Which act confirms the identity of a user or system?
Authentication
Authorization
Auditing
Accounting
Which fallback authentication is used when Kerberos does not work?
SSL
SSH
MS-CHAPv2
NTLM
By default, what is the maximum amount time that a clock can be off in order for Kerberos to work?
60 seconds
90 seconds
300 seconds
600 seconds
Which authentication protocol uses the Key Distribution Center that maintains a database of secret keys and is more secure than NTLM?
SSL
Kerberos
MS-CHAPv2
NTLM
Which of the following is the format for Kerberos?
SQLService/service1:1433
service1:1433
service1:1433:SQLService
SQLService:1433/service1
Which name uniquely identifies an instance of a service for a client?
TGT
KDC
ADSI
SPN
Which command do you use to configure an SPN for a user account?
addspn
configspn
setspn
getspn
What allows a Kerberos ticket to be created for another service on the originating user?s behalf?
Kerberos delegation
SPM
Managed Service Accounts
Group Managed Service Accounts
By default, how often do passwords change for Managed Service accounts?
1 day
10 days
30 days
60 days
Which account runs a service on multiple computers that belong to a cluster and that automatically have the password changed on a regular basis?
User account
Managed Service Account
Group Managed Service Account
Computer account
Which is a Managed Service Account most similar to?
A user account
A computer account
A security group
A distribution group
Which is best for a service account that needs to run a service?
User accounts
Computer accounts
Managed Service Accounts
Group Managed Service Accounts
What should you do when you create a service account?
Change the password only if it becomes compromised.
Configure the password not to expire.
Use a domain-based account.
Use an easy-to-remember password.
Which of the following is required to create Managed Service Accounts? (Choose all that apply.)
Active Directory module for Windows PowerShell
Windows Server 2008 R2 or higher domain controller
Password Sync tool
.NET Framework 2.0 or higher
Which command would you use to create the root key?
Set-KDSRootKey_EFFECTIVETIME ((GET-DATE).NOW())
GenerateRootKey_EFFECTIVETIME()
Set-KDSRootKey
Add-KDSRootKey
Identify the basic commands used when creating a Managed Service Account.
Add-ADComputerServiceAccount
Install-ADServiceAccount
Set-ADServiceAccount
Create-ADServiceAcount
New-ADServiceAccount
Link-ADServiceAccount
Identify the basic commands used when creating a group Managed Service Account.
Add-ADComputerServiceAccount
Install-ADServiceAccount
Set-ADServiceAccount
Create-ADServiceAcount
New-ADServiceAccount
Link-ADServiceAccount