Title: Quiz 6
Course: CTS 2392 Configuring Advanced Windows 2012 Services > Section: Module 6

Q: __________ define the logical replication path between sites to perform _________ replication, allowing for faster and optimized replication between sites based on configured costs and frequencies.
- Site links, Intrasite
- Replication links, Intersite
- Site links, Intersite
- Connection objects, Intrasite
A: Site links, Intersite
If right: Site links define the logical replication link between sites to perform Intersite replication, allowing for faster and optimized replication between sites based on configured costs and frequencies. Site links manage the logical flow of replication between physical sites.
If wrong: Site links define the logical replication link between sites to perform Intersite replication, allowing for faster and optimized replication between sites based on configured costs and frequencies. Site links manage the logical flow of replication between physical sites.

Q: Which PowerShell cmdlet is the correct one to use to create a new Active Directory site?
- New-ADSite
- New-ADReplicationSite
- New-ADSiteLocation
- Add-ADReplicationSite
A: New-ADReplicationSite
If right: You can use the New-ADReplicationSite cmdlet to create a new Active Directory site.
If wrong: You can use the New-ADReplicationSite cmdlet to create a new Active Directory site.

Q: What management console is used to manage Active Directory Sites?
- Active Directory Topology Manager
- Active Directory Sites and Services
- Active Directory Domains and Trusts
- Active Directory Sites and Subnets
A: Active Directory Sites and Services
If right: You will use the Active Directory Sites and Services console to manage Active Directory sites.
If wrong: You will use the Active Directory Sites and Services console to manage Active Directory sites.

Q: What will happen to a client that needs to authenticate against Active Directory, but has no site defined for its subnet?
- The client will not be able to authenticate
- The client will be able to authenticate as long as it can contact a global catalog server
- The client will authenticate to a domain controller in another site, over the WAN link
- The client will use cached credentials until the site configuration is corrected
A: The client will authenticate to a domain controller in another site, over the WAN link
If right: If there are no sites defined or if they are defined improperly, the authentication or service request might get sent to another physical site. By crossing over the WAN to find resources and to authenticate against domain controllers in a separate site, increased latency and decreased response time to the client are highly likely across slow connections.
If wrong: If there are no sites defined or if they are defined improperly, the authentication or service request might get sent to another physical site. By crossing over the WAN to find resources and to authenticate against domain controllers in a separate site, increased latency and decreased response time to the client are highly likely across slow connections.

Q: Your organization has six offices spread over three cities in North America. At a minimum, how many Active Directory sites should you plan to have?
- One
- Three
- Six
- Eighteen
A: Three
If right: Sites should match up to physical locations, so since you operate offices in three cities, a minimum of three sites, but certainly no more than six if the links between offices in the same city are poor.
If wrong: Sites should match up to physical locations, so since you operate offices in three cities, a minimum of three sites, but certainly no more than six if the links between offices in the same city are poor.

Q: What undesirable side effect may result from having the “Bridge All Site Links” option disabled?
- You will need to manually create site link bridges between spoke sites
- Sites will only replicate among themselves directly if you configure this to occur
- Replication time and traffic between spokes will increase due to needing to go through the hub location
- Replication will not occur other than to the hub site
A: Replication time and traffic between spokes will increase due to needing to go through the hub location
If right: Configuring a Hub-and-Spoke Topology forces all replication to take place through the hub site before replicating back to branch offices. A disadvantage of the Hub-and-Spoke Topology is the inability to directly replicate directory partitions between branch offices. All replication must cross the WAN to replicate with the hub site and then traverse through a WAN connection again to reach the second branch office. This increases the time it takes for the second branch office to receive directory changes.
If wrong: Configuring a Hub-and-Spoke Topology forces all replication to take place through the hub site before replicating back to branch offices. A disadvantage of the Hub-and-Spoke Topology is the inability to directly replicate directory partitions between branch offices. All replication must cross the WAN to replicate with the hub site and then traverse through a WAN connection again to reach the second branch office. This increases the time it takes for the second branch office to receive directory changes.

Q: By default, how often does Intersite replication occur in Active Directory?
- Every 30 minutes
- Every 60 minutes
- Every 120 minutes
- Every 180 minutes
A: Every 180 minutes
If right: The replication interval defines how often replication across the site link occurs. By default, replication on site links is configured to occur every 180 minutes and can be modified within the site link properties.
If wrong: The replication interval defines how often replication across the site link occurs. By default, replication on site links is configured to occur every 180 minutes and can be modified within the site link properties.

Q: Intersite replication, through the use of __________ servers, replicates directory partitions from one site's __________ server to another site's __________ server.

Q: All domain controllers within a site replicate with one another in a process called __________.

Q: What PowerShell one-liner could you use to move a Domain Controller to a new site?

Q: What is the name of the default site link created when an Active Directory forest is initially created?

Q: What happens if the closest site to a site containing only RODCs contains only Windows 2003 domain controllers?

Q: Why might selecting the “Reset all passwords for computer accounts that were cached on this Read-Only Domain Controller” option when deleting an RODC be a bad idea?

Q: How can you force the KCC to reexamine the Active Directory topology looking for recent changes from the command line?

Q: By default, what does replication between sites depend on?

Q: In a site that contains multiple domain controllers, how long will a domain controller wait after notifying its first replication partner before sending the change notification to its next replication partner?

Q: To most effectively configure and use a Filtered Attribute Set, what should your domain and forest functional levels be, at a minimum?
- Windows Server 2003 or higher in the domain, Windows Server 2008 or higher in the forest
- Windows Server 2008 or higher in the domain, Windows Server 2008 or higher in the forest
- Windows Server 2012 in the domain, Windows Server 2008 or higher in the forest
- Windows Server 2008 or higher in the domain, Windows Server 2003 or higher in the forest
A: Windows Server 2008 or higher in the domain, Windows Server 2008 or higher in the forest
If right: Although configuring the Filtered Attribute Set does not require a forest functional level of Windows Server 2008, it is highly recommended, because malicious users can take advantage of attribute replication from Windows Server 2003 domain controllers. Windows Server 2003 domain controllers permit requested changes to be replicated, whether configured as confidential or not. When the forest functional level is raised to Windows Server 2008, there can be no Windows Server 2003 domain controllers in the forest.
If wrong: Although configuring the Filtered Attribute Set does not require a forest functional level of Windows Server 2008, it is highly recommended, because malicious users can take advantage of attribute replication from Windows Server 2003 domain controllers. Windows Server 2003 domain controllers permit requested changes to be replicated, whether configured as confidential or not. When the forest functional level is raised to Windows Server 2008, there can be no Windows Server 2003 domain controllers in the forest.

Q: Which of the following scenarios best represents an urgent replication-inducing event?
- A change in the domain account lockout policies
- The creation of a new user account in the domain
- The changing of a user account password
- Replication performed to correct a replication conflict
A: A change in the domain account lockout policies
If right: Urgent replication allows for critical directory information to be delivered to replica domain controllers without waiting the normal, non-urgent, fifteen-second and three-second subsequent intervals. Examples of directory updates that are urgently replicated include account lockouts, changes in account lockout policies, changes in the domain password policy, and changes of a domain controller account password.
If wrong: Urgent replication allows for critical directory information to be delivered to replica domain controllers without waiting the normal, non-urgent, fifteen-second and three-second subsequent intervals. Examples of directory updates that are urgently replicated include account lockouts, changes in account lockout policies, changes in the domain password policy, and changes of a domain controller account password.

Q: What benefits does DFSR replication of the SYSVOL folder offer?

Q: What repadmin command can you run to return the replication status of all inbound connections from source domain controllers to the domain controller it is run from?

Q: When you initiate the deletion of an RODC, you are given several options to choose from with actions you can take for the passwords that were cached on the RODC. Which of these options is the default configuration when you receive the prompt?
- Reset all passwords for user accounts that were cached on this Read-Only Domain Controller
- Reset all passwords for computer accounts that were cached on this Read-Only Domain Controller
- Export the list of accounts that were cached on this Read-Only Domain Controller to this file
- All of the above options
A: Reset all passwords for user accounts that were cached on this Read-Only Domain Controller; Export the list of accounts that were cached on this Read-Only Domain Controller to this file
If right: By default, the Reset all passwords for user accounts that were cached on this Read-Only Domain Controller and the Export the list of accounts that were cached on this Read-Only Domain Controller to this file check boxes are selected.
If wrong: By default, the Reset all passwords for user accounts that were cached on this Read-Only Domain Controller and the Export the list of accounts that were cached on this Read-Only Domain Controller to this file check boxes are selected.

Q: What requirements must be met in order to perform the configuration of the Filtered Attribute Set? (Choose all that apply)
- The Schema Master must be on a domain controller running Windows Server 2008 or Windows Server 2012
- The Schema Master must be on a domain controller running Windows Server 2012
- You must perform the change directly on the Schema Master
- You must perform the change at the command line using the netdom command
A: The Schema Master must be on a domain controller running Windows Server 2008 or Windows Server 2012; You must perform the change directly on the Schema Master
If right: To configure the Filtered Attribute Set, the configuration of the attribute must be done on a Windows Server 2008 or Windows Server 2012 domain controller that holds the Schema Master FSMO role.
If wrong: To configure the Filtered Attribute Set, the configuration of the attribute must be done on a Windows Server 2008 or Windows Server 2012 domain controller that holds the Schema Master FSMO role.

Q: When you mark an attribute as “Confidential” in the schema, what are you effectively doing?
- Enforcing attribute-level encryption on the data
- Disabling access to read or write that attribute other than to members of the Schema Admins groups
- Marking that attribute to not be replicated to an RODC
- Marking that attribute as requiring replication to an RODC
A: Marking that attribute to not be replicated to an RODC
If right: Implementing Filter Attribute Sets allows administrators the ability to mark attributes as Confidential when being replicated to RODCs. Attributes marked as confidential and that are part of the Filtered Attribute Set will not be replicated to an RODC.
If wrong: Implementing Filter Attribute Sets allows administrators the ability to mark attributes as Confidential when being replicated to RODCs. Attributes marked as confidential and that are part of the Filtered Attribute Set will not be replicated to an RODC.

Q: Why must an RODC be able to connect to at least one Windows Server 2008 or higher domain controller? (Choose all that apply)
- To replicate the domain partition
- To replicate the global catalog partition
- So that the Password Replication Policy (PRP) applied to the RODC can be configured and enforced
- So that the SYSVOL folder can be replicated using Distributed File System Replication (DFSR)
A: To replicate the domain partition; So that the Password Replication Policy (PRP) applied to the RODC can be configured and enforced
If right: Read-only domain controllers can only pull the domain partition from a writable Windows Server 2008 or higher domain controller. Additionally, the need to connect to a writable Windows Server 2008 domain controller is required because the Password Replication Policy (PRP) applied to the RODC can be configured and enforced only from a writable Windows Server 2008 domain controller.
If wrong: Read-only domain controllers can only pull the domain partition from a writable Windows Server 2008 or higher domain controller. Additionally, the need to connect to a writable Windows Server 2008 domain controller is required because the Password Replication Policy (PRP) applied to the RODC can be configured and enforced only from a writable Windows Server 2008 domain controller.

Q: What will happen if the SYSVOL or NETLOGON shares are open (being viewed) anywhere during the DFSR SYSVOL migration?
- The migration will fail silently and you will need to look at the netlogon.log file for error information
- The migration will fail, and you will be notified of the failure on screen
- The migration will succeed, but the domain controllers will require a reboot after the migration is done
- The migration will succeed, but the folders in the file system that correspond to the old share locations will not be deleted
A: The migration will succeed, but the folders in the file system that correspond to the old share locations will not be deleted
If right: If any of the shares are open, they will be locked and not deleted during the Eliminated state.
If wrong: If any of the shares are open, they will be locked and not deleted during the Eliminated state.