Active Directory

Front 1

Built In Domains

Back 1

Default Groups essential for Domain to operate

Front 2

Computers

Back 2

Computers joined to domain will be dropped in this by default.

Front 3

ForeignSecurity/Principals

Back 3

is used when there is a trust established between 2 sites. Objects inside that represent security and policies.

Front 4

Forrests

Back 4

-

Front 5

Domains

Back 5

-

Front 6

PDC

Back 6

-

Front 7

OU

Back 7

-

Hint 7

Organizational Unit

Front 8

BDC

Back 8

-

Hint 8

Backup Domain Controller

Front 9

DHCP

Back 9

-

Hint 9

Dynamic Host Configuration Protocol

Front 10

DNS

Back 10

-

Hint 10

Domain Naming Service

Front 11

Trees

Back 11

-

Front 12

Partitions

Back 12

-

Front 13

Domain Controllers

Back 13

-

Front 14

Replication

Back 14

-

Front 15

RPC

Back 15

Replication of Active Directory uses Remote Procedure Calls (RPC) over IP (RPC/IP).

Front 16

FSMO

Back 16

Flexible Single Master Operations Roles (FSMO

Front 17

Trusts

Back 17

TerminologyEditOne-way trustOne domain allows access to users on another domain, but the other domain does not allow access to users on the first domain.Two-way trustTwo domains allow access to users on both domains.Trusted domainThe domain that is trusted; whose users have access to the trusting domain.Transitive trustA trust that can extend beyond two domains to other trusted domains in the forest.Intransitive trustA one way trust that does not extend beyond two domains.Explicit trustA trust that an admin creates. It is not transitive and is one way only.Cross-link trustAn explicit trust between domains in different trees or in the same tree when a descendant/ancestor (child/parent) relationship does not exist between the two domains.ShortcutJoins two domains in different trees, transitive, one- or two-way.Forest trustApplies to the entire forest. Transitive, one- or two-way.RealmCan be transitive or nontransitive (intransitive), one- or two-way.ExternalConnect to other forests or non-AD domains. Nontransitive, one- or two-way.[46]PAM trustA one-way trust used by Microsoft Identity Manager from a (possibly low-level) production forest to a (Windows Server 2016 functionality level) 'bastion' forest, which issues time-limited group memberships.[47][48]

Front 18

What are domain credentials?

Back 18

Domain credentials are used by the operating system and authenticated by the Local Security Authority (LSA). Typically, domain credentials are established for a user when a registered security package, such as the Kerberos protocol, authenticates logon data that is provided by the user.

Front 19

LSA

Back 19

Windows What is LSA?Local Security Authority Subsystem Service (LSASS) is a process in Microsoft Windows operating systems that is responsible for enforcing the security policy on the system. It verifies users logging on to a Windows computer or server, handles password changes, and creates access tokens.

Hint 19

Local Security Authority

Front 20

What does svchost exe do?

Back 20

File: svchost.exe. Security Rating: "Svchost.exe" (Generic Host Process for Win32 Services) is an integral part of Windows OS. It cannot be stopped or restarted manually. This process manages system services that run from dynamic link libraries (files with extension .dll).