74

pdf

School

Los Rios Colleges *

*We aren’t endorsed by this school

Course

Subject

Information Systems

Date

Oct 30, 2023

Type

pdf

Pages

Uploaded by klccc

10/27/23, 9 : 57 AM Page 1 of 16 https://labsimapp.testout.com/v6_0_574/exam-engine.html/aa23f386…n/30647912/da093e27-1fdf-4233-b328-414405d86bc9/end ? locale=en-us 7.4.9 Practice Questions Candidate: Kelsey Dusnmore (Kdusnmore) Date: 10/27/2023 9:56:13 am • Time Spent: 00:44 Score: 10% Passing Score: 80%

10/27/23, 9 : 57 AM Page 2 of 16 https://labsimapp.testout.com/v6_0_574/exam-engine.html/aa23f386…n/30647912/da093e27-1fdf-4233-b328-414405d86bc9/end ? locale=en-us  Question 1:  Incorrect You are the administrator of a network with two Active Directory domains. Each domain currently includes 35 global groups and 75 domain local groups. You have been reading the Windows Server help fi les and have come to the conclusion that universal groups may be the answer to ease administrative management of these groups. You decide to incorporate universal groups. How can you make sure to not include changes to any group that will a ff ect group member's assigned permissions? Add global groups to universal groups and then add those to domain local groups. Add global groups to domain local groups and then add those to universal groups. Remove all members from the global groups and add them to universal groups. Add all global groups to a universal group named All Users. Explanation Adding global groups to universal groups and then adding those to domain local groups is the most e ﬃ cient solution for group management. °ndividual members can be added to universal groups but this causes a large member list, which is stored on Global Catalog servers. Active Directory supports three group scopes: domain local, global, and universal. References  7.4.4 Group Facts q_act_dir_groups_add_global_groups_sol_shc5.question.fex

10/27/23, 9 : 57 AM Page 3 of 16 https://labsimapp.testout.com/v6_0_574/exam-engine.html/aa23f386…n/30647912/da093e27-1fdf-4233-b328-414405d86bc9/end ? locale=en-us  Question 2:  Incorrect You are the administrator of a multi-domain Active Directory forest. You have a universal group called SalesExecs. This group has successfully been used as an email distribution group. Later, you try to assign the group permissions to a shared folder, but SalesExecs does not appear as a choice. What should you do? Convert the SalesExecs group from a distribution group to a security group. Create a global security group with the same membership. Convert the SalesExecs group from a universal group to a global group. Remove the email address from the SalesExecs group. Convert the SalesExecs group from a universal group to a domain local group. Explanation

Your preview ends here

Eager to read complete document? Join bartleby learn and gain access to the full version

Access to all documents
Unlimited textbook solutions
24/7 expert homework help

10/27/23, 9 : 57 AM Page 4 of 16 https://labsimapp.testout.com/v6_0_574/exam-engine.html/aa23f386…n/30647912/da093e27-1fdf-4233-b328-414405d86bc9/end ? locale=en-us You should convert the SalesExecs group from a distribution group to a security group. The reason SalesExecs does not appear on the list is because it is not a security group. Groups of the distribution type are not security principals and cannot be used to grant permissions. Creating a global security group with the same membership is not only extra work, but it may not be a complete solution if the membership includes accounts from multiple domains. Converting a universal group to a global group may be possible if the universal group does not contain members from multiple domains, but changing the group scope is not the problem. Converting a universal group to a domain local group is also possible, but again, the problem is the type of group, not the group scope. The two group types are distribution and security, whereas universal, global, and domain local are group scopes. References  7.4.4 Group Facts q_act_dir_groups_convert_security_group_02_sol_shc5.question.fex  Question 3:  Incorrect

10/27/23, 9 : 57 AM Page 5 of 16 https://labsimapp.testout.com/v6_0_574/exam-engine.html/aa23f386…n/30647912/da093e27-1fdf-4233-b328-414405d86bc9/end ? locale=en-us You are the administrator for ABC corporation. Your network has a single Active Directory domain called xyz.com. The Sales team has a shared folder on Srv1 that is used to hold sales contact information. You need to control access to this folder so that only members of the sales team can access the folder. You create a group called Sales and add all members of the Sales team as members of the group. However, when you try to assign permissions to the shared folder, the Sales group you created does not show in the list of available objects. You check the properties of the group and fi nd the details shown in the image. What do you need to do to assign permissions to the sales team? Assign permissions directly to each sales team member. Delete the group. Recreate the group as a domain local group.

10/27/23, 9 : 57 AM Page 6 of 16 https://labsimapp.testout.com/v6_0_574/exam-engine.html/aa23f386…n/30647912/da093e27-1fdf-4233-b328-414405d86bc9/end ? locale=en-us Convert the group to a security group. Convert the group to a universal group. Explanation You need to convert the distribution group to a security group. Only security groups can be used to assign permissions. You could delete the group and create a new one, as long as you create a security group. However, this will take longer than just converting the existing group. While assigning permissions directly to users would grant the permissions, you should use groups whenever possible for assigning permissions. References  7.4.4 Group Facts q_act_dir_groups_convert_security_group_sol_shc5.question.fex  Question 4:  Incorrect You are the administrator for a network with two domains, westsim.com and sales.westsim.com. You have a shared folder called Reports on the Sales1 server in the sales.westsim.com domain. The following two users need access to this shared folder: Mark in the westsim.com domain Mary in the sales.westsim.com domain You create a global group called Sales in westsim.com. You grant this group the necessary permissions to the Reports shared folder. You add Mark as a member of the group, but you are unable to add Mary as a group member. What should you do? (Select two. Each choice is a possible answer.) Convert the group to a universal group.

Your preview ends here

Eager to read complete document? Join bartleby learn and gain access to the full version

Access to all documents
Unlimited textbook solutions
24/7 expert homework help

10/27/23, 9 : 57 AM Page 7 of 16 https://labsimapp.testout.com/v6_0_574/exam-engine.html/aa23f386…n/30647912/da093e27-1fdf-4233-b328-414405d86bc9/end ? locale=en-us Delete the existing group. Create a domain local group in westsim.com. Add Mark and Mary as members and assign permissions to the share. Convert the group to a domain local group. Delete the existing group. Create a global group in sales.westsim.com. Add Mark and Mary as members and assign permissions to the share. Delete the existing group. Create a domain local group in sales.westsim.com. Add Mark and Mary as members and assign permissions to the share. Explanation Either of the following processes would assign permissions correctly: Convert the group to a universal group. Universal groups can have members from any domain and can be used to assign permissions to resources in any domain. Create a domain local group in sales.westsim.com. Domain local groups can have members from any domain and can be used to assign permissions within the domain. °f you use a domain local group in this scenario, the group must be in the sales.westsim.com domain. Using a global group would not work. Global groups can only contain members within the same domain. References  7.4.4 Group Facts q_act_dir_groups_convert_universal_group_sol_shc5.question.fex

10/27/23, 9 : 57 AM Page 8 of 16 https://labsimapp.testout.com/v6_0_574/exam-engine.html/aa23f386…n/30647912/da093e27-1fdf-4233-b328-414405d86bc9/end ? locale=en-us  Question 5:  Incorrect You manage a single domain named widgets.com. Organizational units (OUs) have been created for all company departments. Computer and user accounts have been moved into their corresponding department OUs. The CEO has requested the ability to send emails to managers and team leaders. He'd like to send a single email and have it automatically forwarded to all users in the list. Because the email list might change frequently, you do not want the email list to be used for assigning permissions. What should you do? Create a contact object for each user on the email list. Create a security global group. Make all contact objects members of the group. Create a distribution global group. For each user on the email list, make their user account a member of the group. Create an OU for the email list. Create contact objects in the OU. Add an email address to the OU. Create a universal security group. For each user on the email list, make their user account a member of the group. Explanation To create an email list, you can use either a distribution or security group. Use a distribution group when you do not want the group to be used for assigning permissions. Make user accounts or contact objects members of the group. An email sent to the group will be distributed to all group members. Because each user on the email list already has a user account, you do not need to create contact objects. Use contact objects to identify people outside of the organization. Contacts cannot be used for login.

10/27/23, 9 : 57 AM Page 9 of 16 https://labsimapp.testout.com/v6_0_574/exam-engine.html/aa23f386…n/30647912/da093e27-1fdf-4233-b328-414405d86bc9/end ? locale=en-us References  7.4.4 Group Facts q_act_dir_groups_create_dist_local_group_sol_shc5.question.fex  Question 6:  Incorrect You are the domain administrator for a single domain forest. You have 10 fi le servers that are member servers running Windows Server. Your company has designed a top-level OU structure based on the 15 divisions for your company. Each division has a global security group containing the user accounts for division managers. You have folders on your fi le servers that all division managers should have permission to access. For some resources, all division managers will need full control. For others, they will only need read or change permissions. You need a group strategy that will facilitate the assignment of permissions but minimize administrative e ff ort. What should you do? Create a global group called AllMgrs. Add each of the division managers user accounts to the group. Create a universal group called AllMgrs. Make each of the existing division managers groups a member. Create a domain local group called AllMgrs. Add each of the division managers user accounts to the group. Create a global group called AllMgrs. Make each of the existing division managers groups a member. Explanation

Your preview ends here

Eager to read complete document? Join bartleby learn and gain access to the full version

Access to all documents
Unlimited textbook solutions
24/7 expert homework help

10/27/23, 9 : 57 AM Page 10 of 16 https://labsimapp.testout.com/v6_0_574/exam-engine.html/aa23f386…/30647912/da093e27-1fdf-4233-b328-414405d86bc9/end ? locale=en-us You can nest a global group into another global group or create a universal group and add global groups as members. Either nesting strategy will allow you use one group rather than 15 when assigning permissions to all of your company's division managers. However, universal groups are not recommended or needed in a single domain environment. Adding all of the user accounts to a single global or domain local group will work but will require additional work, so it is not as e ﬃ cient as taking advantage of group nesting. References  7.4.4 Group Facts q_act_dir_groups_create_global_group_sol_shc5.question.fex  Question 7:  Incorrect You are the domain administrator for a single domain forest. Your company has based its top-level OU structure on the four divisions for your company, manufacturing, operations, marketing, and transportation. Each division has a global security group containing the user accounts for division managers. You want to have a single group that can be used for granting access to resources to all of your organization's managers. What should you do? (Select two. Each selection is a complete solution.) Create a domain local security group called AllMgrs and make it a member of the existing Division Manager groups. Create a universal distribution group called AllMgrs and make each of the existing Division Manager groups a member. Create a global distribution group called AllMgrs and make each of the existing division managers group a member.

10/27/23, 9 : 57 AM Page 11 of 16 https://labsimapp.testout.com/v6_0_574/exam-engine.html/aa23f386…/30647912/da093e27-1fdf-4233-b328-414405d86bc9/end ? locale=en-us Create a domain local distribution group called AllMgrs and make it a member of the existing Division Manager groups. Create a global security group called AllMgrs and make each of the existing Division Manager groups a member. Create a universal security group called AllMgrs and make each of the existing Division Manager groups a member. Explanation You should create either a global security or universal security group and make the existing division manager groups a member. The existing groups are global security groups, and they can be a member of another global group in the same domain or a universal group in any domain. Groups of the distribution type cannot be used to grant permissions, and domain local groups cannot be a member of a global group. References  7.4.4 Group Facts q_act_dir_groups_create_global_security_group_sol_shc5.question.fex  Question 8:  Incorrect

10/27/23, 9 : 57 AM Page 12 of 16 https://labsimapp.testout.com/v6_0_574/exam-engine.html/aa23f386…/30647912/da093e27-1fdf-4233-b328-414405d86bc9/end ? locale=en-us You are the domain administrator for north.westsim.com, which is a child domain in westsim.com. You have a high-end color laser printer that is shared on a server in north.westsim.com. Because of the high price per page, you have removed the print permission from the Everyone group. You need to grant the print permissions to marketing users in the north.westsim.com, east.westsim.com, and west.westsim.com domains. What should you do? 1. °n the North domain, create a universal group called All-Marketing. 2. Add the marketing users' accounts from all three domains to the group and assign the group the print permission. 1. °n all three domains, create a global group named Marketing. 2. Add the East and West Marketing groups to the North Marketing group. 3. Assign the print permission to the North Marketing group. 1. °n all three domains, create a domain local group called CLR-PRT. 2. Add the East and West CLR-PRT groups to the North CLR-PRT group. 3. Assign the print permission to the North CLR-PRT group. 1. °n the North domain, create a Domain Local group called CLR-PRT. 2. °n all three domains, create a global group named Marketing. 3. Add all three global groups to the North CLR-PRT group and assign the print permission to the group. Explanation

Your preview ends here

Eager to read complete document? Join bartleby learn and gain access to the full version

Access to all documents
Unlimited textbook solutions
24/7 expert homework help

10/27/23, 9 : 57 AM Page 13 of 16 https://labsimapp.testout.com/v6_0_574/exam-engine.html/aa23f386…/30647912/da093e27-1fdf-4233-b328-414405d86bc9/end ? locale=en-us The best solution would be to create a domain local group in the North domain called CLR- PRT, and in all three domains create a global group named Marketing. Then, add all three global groups to the North CLR-PRT group and assign the print permission to the group. This follows Microsoft's recommended strategy of A-G-DL-P . Place A ccounts into G lobal groups, which become members of D omain L ocal groups, which have the P ermissions assigned. Using a universal group and adding user accounts directly to a universal group will work, but in a multiple-domain forest, this is not a best practice. °n addition, since the resource is only located in one domain, universal groups are not recommended. Any time there is a membership change in a universal group, it requires replication to the global catalog servers. This does not happen when you modify the membership of domain local or global groups. Using a universal group in the North domain with individual members puts the burden of managing the membership on the North administrator. You can expand the best practice of A-G-DL-P to A-G-U-DL-P by creating global groups in each domain and adding them to the universal group. The other answers violate the group nesting rules and will not work. A global group can only contain accounts and global groups from its own domain. Domain local groups cannot be members of groups outside their own domains. References  7.4.4 Group Facts q_act_dir_groups_grant_print_permissions_sol_shc5.question.fex  Question 9:  Correct You are the administrator for a network with two domains, westsim.com and branch.westsim.com. User accounts for the Sales team are in both domains. You have a shared folder called Reports on the Sales1 server in the westsim.com domain. You also have a shared folder called Contacts on the Sales6 server in the branch.westsim.com domain. All Sales users need access to both shared folders. What do you need to do to implement a group strategy to provide access to the necessary resources?

10/27/23, 9 : 57 AM Page 14 of 16 https://labsimapp.testout.com/v6_0_574/exam-engine.html/aa23f386…/30647912/da093e27-1fdf-4233-b328-414405d86bc9/end ? locale=en-us 1. Create a global group in each domain. Add users within each domain to the group. 2. Create a universal group in westsim.com. 3. Add the global groups from each domain to the universal group. 4. Add the universal group to domain local groups in each domain. 5. Assign permissions to the domain local groups. 1. Create a domain local group in each domain. Add users within each domain to the group. 2. Create a global group in westsim.com. 3. Add the domain local groups from each domain to the global group. 4. Assign permissions to the global group. 1. Create a global group in westsim.com. Add users from both domains. 2. Create a universal group in each domain. 3. Add the global group to the universal group in each domain. 4. Add each universal group to a domain local group. 5. Assign permissions to the domain local group. Explanation

10/27/23, 9 : 57 AM Page 15 of 16 https://labsimapp.testout.com/v6_0_574/exam-engine.html/aa23f386…/30647912/da093e27-1fdf-4233-b328-414405d86bc9/end ? locale=en-us To grant the necessary permissions, the following steps let you implement a group strategy that provides access to the necessary resources: 1. Create a global group in each domain. Add users within each domain to the group. Global groups can only contain members within the domain. 2. Create a universal group in westsim.com. 3. Add the global groups from each domain to the universal group. Universal groups can have members from any domain. 4. Add the universal group to a domain local group in each domain. 5. Assign permissions to the domain local group for the shared folder in that domain. You cannot use a single global group because global groups can only have members from within the domain. References  7.4.4 Group Facts q_act_dir_groups_implement_group_strategy_sol_shc5.question.fex  Question 10:  Incorrect You manage user accounts in the southsim.com domain. Each department is represented by an organizational unit (OU). Computer and user accounts for each department have been moved to their respective OUs. You want to control access to a new color printer named ColorMagic. To do this, you create the following groups: A domain local group named ColorMagic-DL A global group named Sales-GG You want all users in the Sales department to have access to the new printer. What should you do? (Select three. Each choice is a required part of the solution.) On the Members tab for the ColorMagic-DL group, add all sales user accounts.

Your preview ends here

Eager to read complete document? Join bartleby learn and gain access to the full version

Access to all documents
Unlimited textbook solutions
24/7 expert homework help

10/27/23, 9 : 57 AM Page 16 of 16 https://labsimapp.testout.com/v6_0_574/exam-engine.html/aa23f386…/30647912/da093e27-1fdf-4233-b328-414405d86bc9/end ? locale=en-us On the Members tab for the Sales-GG group, add all sales user accounts. On the ColorMagic printer object, assign permissions to the ColorMagic-DL group. On the Members Of tab for the Sales-GG group, add the ColorMagic-DL group. On the ColorMagic printer object, assign permissions to the Sales-GG group. On the Members Of tab for the ColorMagic-DL group, add the Sales-GG group. Explanation Following Microsoft's recommendations: Add user accounts to global groups. You can add a user to a group by editing the Members property for the group object or by editing the Members Of property for each user account. Add global groups to domain local groups. Add the global group to the domain local group through its Member Of tab or through the Members tab on the domain local group. Assign permissions to the domain local group. References  7.4.4 Group Facts q_act_dir_groups_sales_printer_access_sol_shc5.question.fex Copyright © 2023 TestOut Corporation All rights reserved.