CIT 293 Final Exam [ACTUAL
EXAM] LATEST VERSION
[QUESTIONS AND ANSWERS]
WITH PRACTICE EXAM DETAILED
AND VERIFIED FOR GUARANTEED
PASS- LATEST UPDATE 2025
GRADED A (BRAND NEW!!)
You are using PowerShell to install features on a Windows Server Core installation.
What command can you use to install a new DC in a new forest on the server named
"company.local"? - ✔✔✔✔✔ Install-ADDSForest -Domain company.local
How is offline defragmentation different from online defragmentation when discussing
Active Directory? - ✔✔✔✔✔ Offline defragmentation removes gaps created by the
deletion of objects in online defragmentation.
Your employer maintains an outdated legacy software program that requires a Windows
2000 domain. What sort of trust relationship must you use in order to access this
domain from your Windows Server 2012 functional level domain? - ✔✔✔✔✔ An
external trust
In a two-level CA hierarchy, what are the subordinate CAs referred to as? - ✔✔✔✔✔
Issuing CAs
What is the order in which group policies are applied? - ✔✔✔✔✔ Local policies, site-
linked GPOs, domain-linked GPOs, OU-linked GPOs
By default, how often does the Windows OS change a computer account password in
Active Directory? - ✔✔✔✔✔ Every 30 days
What simple Active Directory Federation Services design is used to provide single sign-
on access to multiple web applications for users who are external to an organization's
network? - ✔✔✔✔✔ Web SSO
, During installation and configuration, AD CS asks you to select the cryptographic
service provider (CSP). What is the default option? - ✔✔✔✔✔ RSA Microsoft Software
Key Storage Provider
What Group Policy feature allows you to select specific users or computers based on a
filtering criteria, such as whether or not a laptop battery is present in a system? -
✔✔✔✔✔ Item-level targeting
If a network service account tries to access a network resource, what group is used for
the access? - ✔✔✔✔✔ Authenticated User
When creating a backup of a GPO, what settings are NOT backed up? (Choose two.) -
✔✔✔✔✔ WMI filter files
IPsec policies
You are creating user accounts for a domain named au.experimental.csmtech.local, and
would like to use an alternate UPN suffix. What statement is accurate? - ✔✔✔✔✔ The
alternate UPN suffix should follow DNS naming rules, but it is not a requirement.
What is NOT a valid requirement for the installation of the Web Application Proxy role
service? - ✔✔✔✔✔ You must have a functioning AD LDS deployment on the network.
What statement regarding the use of security and distribution groups is NOT accurate? -
✔✔✔✔✔ A distribution group cannot be converted into a security group.
While troubleshooting an issue with a domain controller, you discover that the domain
controller has failed to register its SRV records. How can you attempt to force a
registration of the SRV record? - ✔✔✔✔✔ Use net stop netlogon and net start logon.
Where in Active Directory is a universal group's membership information stored? -
✔✔✔✔✔ It is only stored on domain controllers configured as global catalog servers.
After Active Directory is installed, what built-in folder object contains user accounts from
other domains added as members of the local domain's groups? - ✔✔✔✔✔
ForeignSecurityPrincipals
What Active Directory Rights Management Service user role has full administrative
authority over an AD RMS installation? - ✔✔✔✔✔ AD RMS Enterprise Administrator
If multiple GPOs have the Enforced option set and have conflicting settings, what
happens? - ✔✔✔✔✔ The GPO that is highest in the Active Directory hierarchy has the
strongest precedence.
EXAM] LATEST VERSION
[QUESTIONS AND ANSWERS]
WITH PRACTICE EXAM DETAILED
AND VERIFIED FOR GUARANTEED
PASS- LATEST UPDATE 2025
GRADED A (BRAND NEW!!)
You are using PowerShell to install features on a Windows Server Core installation.
What command can you use to install a new DC in a new forest on the server named
"company.local"? - ✔✔✔✔✔ Install-ADDSForest -Domain company.local
How is offline defragmentation different from online defragmentation when discussing
Active Directory? - ✔✔✔✔✔ Offline defragmentation removes gaps created by the
deletion of objects in online defragmentation.
Your employer maintains an outdated legacy software program that requires a Windows
2000 domain. What sort of trust relationship must you use in order to access this
domain from your Windows Server 2012 functional level domain? - ✔✔✔✔✔ An
external trust
In a two-level CA hierarchy, what are the subordinate CAs referred to as? - ✔✔✔✔✔
Issuing CAs
What is the order in which group policies are applied? - ✔✔✔✔✔ Local policies, site-
linked GPOs, domain-linked GPOs, OU-linked GPOs
By default, how often does the Windows OS change a computer account password in
Active Directory? - ✔✔✔✔✔ Every 30 days
What simple Active Directory Federation Services design is used to provide single sign-
on access to multiple web applications for users who are external to an organization's
network? - ✔✔✔✔✔ Web SSO
, During installation and configuration, AD CS asks you to select the cryptographic
service provider (CSP). What is the default option? - ✔✔✔✔✔ RSA Microsoft Software
Key Storage Provider
What Group Policy feature allows you to select specific users or computers based on a
filtering criteria, such as whether or not a laptop battery is present in a system? -
✔✔✔✔✔ Item-level targeting
If a network service account tries to access a network resource, what group is used for
the access? - ✔✔✔✔✔ Authenticated User
When creating a backup of a GPO, what settings are NOT backed up? (Choose two.) -
✔✔✔✔✔ WMI filter files
IPsec policies
You are creating user accounts for a domain named au.experimental.csmtech.local, and
would like to use an alternate UPN suffix. What statement is accurate? - ✔✔✔✔✔ The
alternate UPN suffix should follow DNS naming rules, but it is not a requirement.
What is NOT a valid requirement for the installation of the Web Application Proxy role
service? - ✔✔✔✔✔ You must have a functioning AD LDS deployment on the network.
What statement regarding the use of security and distribution groups is NOT accurate? -
✔✔✔✔✔ A distribution group cannot be converted into a security group.
While troubleshooting an issue with a domain controller, you discover that the domain
controller has failed to register its SRV records. How can you attempt to force a
registration of the SRV record? - ✔✔✔✔✔ Use net stop netlogon and net start logon.
Where in Active Directory is a universal group's membership information stored? -
✔✔✔✔✔ It is only stored on domain controllers configured as global catalog servers.
After Active Directory is installed, what built-in folder object contains user accounts from
other domains added as members of the local domain's groups? - ✔✔✔✔✔
ForeignSecurityPrincipals
What Active Directory Rights Management Service user role has full administrative
authority over an AD RMS installation? - ✔✔✔✔✔ AD RMS Enterprise Administrator
If multiple GPOs have the Enforced option set and have conflicting settings, what
happens? - ✔✔✔✔✔ The GPO that is highest in the Active Directory hierarchy has the
strongest precedence.
