET Framework
Using Barcode maker for ASP.NET Control to generate, create Code 93 image in ASP.NET applications.
www.OnBarcode.com
Correct Answers: C
Recognizing UPC-A Supplement 5 In Visual C#
Using Barcode reader for VS .NET Control to read, scan read, scan image in Visual Studio .NET applications.
www.OnBarcode.com
Code 39 Full ASCII Generator In Java
Using Barcode printer for Java Control to generate, create Code39 image in Java applications.
www.OnBarcode.com
A. Incorrect: Active Directory Domains And Trusts is used to set properties for the
Barcode Generation In Java
Using Barcode maker for Java Control to generate, create barcode image in Java applications.
www.OnBarcode.com
PDF-417 2d Barcode Decoder In Visual Studio .NET
Using Barcode decoder for VS .NET Control to read, scan read, scan image in VS .NET applications.
www.OnBarcode.com
domain such as the Domain Functional Level (and Forest Functional Levels), and to manage trusts between domains. It is not used to administer security principals within a domain or forest.
Generate Data Matrix 2d Barcode In C#
Using Barcode creator for .NET Control to generate, create Data Matrix ECC200 image in .NET framework applications.
www.OnBarcode.com
Code128 Scanner In None
Using Barcode reader for Software Control to read, scan read, scan image in Software applications.
www.OnBarcode.com
B. Incorrect: Active Directory Users And Computers can be used to move objects
Draw GS1 - 13 In None
Using Barcode maker for Online Control to generate, create GTIN - 13 image in Online applications.
www.OnBarcode.com
UPC Code Generator In Visual Studio .NET
Using Barcode generator for .NET Control to generate, create UCC - 12 image in .NET applications.
www.OnBarcode.com
within the same domain only.
C. Correct: The Movetree command-line tool can be used to move objects between
domains.
D. Incorrect: The Dsmove utility can be used to move objects within the same
domain only.
Objective 2.2
Create and Manage Computer Accounts in an Active Directory Environment
15-15
Correct Answers: B and C
A. Incorrect: Dsget will return a value of all objects of a given type, and will accept
input from the command Dsquery, but is not able to pipe input to another com mand. Dsget is not able to perform the modifications needed, nor pass informa tion to one of the commands that is able to modify attributes.
B. Correct: Dsmod can receive input from the Dsquery command to make changes
to attributes of objects in Active Directory.
C. Correct: Dsquery can pipe output to the Dsmod command, which can then mod
ify attributes of objects in Active Directory.
D. Incorrect: The Dsadd command can add objects to Active Directory, but cannot
modify attributes.
E. Incorrect: Dsrm can remove objects from Active Directory, but cannot modify
attributes.
15-16
15
Managing Users, Computers, and Groups (2.0)
Objective 2.3
Create and Manage Groups
Grouping user accounts is an efficient way to organize individual users into logical units to which permissions can be assigned. Different from organizational units, groups are security principals, and can be added to the Discretionary Access Control List (DACL, or ACL) of a resource for permission assignment. The types of groups that are available, their scope, and the combinations of nested groups that can be used depend on the Functional Level of the domain in which the groups reside; similarly, some groups can be converted to a different type or scope if the functional level of the domain is high enough. To support all group types, scopes, nesting and conversion possibilities, the functional level of the domain must be Windows 2000 Native or Windows Server 2003. At the lower functional level of Windows 2000 Mixed, group nesting is limited, and conversion is not possible.
Objective 2.3
Create and Manage Groups
15-17
Objective 2.3 Questions 1.
You are administrator of a Windows Server 2003 domain that is, currently, at the
domain functional level Windows 2000 Mixed. Your Windows 2003 domain, contoso.com,
has an external trust established with a Windows NT 4 Domain, contoso_north. You are
planning the use of groups in your domain, and need to determine what group scopes
can be used in any domain in your forest.
What group scope can be used in this context as a security principal
A. Domain Local
B. Global
C. Universal
D. Domain Local with a nested global group
You have just raised the domain functional level of your single-domain forest,
contoso.com, to Windows Server 2003. You want to take advantage of the security
group nesting possibilities available to you.
What Security group nesting is possible at this domain functional level (Choose all that apply.)
A. Domain Local in Domain Local
B. Global in Domain Local
C. Universal in Domain Local
D. Domain Local in Global
E. Global in Global
F. Universal in Global
G. Universal in Universal
H. Global in Universal
I. Domain Local in Universal
15-18
15
Managing Users, Computers, and Groups (2.0)
You have just raised the domain functional level of your single-domain forest,
contoso.com, to Windows Server 2003. You want to take advantage of the security
group conversion possibilities available to you.
What security group conversion is possible at this domain functional level (Choose all that apply.)
A. Domain local with user members; convert to global
B. Global with user members; convert to universal
C. Global with global group members; convert to universal
D. Universal group with universal group members; convert to domain local
E. Universal group with universal group members; convert to global
F. Global with user members; convert to domain local
G. Domain local with user members; convert to universal
You are the administrator of a Windows Server 2003 domain, contoso.com, that is set to
domain functional Level Windows 2000 mixed during a migration of your network.
You are planning your use of groups during this transitional period, and want to deter-
mine what group types you can create and what scopes those groups may have.
What group type and scope possibilities exist at this functional level (Choose all that apply.)
A. Domain Local Group: Security Type
B. Domain Local Group: Distribution Type
C. Global group: Security Type
D. Global group: Distribution Type
E. Universal group: Security Type
F. Universal group: Distribution Type
Objective 2.3
Create and Manage Groups
15-19
Objective 2.3 Answers 1.
Correct Answers: B
A. Incorrect: Domain Local groups are only available for use as security principals
on domain controllers in the Windows Server 2003 domain, contoso.com.
B. Correct: Global groups are available for permission assignment in any ACL in the
forest.
C. Incorrect: Universal groups are only available as distribution groups, not security
groups, in the Windows 2000 Mixed functional level.
D. Incorrect: Domain Local groups, at this functional level, are only available on
domain controllers in the contoso.com domain, regardless of other groups that
they may contain. The nested global group, however, is available for permission
assignment.
Correct Answers: A, B, C, E, G, and H
A. Correct: Domain local groups can contain other domain local groups from the
same domain.
B. Correct: This nesting is possible regardless of the functional level.
C. Correct: Universal groups can be placed in domain local groups.
D. Incorrect: This nesting is not possible at any functional level.
E. Correct: Global groups can be placed in global groups.
F. Incorrect: This nesting is not possible at any functional level
G. Correct: Universal groups can be placed in universal groups.
H. Correct: Global groups can be placed in universal groups.
I. Incorrect: This nesting is not possible at any functional level.
15-20
15
Managing Users, Computers, and Groups (2.0)
Correct Answers: B, D, and G
A. Incorrect: Domain local groups cannot be converted to global groups, regardless
of domain functional level.
B. Correct: Global groups without other global groups as members can be con
verted to universal groups.
C. Incorrect: The conversion of groups of this type could create a circular refer
ence, and is not permitted.
D. Correct: There is no restriction on this type of conversion, at this functional level,
regardless of universal group memberships.
E. Incorrect: The conversion of groups of this type could create a circular refer
ence, and is not permitted.
F. Incorrect: This type of conversion is not permitted. G. Correct: So long as a domain local group does not have any other domain local
groups as members, conversion to a universal group is permitted.
Correct Answers: A, B, C, D, and F
A. Correct: Domain local groups can be created with a group type of security, but
will be available only on the domain controllers in the domain in which they were created until the domain functional level is raised.
B. Correct: Domain local groups can be created with a group type of distribution,
but will be available only on the domain controllers in the domain in which they were created until the domain functional level is raised.
C. Correct: Global groups can be created with a group type of security regardless of
the domain functional level.
D. Correct: Global groups can be created with a group type of distribution regard-
less of the domain functional level.
E. Incorrect: Universal groups cannot be created with a group type of security until
the domain functional level is raised.
F. Correct: Universal groups can be created with a group type of distribution
regardless of the domain functional level.
Objective 2.4
Create and Manage User Accounts
15-21
Objective 2.4
Create and Manage User Accounts
User accounts can be added individually through the Active Directory Users And Com puters snap-in, or through the Directory Service command-line tool, Dsadd. These tools are preferred and sufficient for single accounts. Active Directory Users And Com puters is also the easiest tool for managing the properties of user accounts, as it pre sents a common and usable interface to these properties. The Directory Service command-line tools are better suited for mass manipulation of the properties of exist ing collections of users such as groups, OUs, or the entire domain. If you already have a directory or database of users, it may be more efficient to import these users into your Active Directory using Ldifde or Csvde.
15-22
15
Managing Users, Computers, and Groups (2.0)
Objective 2.4 Questions 1.
Which of the following tools allow for the creation of Active Directory security princi pals (user, computer, and group accounts) based on user or file input (Choose all that apply.)
A. Active Directory Users And Computers B. Active Directory Domains And Trusts C. Ntdsutil D. Ldifde E. Csvde F. Dsadd G. Dsquery H. Dsmod
You are the administrator of the Windows Server 2003 domain contoso.com. Your com pany employs many temporary workers. Some of these workers are employed only once, others are employed periodically on a recurring basis. Your goal is to automate a process that will determine which accounts have not been used within the last month and then disable them. If the accounts are needed again, you will re-enable them at that time. Which Directory Service command-line tool is the appropriate one to achieve your goal
Copyright © OnBarcode.com . All rights reserved.