Objective Questions Nes
1. You are the administrator of a Windows Server 2003 domain that is currently at the domain functional level Windows 2000 Mixed. Your Windows 2003 domain, contoso.com, has an external trust established with a Microsoft Windows NT 4 domain, contoso_north. You are planning the use of groups in your domain and need to determine what group scopes can be used in any domain in your forest.
What group scope can be used in this context as a security principal?
A. Domain Local
B. Global
C. Universal
D. Domain Local with a nested global group
2. You have just raised the domain functional level of your single-domain forest, contoso .com, to Windows Server 2003. You want to take advantage of the security group nesting possibilities available to you.
What Security group nesting is possible at this domain functional level? (Choose all that apply.)
A. Domain Local in Domain Local
B. Global in Domain Local
C. Universal in Domain Local
D. Domain Local in Global
E. Global in Global
F. Universal in Global
G. Universal in Universal
H. Global in Universal
I. Domain Local in Universal
3. You have just raised the domain functional level of your single-domain forest, contoso .com, to Windows Server 2003. You want to take advantage of the security group conversion possibilities available to you.
What security group conversion is possible at this domain functional level? (Choose all that apply.)
A. Domain local with user members; convert to global
B. Global with user members; convert to universal
C. Global with global group members; convert to universal
D. Universal group with universal group members; convert to domain local
E. Universal group with universal group members; convert to global
F. Global with user members; convert to domain local
G. Domain local with user members; convert to universal
4. You are the administrator of a Windows Server 2003 domain, contoso.com, that is set to domain functional Level Windows 2000 mixed during a migration of your network. You are planning your use of groups during this transitional period and want to determine what group types you can create and what scopes those groups may have.
What group type and scope possibilities exist at this functional level? (Choose all that apply.)
A. Domain local group: Security Type
B. Domain local group: Distribution Type
C. Global group: Security Type
D. Global group: Distribution Type
E. Universal group: Security Type
F. Universal group: Distribution Type
5. Litware, Inc. is a software engineering company that has a network with two forests. Litware.com is the forest used by most employees and Litware.local is the forest used by the developers. A forest trust links the two forests. Users in several of the domains in the development forest require access to resources scattered among the domains in the Litware.com forest. What type of group should you create in the Litware.local forest if you are following best practice?
A. Universal security group
B. Domain local security group
C. Universal distribution group
D. Domain global security group
E. Domain global distribution group
6. You are the senior network administrator at Contoso. Rather than doing it yourself, you got your deputy network administrator to create 60 new domain local security groups with complex yet specific names in Contoso's single Windows Server 2003 functional level domain contoso.com. All groups reside in the Engineers OU, which otherwise contains no objects. Unfortunately, although the deputy network administrator created the groups, he created them as global groups rather than domain local, as you specified. The groups are currently empty. Which of the following best describes how you can convert the groups to domain local with a minimum amount of administrative effort?
A. It is impossible to convert global groups to domain local groups.
B. Run the command: dsquery group ou=engineers,dc=Contoso,dc=com | dsmod group -scope u, and then run the command: dsquery group ou=engineers,dc= Contoso,dc=com | dsmod group -scope l
C. Run the command: dsquery group ou=engineers,dc=Contoso,dc=com | dsmod group -scope l, and then run the command: dsquery group ou=engineers,dc= Contoso,dc=com | dsmod group -scope u
D. Use Active Directory Users And Computers to select each group and manually change its scope from Global to Domain Local.
Average user rating: 5 stars out of 1 votes
Post a comment