Clean install: An installation of Windows that starts from scratch.

Domains: An administrative boundary for users and computers, which are stored in a common
directory database.

Organizational units: Containers in a domain that allow you to organize and group resources for
easier administration, including delegating administrative rights.

Trust relationships: Allow users in one domain to access resources in another domain. Trust
relationships form the framework that allows resource sharing and authentication between
domains.

Digital certificate is similar to an electronic identification card, used to certify the online identity
of individuals, organizations, and computers

DHCP options- DHCP service has options that are assigned when the addresses are assigned or
renewed, including the default gateway and the primary and secondary DNS servers

Storage tier is a new feature of Windows Server 2012 R2 allows you to use solid-state drives
(SSDs) and hard drive storage within the same pool

Active Directory Rights Management Services (AD RMS) service connection point (SCP)- It is an
object in Active Directory that holds the web address of the AD RMS certification cluster.

Site represents the physical AD DS domain topology, which contain domain controllers, clients,
and services

Transitive: Trust authentication follows the flow of existing trust relationships that are part of
the trusted domain; if a transitive trust is created with an external forest, the authentication
can traverse the path of the forest's existing trusts.
Intrasite replication: A process where all domain controllers within a site replicate with one
another.
Authentication Method is NOT a tab that is available from the properties of the Certificate
templates Tab

Import and Delete IP Address Ranges is NOT an IPAM client console options for importing IP
address data from a Comma Separated Value (CSV) file

Active directory is created by Microsoft and provides a variety of network services, including for
example, Lightweight Directory Access Protocol (LDAP)?

All domain controllers within a site, replicate with one another in a process called Intrasite
replication

Shortcut Trust are a one-way or two-way transitive trust between domains that are in the same
forest.

Active Directory Federation Services (AD FS) role- It establishes an identity federation
partnership.

File classification allows you to configure automatic procedures for defining a desired property
on a file, based on the conditions specified in classification rules

Certificate are template are used to simplify the task of administering a CA by allowing an
administrator to identify, modify, and issue certificates that have been preconfigured for
selected tasks
Internet Storage Name server (iSNS)- protocol is used to automatically discover, manage, and
configure iSCSI devices on a TCP/IP network

To configure a Globalnames zone- In the command window, type dnscmd < servername>
/Config/EnableGlobalnamessupport 1 and wait for the Command completed successfully
message.

There are a number of key terms that need to be clearly understood prior to implementing
IPAM. Which statement supports the requirements for an IP address range- They are the next
hierarchical level of an IP address space.

To upgrade from Windows Server 2008 or Windows Server 2008 R2 to Windows Server 2012 or
Windows Server 2012 R2, the first considered step is to - Log in to a domain controller as the
administrator.

What Topology is created by an Enterprise Administrator, disabling the Bridge All Site Links
option, and then creating site link bridges, between a central “hub” site and each of its remote
“spoke” sites?
Hub-and-Spoke Topology

The concept of Trusts- They are relationships between one Windows domain and another
Windows domain or non-Microsoft Kerberos v5 realm.

Distributed cache modeis distributed among the local Windows 7 or 8/8.1 clients at the local
site

MMC command is NOT a method that can make DHCP highly available

Domain functional levels and forest functional levels- allow administrators to enable domain- or
forest-wide Active Directory features, within your network environment, while maintaining
compatibility with older operating systems
Permissions specifies what a user or group can do with an object.

DHCP database- DHCP service contains the configuration for the DHCP server, the IP addresses
that it has distributed, their current lease time, and the IP addresses that the server still have to
distributed

Hosted cache mode- uses one or more dedicated servers to host the cache

Resource organizations- Organizations that own the resources or data that are accessible from
the AD FS-enabled application, similar to a trusting domain in a traditional Windows trust
relationship.

To secure a zone using DNSSEC- By signing the zone, where any queries on the signed zone will
return digital signatures, along with the normal DNS resource records.

Account organizations- Organizations that contain the user accounts that access the resources
controlled by resource organizations.

Rights- It specifies what a user or group can do on a system.

Discovery domain (DD)- service allows the partitioning of storage nodes into management
groupings for administrative and logon control purposes?

The shared folder within a cluster is known as a NFS Data Store

Claims: Statements made by a trusted entity about an object such as a user that includes key
information identifying the user
IP Address Management (IPAM)-It provides an administrator with the ability to plan, manage,
track, and audit the use of all IP addresses and the DNS services within the network.

External Trusts-It is a one-way or two-way nontransitive trust between domains that are not in
the same forest, and that are not already included in a forest trust.

When a host sends packets to a single host (single point to single point), the communication is
called Unicast

DHCP server service works in the background on a server and distributes IP addresses and other
network configuration information

When you create IPv6 scopes, you define various properties. Reoccurrence is not a property of
IPv6

To set the socket pool size through the use of the dnscmd command-line tool- Launch an
elevated command prompt and type the command dnscmd /Config /SocketPoolSize , value .

Trust authentication defines how explicit the authentication and access to the trusting domain
will be. There are three scopes of trust authentication, they are:
Selective authentication, Domain-wide authentication, and Forest-wide authentication

DHCP scopes- DHCP service has a range of IP addresses that can be allocated to clients

Superscope-allows the grouping of multiple scopes into a single administrative entity

Realm Trusts- It is a one-way or two-way, transitive or nontransitive trust between an AD DS

File Server Resource Manager (FSRM)- suite of tools enables you to control and manage the
quantity and type of data stored on a file server
In order to connect to an iSCSI target, you need to use iSCSI initiator

Broadcast- a type of casting sends packets from one host to all other hosts (one point to all
other points)

There are a number of key terms that need to be clearly understood prior to implementing
IPAM. The requirements for the IP Address Block- They are the highest-level conceptual entity
in an IP address space.

The protocol DHCP is based on is - BOOTP

Selective Authentication- It allows explicit authentication and access to resources in an external

NFS was originally developed by Sun Microsystems in the 1980s.

Active Directory Schema- defines the objects and attributes of those objects

Directory service-stores, organizes, and provides access to information in a directory

To establish an identity federation partnership, both partners agree to create a Federated trust
relationship
X.509 version 3 - the most common digital certificate.

The Identity Management for UNIX enables you to integrate Windows users into an existing
UNIX or Linux environment, including managing user accounts and passwords on Windows and
UNIX systems using Network Information Service (NIS).

Security can be divided into three areas- Authentication, Authorization, and Auditing

Whenever a file is accessed using NFS, the UID and GID are sent to the NFS server to see
whether the user has the proper permissions to access.

Server for NFS role extends the Active Directory schema by adding UNIX attributes
Active Directory Certificate Services (AD CS): A server role that allows you to issue and manage
digital certificates as part of a public key infrastructure.

Which of the following is not a component of the AD RMS infrastructure?

you connect to an IPAM server-This step is automatically carried out when the client is running
on an IPAM server.

DHCP- network protocol automatically configures the IP configuration of a device including