1 | Page
CIT 293 Final Exam Questions and Answers
You have configured new account policies in a GPO and have
linked it to an OU containing user accounts. However, you find
that the account policies are not working. What is the issue?
Ans: The GPO is not linked to the domain.
You are using PowerShell to install features on a Windows Server
Core installation. What command can you use to install a new DC
in a new forest on the server named "company.local"?
Ans: Install-ADDSForest -Domain company.local
How is offline defragmentation different from online
defragmentation when discussing Active Directory?
Ans: Offline defragmentation removes gaps created by the deletion of
objects in online defragmentation.
Your employer maintains an outdated legacy software program
that requires a Windows 2000 domain. What sort of trust
relationship must you use in order to access this domain from
your Windows Server 2012 functional level domain?
Ans: An external trust
In a two-level CA hierarchy, what are the subordinate CAs referred
to as?
Ans: Issuing CAs
What is the order in which group policies are applied?
Ans: Local policies, site-linked GPOs, domain-linked GPOs, OU-linked
GPOs
© 2025 All rights reserved
, 2 | Page
By default, how often does the Windows OS change a computer
account password in Active Directory?
Ans: Every 30 days
What simple Active Directory Federation Services design is used
to provide single sign-on access to multiple web applications for
users who are external to an organization's network?
Ans: Web SSO
During installation and configuration, AD CS asks you to select
the cryptographic service provider (CSP). What is the default
option?
Ans: RSA Microsoft Software Key Storage Provider
What Group Policy feature allows you to select specific users or
computers based on a filtering criteria, such as whether or not a
laptop battery is present in a system?
Ans: Item-level targeting
If a network service account tries to access a network resource,
what group is used for the access?
Ans: Authenticated User
When creating a backup of a GPO, what settings are NOT backed
up? (Choose two.)
Ans: WMI filter files
IPsec policies
You are creating user accounts for a domain named
au.experimental.csmtech.local, and would like to use an alternate
UPN suffix. What statement is accurate?
Ans: The alternate UPN suffix should follow DNS naming rules, but it is
not a requirement.
© 2025 All rights reserved
CIT 293 Final Exam Questions and Answers
You have configured new account policies in a GPO and have
linked it to an OU containing user accounts. However, you find
that the account policies are not working. What is the issue?
Ans: The GPO is not linked to the domain.
You are using PowerShell to install features on a Windows Server
Core installation. What command can you use to install a new DC
in a new forest on the server named "company.local"?
Ans: Install-ADDSForest -Domain company.local
How is offline defragmentation different from online
defragmentation when discussing Active Directory?
Ans: Offline defragmentation removes gaps created by the deletion of
objects in online defragmentation.
Your employer maintains an outdated legacy software program
that requires a Windows 2000 domain. What sort of trust
relationship must you use in order to access this domain from
your Windows Server 2012 functional level domain?
Ans: An external trust
In a two-level CA hierarchy, what are the subordinate CAs referred
to as?
Ans: Issuing CAs
What is the order in which group policies are applied?
Ans: Local policies, site-linked GPOs, domain-linked GPOs, OU-linked
GPOs
© 2025 All rights reserved
, 2 | Page
By default, how often does the Windows OS change a computer
account password in Active Directory?
Ans: Every 30 days
What simple Active Directory Federation Services design is used
to provide single sign-on access to multiple web applications for
users who are external to an organization's network?
Ans: Web SSO
During installation and configuration, AD CS asks you to select
the cryptographic service provider (CSP). What is the default
option?
Ans: RSA Microsoft Software Key Storage Provider
What Group Policy feature allows you to select specific users or
computers based on a filtering criteria, such as whether or not a
laptop battery is present in a system?
Ans: Item-level targeting
If a network service account tries to access a network resource,
what group is used for the access?
Ans: Authenticated User
When creating a backup of a GPO, what settings are NOT backed
up? (Choose two.)
Ans: WMI filter files
IPsec policies
You are creating user accounts for a domain named
au.experimental.csmtech.local, and would like to use an alternate
UPN suffix. What statement is accurate?
Ans: The alternate UPN suffix should follow DNS naming rules, but it is
not a requirement.
© 2025 All rights reserved
