300-300 Exam Dumps - LPIC Level 3 Certification Questions and Answers

Flexible Single Master Operations (FSMO) roles, also known as operations master roles, are specialized domain controller tasks in an Active Directory environment. The FSMO roles include:

C. PDC Emulator

The Primary Domain Controller (PDC) Emulator is responsible for synchronizing time and managing password changes.

D. RID Master

The Relative ID (RID) Master allocates blocks of RIDs to each domain controller in the domain.

References:

Microsoft Docs - FSMO Roles

DFS (Distributed File System):This allows for the organization of shared files on multiple servers in a distributed file system.

msdfs root = yes:This option in the Samba configuration file (smb.conf) enables a share to be a DFS root. This means the share can provide access to multiple other shares possibly located on different servers, creating a single point of access.

Functionality:When enabled, users accessing this DFS root can be redirected transparently to the actual location of the shared files, which might be spread across different servers.

Setup:To configure a DFS root, addmsdfs root = yesto the specific share definition in smb.conf.

References

Samba DFS Configuration

Default Group Policy Objects in AD:

A. Default Domain Policy: This is a built-in GPO that is applied to all users and computers in the domain. It contains security settings, password policies, and other domain-wide configurations.

B. Default Domain Controllers Policy: This GPO is specifically applied to the Domain Controllers organizational unit (OU). It contains settings relevant to domain controllers, such as security settings and audit policies.

References:

Active Directory Group Policy documentation

Best practices for managing Group Policy in Active Directory

To connect to a share on a Windows server using the SMB3 protocol, thesmbclientcommand with the--max-protocoloption should be used. The--max-protocoloption allows you to specify the highest SMB protocol version that should be used. Therefore, the correct command issmbclient --max-protocol SMB3 //fs1/Share.

References

smbclient man page

Samba: smbclient Command Options

In an Active Directory domain, theDomain Usersgroup exists by default. This group includes all user accounts created in the domain and is commonly used for assigning permissions and rights to all users.

References:

Microsoft Docs - Active Directory Default Groups