Active Directory Flashcards

Which tool can an administrator use to view and modify Active Directory replication topology?

Answer: repadmin /showrepl

Repadmin /showrepl displays the replication topology and shows the last replication attempt and result for each naming context.

In Active Directory Sites and Services, what is the purpose of a site link bridge?

Answer: To allow transitive routing of replication traffic between sites not directly linked

A site link bridge enables transitive site link costs, allowing the KCC to route replication through intermediate sites when direct site links don't exist.

Which Group Policy setting controls the maximum age of a Kerberos ticket in Active Directory?

Answer: Maximum lifetime for user ticket

The 'Maximum lifetime for user ticket' policy controls the TGT validity period, defaulting to 10 hours in Active Directory.

What happens when an Active Directory object's USN (Update Sequence Number) is higher than a replication partner's high watermark for that DC?

Answer: The change is replicated to the partner

When an object's USN exceeds the partner's stored high watermark for the originating DC, that change is included in the next replication cycle.

Which FSMO role is responsible for maintaining compatibility with older NT-style password changes?

Answer: PDC Emulator

The PDC Emulator acts as the primary domain controller for legacy NT clients and handles backward-compatible password change requests.

What is the function of the Infrastructure Master FSMO role?

Answer: Updates cross-domain group-to-user references

The Infrastructure Master updates phantom references (cross-domain group membership pointers) to reflect changes when users are renamed or moved.

In AD DS, which attribute uniquely identifies an object across the entire forest, even if the object is moved or renamed?

Answer: objectGUID

The objectGUID is a 128-bit GUID assigned at object creation that never changes, making it the stable unique identifier across the forest.