Name:     ID: 
 
    Email: 

70-290-MNE-Ch4

True/False
Indicate whether the sentence or statement is true or false.
 

 1. 
Any group that will ultimately be assigned permissions or rights must be a security group.
 

 2. 
A group’s scope refers to the types of domain controllers present in the environment.
 

 3. 
A domain local group can be assigned rights and permissions to any resource within the same domain only.
 

 4. 
If an administrator needs to create or manage the properties of multiple groups simultaneously, the command-line utilities DSADD, DSMOD, etc. are not suitable for this purpose.
 

 5. 
The functional level of a domain can be raised in Active Directory Users and Computers by right-clicking the domain and clicking Raise Domain Functional Level.
 

 6. 
If a global group is a member of another global group, you cannot change its scope to universal.
 

 7. 
The DSMOD GROUP command is used primarily to create new group accounts.
 

 8. 
The DSQUERY command returns a list of distinguished names.
 

 9. 
The DSMOVE command allows you to move objects between domains.
 

 10. 
The first steps in a general strategy for implementing groups in an environment is to create user accounts and organize them into domain local groups.
 

Multiple Choice
Identify the letter of the choice that best completes the statement or answers the question.
 

 11. 
A(n) ____ is a group defined by a Security Identifier.
a.
organizational unit
c.
global group
b.
security group
d.
distribution group
 

 12. 
Groups are similar to ____ in that both organize other objects into logical containers.
a.
user accounts
c.
functional levels
b.
computer accounts
d.
organizational units
 

 13. 
Unlike security groups, distribution groups do not have a(n) ____ associated with them.
a.
SID
c.
domain functional level
b.
global group
d.
schema
 

 14. 
The ____ of an environment is determined by the operating systems of the domain controllers in the environment.
a.
discretionary access control list
c.
domain functional level
b.
group membership
d.
distribution group
 

 15. 
There are ____ possible group scopes.
a.
2
c.
4
b.
3
d.
5
 

 16. 
When a domain is configured to the Windows 2000 mixed domain functional level, which of the following is true for global groups?
a.
they can be added to domain local groups in any domain
b.
they can be added to universal groups in the forest
c.
they can contain global groups from any domain
d.
they can contain domain local groups from the same domain
 

 17. 
Which of the following refers to a type of group that is typically created for the purpose of aggregating users or groups in different domains throughout an Active Directory forest?
a.
distribution group
c.
domain local group
b.
universal group
d.
security group
 

 18. 
Which of the following is the primary graphical tool used for creating and managing group accounts?
a.
DSADD
c.
Group Wizard
b.
Discretionary Access Control Lists
d.
Active Directory Users and Computers
 

 19. 
To create a group using Active Directory Users and Computers, you should right-click the particular container or OU, select ____, and then click Group.
a.
General
c.
New
b.
Create
d.
Members
 

 20. 
Under which of the following tabs in a properties dialog box for a group account in Active Directory Users and Computers could you add or remove this group from other groups?
a.
General
c.
Members
b.
Managed By
d.
Member Of
 

 21. 
You can change the type of a group from the ____ tab of the properties of the group account in Active Directory Users and Computers.
a.
General
c.
Member Of
b.
Members
d.
Managed By
 

 22. 
In order to change the scope of a group, the domain functional level must be at least at the ____ level.
a.
Windows 2000 mixed
c.
Windows Server 2003
b.
Windows 2000 native
d.
Windows NT 4.0
 

 23. 
It is possible to change the scope of Group A to universal unless Group A has a(n) ____ scope and it has a domain local group as a member.
a.
local
c.
domain local
b.
global
d.
universal
 

 24. 
Changing the scope of a group account can be done from the ____ tab of the properties of the account in Active Directory Users and Computers.
a.
General
c.
Member Of
b.
Members
d.
Managed By
 

 25. 
Which of the following command-line utilities can be used to create a new group account?
a.
DSQUERY
c.
DSADD
b.
DSRM
d.
DSMOVE
 

 26. 
What is the required argument for the DSADD GROUP command-line utility?
a.
scope
c.
members
b.
distinguished name
d.
member of
 

 27. 
Which of the following is a switch that would commonly be used with the DSADD command-line utility?
a.
-noprompt
c.
-newparent
b.
-newname
d.
-members
 

 28. 
The command
            dsadd group “cn=XXX” -scope g
would create a group account with a(n) ____ scope.
a.
local
c.
domain local
b.
global
d.
universal
 

 29. 
One way to get a list of options and switches available for the DSADD GROUP command would be to type ____ at the command line.
a.
DSADD ? GROUP
c.
DSADD GROUP HELP
b.
HELP DSADD GROUP
d.
DSADD GROUP /?
 

 30. 
The DSMOD GROUP command requires that you specify values for at least ____ switch(es).
a.
0
c.
2
b.
1
d.
3
 

 31. 
To remove a member from a group account using the DSMOD GROUP command, you specify the member to remove with the ____ switch.
a.
-memberof
c.
-rmmbr
b.
-desc
d.
-members
 

 32. 
The term ____ refers to directing the output of one command to the input of a second command.
a.
piping
c.
reflecting
b.
moving
d.
querying
 

 33. 
If you wish to move an existing group account into a new container, you could use the DSMOVE command with the ____ switch.
a.
-newname
c.
-rmmbr
b.
-member
d.
-newparent
 

 34. 
Which of the following is a utility that allows you to move objects between domains?
a.
DSMOVE
c.
DSGET
b.
DSRM
d.
MOVETREE
 

 35. 
Which of the following command-line utilities can be used to delete group accounts?
a.
DSMOVE
c.
DSGET
b.
DSRM
d.
DSMOD
 

 36. 
Which of the following is the last step in the A G U DL P strategy?
a.
create user accounts
b.
create universal groups
c.
assign permissions to domain local groups
d.
add global groups to domain local groups
 

 37. 
The easiest method of determining the groups that a user belongs to is via the ____ tab in the properties of their user account.
a.
General
c.
Member Of
b.
Advanced
d.
Profile
 

 38. 
The ____ command-line utility provides a method of determining a user’s group membership.
a.
DSGET
c.
DSRM
b.
DSQUERY
d.
DSMOD
 

 39. 
Which of the following switches would return information about all of the members of a group when used with the DSGET GROUP command-line utility?
a.
-members
c.
-desc
b.
-memberof
d.
-rmmbr
 

 40. 
Which of the following features do built-in local security groups have?
a.
universal scope
c.
administrative scope
b.
customized organizational units
d.
pre-assigned rights
 

 41. 
Which of the following built-in containers holds built-in groups that are created automatically when Active Directory is installed?
a.
Users
c.
Admins
b.
Groups
d.
Guests
 

 42. 
The Builtin Container holds a number of ____ group accounts that are allocated specific user rights.
a.
global
c.
domain local
b.
local
d.
universal
 

 43. 
The Users container contains a number of different domain local and ____ group accounts.
a.
global
c.
local
b.
universal
d.
security
 

 44. 
Which of the following built-in groups in the Users container is able to administer DNS server settings and configuration?
a.
Schema Admins
c.
DnsUpdateProxy
b.
DnsAdmins
d.
Domain Users
 

 45. 
What tool could you use to change the settings of an existing computer account?
a.
DSRM COMPUTER
c.
DSGET COMPUTER
b.
DSADD COMPUTER
d.
DSMOD COMPUTER
 

Matching
 
 
Match each term with the correct statement below..
a.
Print Operators
f.
Remote Desktop Users
b.
Users
g.
Administrators
c.
Server Operators
h.
Backup Operators
d.
Windows Authorization Access Group
i.
Guests
e.
Network Configuration Operators
j.
Performance Monitor Users
 

 46. 
a group that is able to change TCP/IP settings on domain controllers within the domain
 

 47. 
a group that is able to share disk resources, back-up and restore files, and shut down or restart the server
 

 48. 
a group that is assigned complete unrestricted access to the domain
 

 49. 
a group that is able to remotely access servers to monitor performance
 

 50. 
a group that has all print administration rights
 

 51. 
a group that is able to log on to domain controllers within the domain remotely
 

 52. 
a group that is able to override security restrictions for the purpose of backing up or restoring files
 

 53. 
a group that has no default permissions except those assigned by the administrator
 

 54. 
a group that has no default permissions or rights except those assigned to the Everyone group
 

 55. 
a group that allows members to query user accounts for the group membership information of a user
 



 
Submit          Reset Help