Active Directory - Coursera
Uploaded by
ScribdTranslationsActive Directory - Coursera
Uploaded by
ScribdTranslations25/2/23 Active Directory | Coursera
1. What is Active Directory? Mark all that apply. 0 / 1 point
An open source directory server
A directory server implementation only for Windows
This should not be selected
Not exactly. While Active Directory has some
unique features for Windows clients, it is totally
compatible with LDAP, so it is compatible with any client
compatible with LDAP.
Implementation of Microsoft's directory server
Correct
That's right! Active Directory is Microsoft's specific implementation.
Windows of a directory server. It is fully compatible with
LDAP, so it works with any LDAP-compatible client,
although it has some exclusive features of the ecosystem
Windows.
A directory server compatible with LDAP
2. What is the difference between an organizational unit and a normal container? 0 / 1 point
They are not different; they just have different names for a container.
It may contain other objects
It can only contain other containers.
It may contain additional containers
Incorrect
Not exactly. An organizational unit is a special type of
a container that can hold other containers and ordinary objects.
Unable to access the content of the provided link.ToCover=true 1/8
February 25, 2023, 11:17 PM Active Directory | Coursera
3. When you create an Active Directory domain, what is the name of the 1 / 1 point
default user account?
Superuser
Root
Username
Administrator
Correct
Correct! The default user in an AD domain is Administrator.
4. True or false: The machines of the Domain Controllers group 1 / 1 point
they are also members of the domain computer group.
True
False
Correct
Correct! While domain controllers are technically
computers, are not included in the group of computers of
domain. The domain group of computers has all the
computers connected to a domain for an organization, except for the
domain controllers, which belong to the DC group.
5. How do security groups differ from groups? 0 / 1 point
distribution?
They are exactly the same
Security groups are used for computers, while the
Distribution groups are used for users.
Unable to access or translate external content.true 2/8
February 25, 2023, 11:17 PM Active Directory | Coursera
Security groups are used for users, while the
distribution groups are used for computers.
Security groups can be used to provide access to the
resources, while distribution groups are only used for the
communication by email.
Incorrect
Not exactly. Both groups are used to group accounts of
user. However, distribution groups are only used for the
communication by email, while the groups of
security can be used to grant access to resources.
6. What is the difference between changing a password and resetting one? 0 / 1 point
password?
Changing a password requires the previous password
Changing a password does not require the previous password.
Resetting a password locks the account
They are the same
Incorrect
Not exactly. Changing a password requires the password.
previously, while resetting a password only requires access
of administrator.
7.True or false: joining a computer to Active Directory involves joining the 0 / 1 point
computer to a workgroup.
True
False
Incorrect
The provided link does not contain any translatable text.ToCover=true 3/8
February 25, 2023, 11:17 PM Active Directory | Coursera
Not exactly. Computers in a workgroup do not join
an AD domain. Joining an AD domain involves the
provisioning of a computer account for the machine and the
link to the domain.
8. What advantage does connecting a computer to a network provide? 1 / 1 point
AD domain? Mark all that apply.
Centralized authentication
Correct
Impressive! Active Directory can be used to manage
centrally computers that connect to it applying objects of
group policy. Computers joined to a domain also
they will authenticate using Active Directory user accounts instead of
local accounts, which also offers centralized authentication.
More detailed record
Centralized management with GPO
Correct
Impressive! Active Directory can be used to manage
centrally computers that join it by applying objects of
group policy. Computers joined to a domain also
they will authenticate using Active Directory user accounts instead
of local accounts, which also provides centralized authentication.
Better performance
9. What are Group Policy Objects? 1 / 1 point
Special types of containers
Special types of computer groups
Special types of user groups
Unable to access the provided URL.true 4/8
25/2/23 Active Directory | Coursera
Configurations for computers and user accounts in AD
Correct
Exactly! GPOs are objects in AD that contain
settings and preferences that can be applied to accounts of
user or computer accounts. GPOs allow for management
centralized accounts and computers.
10. What is the difference between a directive and a preference? 1 / 1 point
They are exactly the same.
A directive is used to establish a preference.
AD applies a policy, while a local user can modify one.
preference
A directive can be modified by a local user, while AD
apply a preference
Correct
Exactly! The directives are settings that AD applies over and over.
regularly, while the preferences are set for
various settings, but they can be modified by the users.
11. With a new AD domain, what do you need to change before you can 1 / 1 point
to allocate
user and machine groups with GPO?
Nothing; the default setting is fine
You must place users and computers in new organizational units.
You need to create an administrator account
It is necessary to change the names of the default groups
Correct
Unable to access the provided link.true 5/8
25/2/23, 23:17 Active Directory | Coursera
Good job! Since GPOs can only be applied to sites,
domains and organizational units, and how user groups and
default teams in AD are not organizational units, they do not
You can allocate GPO to these groups directly. To allocate to
specific groups of users or computers, new ones must be created.
organizational units and users or accounts should be added to them.
12.Select the correct order of application of the GPO: 0 / 1 point
Site -> domain -> organizational unit
Organizational Unit -> Domain -> Site
Domain -> site -> organizational unit
Site -> organizational unit -> domain
Incorrect
Not exactly. When the GPOs collide, they are applied first.
by site and second by domain. Then, any organizational unit will
apply from less specific to more specific.
13. What can we use to determine which directives will apply to a 1 / 1 point
determined machine?
Gpupdate
A control panel
A test domain
A RSOP report
Unable to access the content of the provided URL.ToCover=true 6/8
25/2/23 Active Directory | Coursera
Correct
Good job! An RSOP report or resultant set of policies,
It will generate a report that contains a list of directives that will be applied.
to a certain machine. This takes into account the information of
inheritance and precedence.
14. How does a customer detect the address of a controller? 0 / 1 point
domain?
It is received through an AD GPO.
Send a broadcast to the local network
Make a DNS query to request the SRV record for the domain
It is provided through DHCP
Incorrect
Not exactly. How can this be sent through GPO if the
client, first of all, can’t find the domain controller?
domain will have SRV records that contain information about the
domain controllers.
15. Which of the following options could prevent you from logging in to a 0 / 1 point
computer connected to a domain? Mark all that apply.
You cannot reach the domain controller
Correct
Correct! If the machine cannot reach the domain controller.
Whatever the reason, it could not authenticate against AD. Like the
AD authentication is based on Kerberos for encryption, the
Authentication against AD will depend on the time it syncs with
a five-minute margin between server and client. And, of course, if
the user account is locked, you will not be able to authenticate to the account or
log in to the computer.
Invalid input format. Please provide the text to be translated.ToCover=true 7/8
25/2/23 Active Directory | Coursera
Your computer is connected to Wi-Fi
This should not be selected
Not exactly. If the computer is connected to a connection by
cable or Wi-Fi, as long as it can reach the domain controller,
you will be able to log in to the machine. The machine should be able to
communicate with the domain controller, and have the date and time
correctly established. The user account you are
authentication must also be enabled.
The user account is locked.
Correct
Correct! If the machine cannot reach the domain controller
whatever the reason, it could not authenticate against AD. Since the
AD authentication is based on Kerberos for encryption, the
authentication against AD will depend on the time it synchronizes with
a margin of five minutes between server and client. And, of course, if
the user account is locked, you will not be able to authenticate on the account or
log in to the computer.