Active Directory 面试题与答案
问题 11. Explain the Global Catalog in Active Directory.
The Global Catalog is a distributed data repository in Active Directory that contains a searchable, partial representation of every object in the forest. It facilitates searches across domains and provides essential information during logon and resource access.
Example:
When searching for a user in a multi-domain environment, the Global Catalog helps locate the user without having to contact each domain separately.
问题 12. What is Group Policy in Active Directory?
Group Policy is a feature in Active Directory that allows administrators to define and enforce policies for users and computers. These policies can control security settings, software installations, and other configurations.
Example:
Group Policy can be used to enforce password policies or deploy software updates to all computers in a domain.
问题 13. How does Active Directory contribute to security in a network?
Active Directory enhances network security by providing a centralized authentication and authorization mechanism. It allows administrators to enforce security policies, control access to resources, and manage user permissions in a systematic way.
Example:
By defining Group Policies, administrators can ensure that all computers in the network comply with security standards.
问题 14. What is the purpose of the RID Master in Active Directory?
The RID (Relative Identifier) Master is responsible for allocating unique RIDs to each domain controller in a domain. RIDs are used in the creation of security principals such as user and group accounts.
Example:
When a new user is created, the RID Master assigns a unique identifier to that user within the domain.
问题 15. Explain the concept of Forest in Active Directory.
A Forest is the highest level of organizational structure in Active Directory and consists of one or more domains. Domains within a forest share a common schema, configuration, and global catalog. A forest is identified by a unique name and represents the security and administrative boundary for the organization.
Example:
A company with multiple subsidiaries might have a forest to represent the entire organization, with each subsidiary as a separate domain.
用户评价最有帮助的内容：
- What is Active Directory?
- Explain the difference between a domain and a workgroup.
- What is LDAP and how does it relate to Active Directory?
- Explain the purpose of the Infrastructure Master role.