Lab 4-2: Administer Active Directory Groups and OUs Hands-On Microsoft Windows Server 2019

Which of the following Windows PowerShell commands successfully installs a new OU structure?

1. Install-WindowsFeature -DisplayName "Windows Server Backup" -IncludeManagementTools

2. Install-WindowsFeature -Name Marketing -IncludeManagementTools

3. New-ADOrganizationalUnit -Name Marketing -Path "DC=NAMERICA,DC=PRACTICELABS,DC=COM"

4. Add-WindowsFeature -ADOrganizationalUnit -Name Marketing

3. New-ADOrganizationalUnit -Name Marketing -Path "DC=NAMERICA,DC=PRACTICELABS,DC=COM"

Active Directory Domain Services prevents the unintended deletion of AD objects with the "Protect object from accidental deletion" setting. Which AD object types have this setting enabled by default?

Groups

Users

Organizational Units

Sites

Subnets

Organizational Units

An Active Directory domain has two domain controllers - PLABDC01 and PLABDM01. You backed up the system state on the PLABDM01 server. A number of AD objects were deleted by mistake on PLABDM01, and you need to restore the deleted objects. Which of the following user credentials do you use to sign-in to PLABDM01 after it has been configured to boot in Active Directory Repair mode?

Local Administrator account and Safe Mode Administrator Password

Local Administrator credential

Domain Administrator credential

Any user with Account Operators membership

Local Administrator account and Safe Mode Administrator Password

You are the AD administrator of the PRACTICELABS.COM domain. The following screenshot shows the user account that was deleted by mistake by another administrator. Using ntdsutil.exe, which of the following command do you use to recover the user?

Restore Object "CN=Justine Schofield,OU=IT,OU=APAC,DC=PRACTICELABS,DC=COM"

Restore UserObject "CN=Justine Schofield,OU=IT, OU=APAC,DC=PRACTICELABS,DC=COM"

Restore UserAccount "CN=Justine Schofield,OU=IT, OU=APAC,DC=PRACTICELABS,DC=COM"

Restore User "CN=Justine Schofield,OU=IT, OU=APAC,DC=PRACTICELABS,DC=COM"

Restore ADUser "CN=Justine Schofield,OU=IT, OU=APAC,DC=PRACTICELABS,DC=COM"

Restore Object "CN=Justine Schofield,OU=IT,OU=APAC,DC=PRACTICELABS,DC=COM"

You want to organize the AD objects such as users and groups by placing them in their respective containers in the AD hierarchy. This directive is in line with backing up the system state data of the domain controllers. You attempt to move the G-IT security group to the IT OU. You get the following message "Windows cannot move object G-IT because: Access is denied. What is the cause of this error message?

Your user account does not have Schema Admins membership in the directory

The Advanced Features is not enabled in Active Directory Users and Computers

Your user account does not have Enterprise Admins membership in the directory

The security group G-IT is protected from accidental deletion

The security group G-IT is protected from accidental deletion