Home > Articles

This chapter is from the book

End-of-Chapter Review Questions

The answers to these questions appear in Appendix A. For more practice with exam format questions, use the Pearson Test Prep Software Online.

  1. You are preparing to roll out a major batch update to your AD DS directory. The update will touch 1,500 different objects across multiple OUs. Part of your post-change validation strategy is to compare random accounts from the update and validate them against their pre-update status. How would you best perform the comparison?

    1. Disconnect a read-only domain controller from the network prior to rolling out the change. Use that RODC as a snapshot of the pre-change state of the directory for comparison.

    2. Perform a full backup of the directory prior to rolling out the change. After the change has been put in place perform an authoritative restore and validate the accounts against their pre-change state.

    3. Capture a snapshot of the directory prior to rolling out the change. After the change has been put in place, mount the snapshot and browse it to compare accounts to their pre-change state.

    4. Perform a full backup of the directory prior to rolling out the change. After the change has been put in place perform a nonauthoritative restore and validate the accounts against their pre-change state.

  2. You have been using ntdsutil to create many snapshots over the past month while various directory updates have been performed. You no longer need those snapshots and would like to reclaim the space they’re taking up. What command would you perform to remove the snapshots?

  3. An RODC in a remote location used exclusively for hosting AD DS for the users at that location has a hard disk failure. Once a new drive is in place you have been tasked with restoring the authentication services on that machine. What would be the best approach?

    1. Reinstall Windows Server and the AD DS role. Promote the server to a DC in the existing domain.

    2. Reinstall Windows Server and the AD DS role. Perform an authoritative restore from a recent backup using Windows Server Backup.

    3. Reinstall Windows Server and the AD DS role. Perform a nonauthoritative restore from a recent backup using Windows Server Backup.

    4. Clone an existing RODC on the network and ship it to the remote site.

  4. You administer an RODC located in the network DMZ to allow for authentication from users outside the network. This machine also hosts a number of web applications accessible from outside the network as well as their supporting databases. There is a hard disk failure, and once a replacement drive is in place you have been tasked with restoring the services on that machine. What would be the best approach?

    1. Reinstall Windows Server and the AD DS role. Promote the server to a DC in the existing domain.

    2. Reinstall Windows Server and the AD DS role. Perform an authoritative restore from a recent backup using Windows Server Backup.

    3. Reinstall Windows Server and the AD DS role. Perform a nonauthoritative restore from a recent backup using Windows Server Backup.

    4. Clone an existing RODC on the network and ship it to the remote site.

  5. A junior staffer just informed you that he accidentally deleted an entire OU with over 100 active user and computer accounts. What steps could you perform to recover the directory?

  6. An RODC in a remote location used exclusively for hosting AD DS for the users at that location has a hard disk failure. Once a new drive is in place you have been tasked with restoring the authentication services on that machine. You choose to install a fresh copy of Windows Server with the AD DS role and promote the server to a controller on the domain. What must you do before you can promote this “new” server?

Pearson IT Certification Promotional Mailings & Special Offers

I would like to receive exclusive offers and hear about products from Pearson IT Certification and its family of brands. I can unsubscribe at any time.