Windows · Active Directory interview questions

1. A.the forest-wide FSMO role that owns AD schema changes
2. B.the FSMO role that is the authoritative time source and handles password changes/lockouts
3. C.the FSMO role that allocates RID pools so SIDs stay unique
4. D.a read-only domain controller for branch/insecure sites

Answer + AI explanation with Pro

1. A.tombstone lifetime
2. B.PDC Emulator
3. C.trust relationship
4. D.functional level

Answer + AI explanation with Pro

1. A.PDC Emulator — a container in AD used to organize objects and apply GPOs
2. B.PDC Emulator — a server that authenticates users and hosts the AD database
3. C.PDC Emulator — the FSMO role that is the authoritative time source and handles password changes/lockouts
4. D.PDC Emulator — a read-only domain controller for branch/insecure sites

Answer + AI explanation with Pro

1. A.the replicated share holding GPOs and logon scripts
2. B.a container in AD used to organize objects and apply GPOs
3. C.per-group password rules via Password Settings Objects
4. D.the FSMO role that allocates RID pools so SIDs stay unique

Answer + AI explanation with Pro

1. A.AD multimaster replication
2. B.RID Master
3. C.SYSVOL
4. D.NTDS.dit

Answer + AI explanation with Pro

1. A.RID Master — the FSMO role that is the authoritative time source and handles password changes/lockouts
2. B.RID Master — the FSMO role that allocates RID pools so SIDs stay unique
3. C.RID Master — how long a deleted AD object is retained before purging
4. D.RID Master — the top-level AD container holding one or more domain trees

Answer + AI explanation with Pro

1. A.the FSMO role that updates cross-domain object references
2. B.a read-only domain controller for branch/insecure sites
3. C.the feature baseline of a domain/forest set by the oldest DC version
4. D.the forest-wide FSMO role that owns AD schema changes

Answer + AI explanation with Pro

1. A.trust relationship
2. B.KCC
3. C.Schema Master
4. D.fine-grained password policy

Answer + AI explanation with Pro

1. A.Schema Master — the model where any DC can accept directory writes
2. B.Schema Master — a forest-wide partial replica used for logons and directory searches
3. C.Schema Master — a link letting users in one domain access resources in another
4. D.Schema Master — the forest-wide FSMO role that owns AD schema changes

Answer + AI explanation with Pro

1. A.per-group password rules via Password Settings Objects
2. B.a forest-wide partial replica used for logons and directory searches
3. C.the Active Directory database file on a domain controller
4. D.a link letting users in one domain access resources in another

Answer + AI explanation with Pro

1. A.forest
2. B.Global Catalog
3. C.KCC
4. D.read-only SYSVOL (RODC)

Answer + AI explanation with Pro

1. A.Global Catalog — the FSMO role that is the authoritative time source and handles password changes/lockouts
2. B.Global Catalog — a forest-wide partial replica used for logons and directory searches
3. C.Global Catalog — per-group password rules via Password Settings Objects
4. D.Global Catalog — a link letting users in one domain access resources in another

Answer + AI explanation with Pro

1. A.a forest-trust option requiring explicit allow per resource
2. B.the replicated share holding GPOs and logon scripts
3. C.a server that authenticates users and hosts the AD database
4. D.the Knowledge Consistency Checker that builds the replication topology

Answer + AI explanation with Pro

1. A.forest
2. B.SYSVOL
3. C.read-only SYSVOL (RODC)
4. D.functional level

Answer + AI explanation with Pro

1. A.SYSVOL — the feature baseline of a domain/forest set by the oldest DC version
2. B.SYSVOL — how long a deleted AD object is retained before purging
3. C.SYSVOL — an RODC holds a read-only copy and never originates replication
4. D.SYSVOL — the replicated share holding GPOs and logon scripts

Answer + AI explanation with Pro

1. A.the model where any DC can accept directory writes
2. B.the replicated share holding GPOs and logon scripts
3. C.the Active Directory database file on a domain controller
4. D.a container in AD used to organize objects and apply GPOs

Answer + AI explanation with Pro

1. A.Domain Naming Master
2. B.NTDS.dit
3. C.Infrastructure Master
4. D.tombstone lifetime

Answer + AI explanation with Pro

1. A.NTDS.dit — the top-level AD container holding one or more domain trees
2. B.NTDS.dit — the FSMO role that allocates RID pools so SIDs stay unique
3. C.NTDS.dit — the Active Directory database file on a domain controller
4. D.NTDS.dit — the Knowledge Consistency Checker that builds the replication topology

Answer + AI explanation with Pro

1. A.the forest-wide FSMO role that controls adding/removing domains
2. B.the model where any DC can accept directory writes
3. C.an RODC holds a read-only copy and never originates replication
4. D.a forest-trust option requiring explicit allow per resource

Answer + AI explanation with Pro

1. A.trust relationship
2. B.AD multimaster replication
3. C.SYSVOL
4. D.Domain Naming Master

Answer + AI explanation with Pro

1. A.AD multimaster replication — the model where any DC can accept directory writes
2. B.AD multimaster replication — a forest-wide partial replica used for logons and directory searches
3. C.AD multimaster replication — a set of well-connected subnets used to localize replication and logon
4. D.AD multimaster replication — the replicated share holding GPOs and logon scripts

Answer + AI explanation with Pro

1. A.a server that authenticates users and hosts the AD database
2. B.a read-only domain controller for branch/insecure sites
3. C.the top-level AD container holding one or more domain trees
4. D.a link letting users in one domain access resources in another

Answer + AI explanation with Pro

1. A.security group
2. B.Domain Naming Master
3. C.SYSVOL
4. D.RODC

Answer + AI explanation with Pro

1. A.RODC — the FSMO role that updates cross-domain object references
2. B.RODC — a read-only domain controller for branch/insecure sites
3. C.RODC — an RODC holds a read-only copy and never originates replication
4. D.RODC — the model where any DC can accept directory writes

Answer + AI explanation with Pro

1. A.run domain-controller health diagnostics
2. B.query domain controllers via PowerShell
3. C.summarize AD replication health across DCs
4. D.list which DCs hold the FSMO roles

Answer + AI explanation with Pro

1. A.repadmin /replsummary
2. B.dcdiag
3. C.netdom query fsmo
4. D.Get-ADDomainController

Answer + AI explanation with Pro

1. A.repadmin /replsummary — list which DCs hold the FSMO roles
2. B.repadmin /replsummary — run domain-controller health diagnostics
3. C.repadmin /replsummary — query domain controllers via PowerShell
4. D.repadmin /replsummary — summarize AD replication health across DCs

Answer + AI explanation with Pro

1. A.run domain-controller health diagnostics
2. B.query domain controllers via PowerShell
3. C.summarize AD replication health across DCs
4. D.list which DCs hold the FSMO roles

Answer + AI explanation with Pro

1. A.repadmin /replsummary
2. B.netdom query fsmo
3. C.dcdiag
4. D.Get-ADDomainController

Answer + AI explanation with Pro

1. A.dcdiag — list which DCs hold the FSMO roles
2. B.dcdiag — query domain controllers via PowerShell
3. C.dcdiag — run domain-controller health diagnostics
4. D.dcdiag — summarize AD replication health across DCs

Answer + AI explanation with Pro