1|Page
CIT 225 Final Actual EXAM Newest
2025/2026 With Complete Questions And
Correct Answers |Already Graded A+||Brand
New Version!|
You have configured new account policies in a GPO and
have linked it to an OU containing user accounts.
However, you find that the account policies are not
working. What is the issue? - . . ANSWER ✔ ✔The GPO
is not linked to the domain.
You are using PowerShell to install features on a Windows
Server Core installation. What command can you use to
install a new DC in a new forest on the server named
"company.local"? - . . ANSWER ✔ ✔Install-
ADDSForest -Domain company.local
How is offline defragmentation different from online
defragmentation when discussing Active Directory? - . .
ANSWER ✔ ✔Offline defragmentation removes gaps
created by the deletion of objects in online
defragmentation.
,2|Page
Your employer maintains an outdated legacy software
program that requires a Windows 2000 domain. What
sort of trust relationship must you use in order to access
this domain from your Windows Server 2012 functional
level domain? - . . ANSWER ✔ ✔An external trust
In a two-level CA hierarchy, what are the subordinate CAs
referred to as? - . . ANSWER ✔ ✔Issuing CAs
What is the order in which group policies are applied? - . .
ANSWER ✔ ✔Local policies, site-linked GPOs, domain-
linked GPOs, OU-linked GPOs
By default, how often does the Windows OS change a
computer account password in Active Directory? - . .
ANSWER ✔ ✔Every 30 days
What simple Active Directory Federation Services design
is used to provide single sign-on access to multiple web
applications for users who are external to an organization's
network? - . . ANSWER ✔ ✔Web SSO
During installation and configuration, AD CS asks you to
select the cryptographic service provider (CSP). What is
,3|Page
the default option? - . . ANSWER ✔ ✔RSA Microsoft
Software Key Storage Provider
What Group Policy feature allows you to select specific
users or computers based on a filtering criteria, such as
whether or not a laptop battery is present in a system? - . .
ANSWER ✔ ✔Item-level targeting
If a network service account tries to access a network
resource, what group is used for the access? - . . ANSWER
✔ ✔Authenticated User
When creating a backup of a GPO, what settings are NOT
backed up? (Choose two.) - . . ANSWER ✔ ✔WMI filter
files
IPsec policies
You are creating user accounts for a domain named
au.experimental.csmtech.local, and would like to use an
alternate UPN suffix. What statement is accurate? - . .
ANSWER ✔ ✔The alternate UPN suffix should follow
DNS naming rules, but it is not a requirement.
, 4|Page
What is NOT a valid requirement for the installation of the
Web Application Proxy role service? - . . ANSWER ✔
✔You must have a functioning AD LDS deployment on
the network.
What statement regarding the use of security and
distribution groups is NOT accurate? - . . ANSWER ✔
✔A distribution group cannot be converted into a
security group.
While troubleshooting an issue with a domain controller,
you discover that the domain controller has failed to
register its SRV records. How can you attempt to force a
registration of the SRV record? - . . ANSWER ✔ ✔Use
net stop netlogon and net start logon.
Where in Active Directory is a universal group's
membership information stored? - . . ANSWER ✔ ✔It
is only stored on domain controllers configured as global
catalog servers.
After Active Directory is installed, what built-in folder
object contains user accounts from other domains added
as members of the local domain's groups? - . . ANSWER
✔ ✔ForeignSecurityPrincipals
CIT 225 Final Actual EXAM Newest
2025/2026 With Complete Questions And
Correct Answers |Already Graded A+||Brand
New Version!|
You have configured new account policies in a GPO and
have linked it to an OU containing user accounts.
However, you find that the account policies are not
working. What is the issue? - . . ANSWER ✔ ✔The GPO
is not linked to the domain.
You are using PowerShell to install features on a Windows
Server Core installation. What command can you use to
install a new DC in a new forest on the server named
"company.local"? - . . ANSWER ✔ ✔Install-
ADDSForest -Domain company.local
How is offline defragmentation different from online
defragmentation when discussing Active Directory? - . .
ANSWER ✔ ✔Offline defragmentation removes gaps
created by the deletion of objects in online
defragmentation.
,2|Page
Your employer maintains an outdated legacy software
program that requires a Windows 2000 domain. What
sort of trust relationship must you use in order to access
this domain from your Windows Server 2012 functional
level domain? - . . ANSWER ✔ ✔An external trust
In a two-level CA hierarchy, what are the subordinate CAs
referred to as? - . . ANSWER ✔ ✔Issuing CAs
What is the order in which group policies are applied? - . .
ANSWER ✔ ✔Local policies, site-linked GPOs, domain-
linked GPOs, OU-linked GPOs
By default, how often does the Windows OS change a
computer account password in Active Directory? - . .
ANSWER ✔ ✔Every 30 days
What simple Active Directory Federation Services design
is used to provide single sign-on access to multiple web
applications for users who are external to an organization's
network? - . . ANSWER ✔ ✔Web SSO
During installation and configuration, AD CS asks you to
select the cryptographic service provider (CSP). What is
,3|Page
the default option? - . . ANSWER ✔ ✔RSA Microsoft
Software Key Storage Provider
What Group Policy feature allows you to select specific
users or computers based on a filtering criteria, such as
whether or not a laptop battery is present in a system? - . .
ANSWER ✔ ✔Item-level targeting
If a network service account tries to access a network
resource, what group is used for the access? - . . ANSWER
✔ ✔Authenticated User
When creating a backup of a GPO, what settings are NOT
backed up? (Choose two.) - . . ANSWER ✔ ✔WMI filter
files
IPsec policies
You are creating user accounts for a domain named
au.experimental.csmtech.local, and would like to use an
alternate UPN suffix. What statement is accurate? - . .
ANSWER ✔ ✔The alternate UPN suffix should follow
DNS naming rules, but it is not a requirement.
, 4|Page
What is NOT a valid requirement for the installation of the
Web Application Proxy role service? - . . ANSWER ✔
✔You must have a functioning AD LDS deployment on
the network.
What statement regarding the use of security and
distribution groups is NOT accurate? - . . ANSWER ✔
✔A distribution group cannot be converted into a
security group.
While troubleshooting an issue with a domain controller,
you discover that the domain controller has failed to
register its SRV records. How can you attempt to force a
registration of the SRV record? - . . ANSWER ✔ ✔Use
net stop netlogon and net start logon.
Where in Active Directory is a universal group's
membership information stored? - . . ANSWER ✔ ✔It
is only stored on domain controllers configured as global
catalog servers.
After Active Directory is installed, what built-in folder
object contains user accounts from other domains added
as members of the local domain's groups? - . . ANSWER
✔ ✔ForeignSecurityPrincipals
