Welcome to Certifiable, your exam prep headquarters. Here you'll find questions about some of the tricky areas that are fair game for the certification exams. Following the questions, you'll find the correct answers and explanatory text. We change the questions weekly.

Questions (May 11, 2001)
Answers (May 11, 2001)

This week, we have three questions about topics for Exam 70-217: Implementing and Administering a Microsoft Windows 2000 Directory Services Infrastructure.

Questions (May 11, 2001)

Question 1
In Active Directory (AD), when you rename or move a member of a group (and that member resides in a different domain from the group), the group might temporarily appear not to contain that member. One domain controller (DC) in the domain is responsible for updating the group-to-user references when you rename or change a group's members. What is the machine that performs this special role on the domain called?

  1. Domain naming master
  2. Global Catalog (GC) server
  3. Infrastructure master
  4. PDC emulator
  5. RID master
  6. Schema master

Question 2
A Global Catalog (GC) stores a full replica of all objects in the directory for its host domain and a partial replica of all objects in every other domain in the forest's directory. GCs are very important to the proper functioning of Active Directory (AD). Which of the following statements regarding GCs and GC servers are not true? Choose all that apply.

  1. A GC server is never necessary for a successful domain logon.
  2. Administrators can determine what information is stored in the GC.
  3. By default, all domain controllers (DCs) are GC servers.
  4. GC servers let you find directory information regardless which domain in the forest actually contains the data.

Question 3
Microsoft defines a site as one or more well-connected (highly reliable and fast) TCP/IP subnets. A site lets administrators configure Active Directory (AD) access and replication topology quickly and easily to take advantage of the physical network. When you create a site, what two steps should you perform?

  1. Assign a cost parameter to the site.
  2. Associate a subnet (or subnets) with the newly created site.
  3. Choose the replication protocol for the site (RPC or SMTP).
  4. Create a replication schedule for the site.
  5. Give the site a unique name.
  6. Set the replication period for the site.

Answers (May 11, 2001)

Answer to Question 1
The correct answer is C—Infrastructure master. The infrastructure master is responsible for updating the group-to-user references whenever you rename or change a group's members. At any time, only one domain controller (DC) can act as the infrastructure master in each domain.

Answer to Question 2
The correct answers are A—A GC server is never necessary for a successful domain logon; and C—By default, all domain controllers (DCs) are GC servers.

In multiple-domain networks, GC servers are necessary for network logon because they enumerate universal group membership for a given user account. However, users who are members of the Domain Admins group can log on to the network even when a GC server isn't available.

Administrators can determine what information is stored in the GC through use of the Microsoft Management Console (MMC) Active Directory Schema snap-in.

By default, the only DC that is a GC server is the first DC installed in the forest.

Answer to Question 3
The correct answers are B—Associate a subnet (or subnets) with the newly created site; and E—Give the site a unique name.

You create sites with the Active Directory Sites and Services utility. When you create a site, you give the site a name to distinguish it from other sites in AD. In addition, you should associate subnets with the site that you create.

Configuring parameters such as cost, replication schedule, and replication period as well as choosing the replication protocol are actions you perform when you create site links.