Free Trial

Safari Books Online is a digital library providing on-demand subscription access to thousands of learning resources.


  • Create BookmarkCreate Bookmark
  • Create Note or TagCreate Note or Tag
  • PrintPrint

Self Test Answers

Restore Active Directory Services

1. C. The user account will retain the SID, the GUID, and all other parameters that form the security principal.

A, B, and D are incorrect because these limitations do not apply.

2. A. Non-authoritative restore can be used to restore system Registry and other system services, but not Active Directory data in a single domain with more than one domain controller.

B and C are incorrect because this will restore older Active Directory data and assign it higher priority over replication. Even if the data is fresh, this operation will cause unnecessary replication traffic. D is incorrect because the ERD process is not used in Windows Server 2008.

3. B and D. Using these methods, you can increase USNs by a comfortable margin to make sure they get higher priority over previously restored authoritative data.

A and C are incorrect because you will need to use the verinc option.

4. A. The AD database is stored in ntds.dit.

B is incorrect, since a SAM file only stores a local user account database and is not used on a domain controller. C is incorrect because edb.log contains only transaction records. You may argue rather successfully that transaction log data is database data, but technically, the transaction log is a temporary storage of changes to data—the final destination is still the data file. D is incorrect because MFT does not store any user data, only system data necessary to maintain the file system.

5. C is the correct answer. Starting with Windows Server 2008, the ntbackup utility has been replaced with wbadmin, which now can be used as an integrated system state backup and recovery solution.

A is incorrect because ntdsutil is not able to perform a full backup of the system state but is used to perform other operations with and within AD (ntdsutil can create snapshots of AD DS, which are a point-in-time copies of AD DS). B is incorrect, because this utility is discontinued and is not shipped with Windows Server 2008. D is incorrect because dcpromo is used to deploy or remove AD DS, not back it up.

 


  

You are currently reading a PREVIEW of this book.

                                                                                        

Get instant access to over
$1 million worth of books and videos.

  

Start a Free Trial