Active Directory 面试题与答案
问题 21. How does Active Directory handle authentication and authorization?
Authentication is the process of verifying the identity of a user, while authorization involves granting or denying access to resources based on the user's permissions. Active Directory uses Kerberos authentication and access control lists (ACLs) for these purposes.
Example:
When a user logs in, Active Directory authenticates the user using Kerberos, then checks the user's permissions to determine access rights.
问题 22. Explain the concept of Trust in Active Directory.
Trust in Active Directory establishes relationships between domains, allowing users in one domain to access resources in another. Trust can be one-way or two-way, and it defines the level of access and permissions granted between domains.
Example:
A company with multiple domains might establish a two-way trust to allow seamless resource access between the domains.
问题 23. What is the purpose of the Kerberos protocol in Active Directory?
Kerberos is a network authentication protocol used by Active Directory to provide secure authentication for users and services. It uses tickets to verify the identity of users and services in a network environment.
Example:
When a user logs in, Active Directory issues a Kerberos ticket that can be used to access various network resources without requiring the user to re-enter credentials.
问题 24. How does Active Directory support Group Nesting?
Group Nesting in Active Directory allows groups to be members of other groups. This feature simplifies the management of permissions by allowing administrators to assign permissions to a group rather than individual users.
Example:
Instead of assigning permissions to each user individually, administrators can add users to groups, and groups to other groups, to streamline access control.
问题 25. What is the purpose of the Netlogon service in Active Directory?
The Netlogon service in Active Directory is responsible for various authentication and replication tasks. It registers domain controllers in DNS, replicates domain information between domain controllers, and handles secure channel communications.
Example:
When a user logs in, the Netlogon service ensures that the logon request is processed securely and that domain information is synchronized.
用户评价最有帮助的内容：
- What is Active Directory?
- Explain the difference between a domain and a workgroup.
- What is LDAP and how does it relate to Active Directory?
- Explain the purpose of the Infrastructure Master role.