Zacker book, Chapter 15

This is yet another somewhat easy chapter. How ever there is a really interesting note at the beginning, the differences between universal
and global groups are slim except for the fact that when going from a local group to a domain wide group you first have to select universal before
going to global group as seen in this video:

So other than that Im not sure of the differences as both are domain wide groups so it becomes very confusing. However this chapter notes
that the replication traffic for a universal group is actually higher than global groups. Any way, 4 chapters after this one in 2 days to meet
my goal. Plausibly do able but I did allow for some padding so it should be ok to run over just slightly then have two weeks of measure up
prep, hopefully leading to scores there that are close to the 800 range. I think I was in the mid 600s last time I tried.

Please read the header for this post
regarding the answer key situation for these chapters.

1. You are planning an Active Directory Implementation for a company that currently has sales, accounting, and marketing departments. All department
heads want to manage their own users and resources in Active Directory. What feature will permit you to set up Active Directory
to allow each manager to manage his or her own container but not any other containers?

A. Delegation of control

B. Read-only domain controller

C. Multimaster replication

D. SRV records

Answer: A, for more information check out (this is a popular topic) this link or watch the video below.

2. If the user named Amy is located in the sales OU of the sauce.steviebschickenalakingalacarte.com domain, what is the correct syntax
for referencing this user in a command line utility?

A. Amy.steviebschickenalakingalacarte.com

B. cn=amy.ou=sales.dc=steviebschickenalakingalacarte.com

C. cn=amy,ou=sales,dc=steviebschickenalakingalacarte,dc=com

D. dc=com,dn=steviebschickenalakingalacarte,ou=sales,cn=amy

Answer: C, I really didnt know this one but I found the second dc to be confusing but memorable. I also cant find any thing
in the chapter that directly references calling a user in PS. An interesting note hinting that the potential complexity
of PowerShell

3. Which of the following is a container object within Active Directory?

A. Folder

B. Group

C. User

D. OU

Answer: D

4. Which of the following groups do you use to consolidate groups and accounts that either span multiple domains or the entire forest?

A. Global

B. Domain local

C. Built-in

D. Universal

Answer: A, D and as previously discussed they can be confusing when asked to explain the differences. According to google the answer is
simply D but from my understanding A can fit this description as well. Perhaps the term “consolidate” makes a difference? However if
that’s the case, as previously stated A is more efficient than D. For more information on the scope of this confusion
check the TechNet article.

5. Which of the following is not a correct reason for creating an OU?

A. To create a permanent container that cannot be moved or renamed

B. To duplicate the divisions in your organization

C. To delegate administration tasks

D. To assign different Group Policy settings to a specific group of users or computers

Answer: A, OUs can be moved and renamed

6. Which of the following group scope modifications are not permitted? (choose all answers that are correct)

A. Global to universal

B. Global to domain local

C. Universal to global

D. Domain local to universal

Answer: B, you have to take a global group to universal before you can do any thing else with it. For more info please see
the previously linked technet article. Some one could claim that A was also true but I would debate this. Attaching
a video from 08 but from every thing I’ve seen in 12 nothing has changed.

7. In a domain running at the windows server 2012 domain functional level, which of the following security principals can be members of
a global group?

A. Users

B. Computers

C. Universal groups

D. Global groups

Answer: A,B,D

8. You are attempting to delete a global security in the Active Directory Users and Computers console, and the console will not
let you complete a task, Which of the following could possibly be causes for the failure? (choose all that are correct)

A. There are still members in the group.

B. One of the group’s members has the group set as its primary group.

C. You do not have to proper permissions for the container in which the group is located.

D. You cannot select global groups from the Active Directory Users and Computers console.

Answer: B,C