d. You should know as much as possible about the company before you begin to configure Active Directory. You can’t take full advantage of Active Directory without this information.
a. It’s easiest to maintain a single domain that uses multiple subdomains and a single Active Directory.
c. An empty root domain will allow the subdomains to retain naming separation, while taking advantage of the single domain for administrative and maintenance purposes.
d. Organizational Units are the best way to model Active Directory after a company’s departmental structure.
b. Putting groups inside of other groups is called nesting.
d. External trusts can only occur between two domains residing in different forests.
a. Shortcut trusts can only be used between two domains in the same forest.
b. Only members of the Enterprise Admins group can apply Group Policies at the site level.
d. You can decrease the latency of a connection by providing more bandwidth, but that won’t decrease the cost. Cost is determined by the amount of information being sent over the connection, not by the speed or the percentage of available bandwidth.
c. A site link bridge is the virtual connection formed between multiple sites that are linked to the same site.
b. Global groups are valid across the entire forest and replicate only the group name between domains, not the individual members of the group. This uses less bandwidth than universal groups, which replicate the member information for the group along with the group name. Domain local groups are only valid in the local domain and do not replicate to other domains in the forest.
b. Only domain controllers can be bridgehead servers. The amount of available bandwidth will be the most important factor for site replication duties.
a. Making sure there are enough services within a site prevents requests from having to be served outside the site, which improves response time. Just making sites smaller could be counterproductive.
c. A single DNS server can have public and private zones that can be easily changed. Using non-routable IP addresses would technically work, but reassigning all those IP addresses would be inefficient.
b. It is likely that the permissions were not inherited for the entire Accounting group, not just Pamela’s account. You shouldn’t just block the Accounting group from the Billing folder, because if permissions inheritance is disabled for the Accounting group, you’ll have to change permissions for the Accounting group separately from the other programming subgroups. It’s better to fix the inheritance problem at its source, rather than dealing with it on a case-by-case basis.
c. The easiest and most effective way to prevent inheritance blocking is to make sure the parent container has No Override set.
d. Security groups are the best solution for assigning permissions across the domain. Don’t give non-administrators an Administrator account and never allow users to share a single account.
d. All of these scenarios can increase login times. You should always create baselines for all aspects of network performance to make it easier to quantify change.
c. Adding global catalog servers is by far the best choice to improve network performance because requests are load balanced and just about every network request has something to do with the global catalog.
d. All computers in the forest automatically share two-way transitive trust relationships.