Explore topic-wise InterviewSolutions in .

Stateless ADDRESS Autoconfiguration is used to CONFIGURE the link-local addresses and ADDITIONAL non-link-local addresses by exchanging Router Solicitation and Router Advertisement messages with NEIGHBOURING routers.

Stateless Address Autoconfiguration is used to configure the link-local addresses and additional non-link-local addresses by exchanging Router Solicitation and Router Advertisement messages with neighbouring routers.

The REMOTE ACCESS clients use the Internet Protocol CONTROL Protocol (IPCP) to OBTAIN an IP address configuration.

The remote access clients use the Internet Protocol Control Protocol (IPCP) to obtain an IP address configuration.

The AUTHORIZATION process for DHCP server computers depends on the installed role of the server on your NETWORK. There are following three roles or server types for which each server COMPUTER can be installed:

•  Domain controller.
•  MEMBER server.
•  Stand-alone server.

The authorization process for DHCP server computers depends on the installed role of the server on your network. There are following three roles or server types for which each server computer can be installed:

The DHCP Server service is integrated with Active Directory to provide AUTHORIZATION for DHCP servers. A DHCP server, which is a domain controller or a member of an Active Directory domain, QUERIES Active Directory for the list of authorized servers. If its own IP address is not in the list of authorized DHCP servers, the DHCP Server service does not complete its start up sequence and automatically shuts down.

For a DHCP server, which is not a member of the Active Directory domain, the DHCP Server service sends a DHCPInform message. The other DHCP servers on the network respond with a DHCPAck message, which CONTAINS information that the querying DHCP server USES to LOCATE the Active Directory root domain. The starting DHCP server then queries Active Directory for a list of authorized DHCP servers and starts the DHCP Server service only if its own address is in the list.

The DHCP Server service is integrated with Active Directory to provide authorization for DHCP servers. A DHCP server, which is a domain controller or a member of an Active Directory domain, queries Active Directory for the list of authorized servers. If its own IP address is not in the list of authorized DHCP servers, the DHCP Server service does not complete its start up sequence and automatically shuts down.

For a DHCP server, which is not a member of the Active Directory domain, the DHCP Server service sends a DHCPInform message. The other DHCP servers on the network respond with a DHCPAck message, which contains information that the querying DHCP server uses to locate the Active Directory root domain. The starting DHCP server then queries Active Directory for a list of authorized DHCP servers and starts the DHCP Server service only if its own address is in the list.

DHCP servers STORE RANGES of addresses that can be assigned to hosts on individual subnets. When a DHCP CLIENT starts up and if the DHCP client is on the same subnet as the DHCP server, the DHCP server can identify the subnet from the interface on which the DHCP messages from the client were received.

When the DHCP client is on DIFFERENT subnet as that of DHCP server, a DHCP RELAY agent on the DHCP client's subnet records the IP address of the interface on which the DHCP message from the DHCP client was received before forwarding the message to the DHCP server.

DHCP servers store ranges of addresses that can be assigned to hosts on individual subnets. When a DHCP client starts up and if the DHCP client is on the same subnet as the DHCP server, the DHCP server can identify the subnet from the interface on which the DHCP messages from the client were received.

When the DHCP client is on different subnet as that of DHCP server, a DHCP relay agent on the DHCP client's subnet records the IP address of the interface on which the DHCP message from the DHCP client was received before forwarding the message to the DHCP server.

The following messages are USED to COMMUNICATE during the DHCP CONFIGURATION process:

1. DHCPDiscover.
2. DHCPOffer.
3. DHCPRequest.
4. DHCPAck.
5. DHCPNak.
6. DHCPDecline.
7. DHCPRelease.
8. DHCPINFORM.

The following messages are used to communicate during the DHCP configuration process:

• DHCP traffic uses the UDP protocol.
• Messages from the DHCP CLIENT to the DHCP SERVER USE UDP SOURCE port 68 and UDP DESTINATION port 67.
• Messages from the DHCP server to the DHCP client use UDP source port 67 and UDP destination port 68.

When DHCP CLIENTS start up on a network, they DISCOVER the DHCP servers on the network and request IP configuration information. The DHCP servers respond with an offered IP address configuration. The DHCP client REQUESTS the USE of a specific IP address configuration from among those offered, which is acknowledged by the DHCP server that offered it. The DHCP server allocates an IP address configuration for a specific amount of time known as the lease time; whereas, the DHCP client must renew the lease time of its IP address configuration on regular basis.

When DHCP clients start up on a network, they discover the DHCP servers on the network and request IP configuration information. The DHCP servers respond with an offered IP address configuration. The DHCP client requests the use of a specific IP address configuration from among those offered, which is acknowledged by the DHCP server that offered it. The DHCP server allocates an IP address configuration for a specific amount of time known as the lease time; whereas, the DHCP client must renew the lease time of its IP address configuration on regular basis.

DHCPv6 is DHCP for IPv6 networks. The DHCP Server service supports both DHCPv6 stateless and STATEFUL OPERATIONS.

DHCPv6 is DHCP for IPv6 networks. The DHCP Server service supports both DHCPv6 stateless and stateful operations.

YES, the DHCP Server service in Windows Server 2008 SUPPORTS BOOTP clients through the configuration of a BOOTP table.

Yes, the DHCP Server service in Windows Server 2008 supports BOOTP clients through the configuration of a BOOTP table.

Windows support the following three ELEMENTS of a DHCP infrastructure:

•  DHCP Client SERVICE - Acts as a DHCP client and automatically OBTAINS an IP ADDRESS configuration from a DHCP server
•  DHCP Server service - Acts as a DHCP server and automatically assigns IP address configurations to DHCP client computers.
•  Routing and Remote Access service - Acts as a DHCP RELAY agent, listens for broadcast and unicast DHCP messages, and relays them between DHCP servers and clients

Windows support the following three elements of a DHCP infrastructure:

DHCP is an Internet Engineering Task FORCE (IETF) standard for SIMPLIFYING management of host IP configuration. The DHCP servers manage dynamic allocation of IP addresses and other related configuration details for DHCP-enabled clients on a NETWORK.

DHCP is an Internet Engineering Task Force (IETF) standard for simplifying management of host IP configuration. The DHCP servers manage dynamic allocation of IP addresses and other related configuration details for DHCP-enabled clients on a network.

The IPCONFIG COMMAND is used to check the IPv6 address. You can also USE the NETSH interface ipv6 show address command to view the IPv6 addresses.

The ipconfig command is used to check the IPv6 address. You can also use the netsh interface ipv6 show address command to view the IPv6 addresses.

Microsoft has ESTABLISHED a SPECIAL domain for IPv6 address TRANSLATION. You can include an IPv6 address within a Universal Naming Convention by replacing the colons with dashes and appending .ipv6.literal.net to the end of the address; for example, FE80-AB00-200D-617B.ipv6.literal.net.

Microsoft has established a special domain for IPv6 address translation. You can include an IPv6 address within a Universal Naming Convention by replacing the colons with dashes and appending .ipv6.literal.net to the end of the address; for example, FE80-AB00-200D-617B.ipv6.literal.net.

TRANSITION technologies use TUNNELING to facilitate cross network compatibility. TWO such technologies are Teredo and 6to4 that encapsulate IPv6 packets inside IPV4 packets. The tunnel endpoints are required on both ends to encapsulate and EXTRACT the IPv6 packets.

Transition technologies use tunneling to facilitate cross network compatibility. Two such technologies are Teredo and 6to4 that encapsulate IPv6 packets inside IPv4 packets. The tunnel endpoints are required on both ends to encapsulate and extract the IPv6 packets.

The ip6.arpa DOMAIN is USED for REVERSE HOSTNAME RESOLUTION.

The ip6.arpa domain is used for reverse hostname resolution.

Yes, DNS is used in IPv6; instead of HOST (A) RECORDS, IPv6 uses AAAA RESOURCE records, which are sometimes REFERRED to as Quad A records.

Yes, DNS is used in IPv6; instead of Host (A) records, IPv6 uses AAAA resource records, which are sometimes referred to as Quad A records.

There are four SEQUENTIAL sections separated by zeros in IPv6. INSTEAD of suppressing the leading zeros, you can represent all the sequential zeros and REPLACE them with two colons. The two colons INFORM the OPERATING system that everything in between them is a zero.

There are four sequential sections separated by zeros in IPv6. Instead of suppressing the leading zeros, you can represent all the sequential zeros and replace them with two colons. The two colons inform the operating system that everything in between them is a zero.

IPv6 uses SUBNETS, but the subnet Identifier (ID) is built into the address. First 48 characters of the address are the network prefix, next 16 characters (which are OFTEN all ZEROS) are the subnet ID, and the last 64 characters are the interface identifier.

IPv6 uses subnets, but the subnet Identifier (ID) is built into the address. First 48 characters of the address are the network prefix, next 16 characters (which are often all zeros) are the subnet ID, and the last 64 characters are the interface identifier.

The LOOPBACK ADDRESS for IPv4 Is 127.0.0.1; WHEREAS, the loopback address for IPV6 is
0000:0000:0000:0000:0000:0000:0000:0001. The IPv6 loopback address is OFTEN expressed as ::1.

The loopback address for IPv4 Is 127.0.0.1; whereas, the loopback address for IPv6 is
0000:0000:0000:0000:0000:0000:0000:0001. The IPv6 loopback address is often expressed as ::1.

IPv6 ADDRESS is ASSIGNED to a network interface of a computer participating in a network using the IP suite. It is 128 bits LONG hexadecimal NUMBER.

IPv6 address is assigned to a network interface of a computer participating in a network using the IP suite. It is 128 bits long hexadecimal number.

The structure of Teredo IPv6 addressing is as FOLLOWS:

•  First 32 bits, that is 0 to 31, are set to the Teredo prefix (normally 2001:0000::/32).
•  Bits 32 to 63 embed the primary IPv4 address of the Teredo SERVER being used.
•  Bits 64 to 79 can be used to.define flags.
•  Bits 80 to 95 contain the obfuscated UDP port number, which is MAPPED by the NAT devices to the Teredo client with all the bits inverted.
•  Bits 96 to 127 contain the obfuscated IPv4 address. This is the public IPv4 address of the NAT devices with all the bits inverted.

The structure of Teredo IPv6 addressing is as follows:

Teredo is a tunnelling PROTOCOL that grants IPv6 connectivity to the NODES located behind IPv6-unaware NETWORK Address Translation (NAT) devices. It describes a way of encapsulating IPv6 packets within the IPv4 UDP datagrams that can be routed through NAT devices on the IPv4-based Internet.

Teredo is a tunnelling protocol that grants IPv6 connectivity to the nodes located behind IPv6-unaware Network Address Translation (NAT) devices. It describes a way of encapsulating IPv6 packets within the IPv4 UDP datagrams that can be routed through NAT devices on the IPv4-based Internet.

The tcpip.sys driver is used for the IPv4 PROTOCOL STACK; whereas, the tcpip6.sys driver is used for the IPV6 protocol stack.

The tcpip.sys driver is used for the IPv4 protocol stack; whereas, the tcpip6.sys driver is used for the IPv6 protocol stack.

Windows XP AUTOMATICALLY creates built-in ACCOUNTS, which are of the FOLLOWING two types:

•  Administrator —Manages overall computer and domain configurations, such as assigning permissions and rights to user accounts
•  Guest —Gives access to resources on a computer or a domain

Windows XP automatically creates built-in accounts, which are of the following two types:

In the local user account, users LOG on to the computer where the account is LOCATED and gain access to RESOURCES on that computer. In the DOMAIN user account, users log on to the domain and gain access to resources anywhere on the NETWORK.

In the local user account, users log on to the computer where the account is located and gain access to resources on that computer. In the domain user account, users log on to the domain and gain access to resources anywhere on the network.

The following preference ITEMS can be managed by using RSAT in Windows Server 2008 R2 and Windows 7:

•  Power PLAN,
•  Scheduled TASK,
•  Immediate Task,
•  Internet Explorer 8.

The following preference items can be managed by using RSAT in Windows Server 2008 R2 and Windows 7:

The logical elements that can be combined to define an ACTIVE DIRECTORY topology are as FOLLOWS:

1. FOREST,
2. One or more DOMAINS,
3. One or more Active Directory sites.

The logical elements that can be combined to define an Active Directory topology are as follows:

Administrative TEMPLATES (.ADMX FILES) are registry-based policy settings that are LISTED under the Administrative Templates node of both the Computer and User Configuration NODES.

Administrative templates (.ADMX files) are registry-based policy settings that are listed under the Administrative Templates node of both the Computer and User Configuration nodes.

The services that are hosted on domain controllers are as follows:

•  KERBEROS KEY Distribution Center (KDC),
•  NetLogon (Netlogon),
•  Windows Time (W32time),
•  Intersite MESSAGING (IsmServ),
•  File Replication (NTFRS),
•  DISTRIBUTED File System (DFS),
•  SYSVOL share.

The services that are hosted on domain controllers are as follows:

Global catalog is a distributed DATA repository to FACILITATE searches and logons in an Active Directory forest. The global catalog data is automatically built by the Active Directory replication system. The domain CONTROLLERS that host the global catalog are called global catalog servers.

Global catalog is a distributed data repository to facilitate searches and logons in an Active Directory forest. The global catalog data is automatically built by the Active Directory replication system. The domain controllers that host the global catalog are called global catalog servers.

NetLogon service is used to verify NT LAN Manager (NTLM) LOGON requests, and registers, AUTHENTICATES, and locates DOMAIN controllers. It manages replication of the USER account DATABASE to back up domain controllers running Windows NT 4.0 and earlier.

NetLogon service is used to verify NT LAN Manager (NTLM) logon requests, and registers, authenticates, and locates domain controllers. It manages replication of the user account database to back up domain controllers running Windows NT 4.0 and earlier.

Local SECURITY Authority (LSA) POLICY is used to manage trust RELATIONSHIP between DOMAINS and FORESTS.

Local Security Authority (LSA) policy is used to manage trust relationship between domains and forests.

RID manager is RESPONSIBLE for PROVIDING numbers that are USED to create unique SIDS for each ACCOUNT in a domain.

RID manager is responsible for providing numbers that are used to create unique SIDs for each account in a domain.

ACCOUNT MANAGEMENT includes CREATING, modifying, and deleting user ACCOUNTS and detection of duplicate accounts and SECURITY Identifiers (SIDs).

Account Management includes creating, modifying, and deleting user accounts and detection of duplicate accounts and Security Identifiers (SIDs).

SAM is a database that has INFORMATION about USER accounts and security descriptors for users on the local COMPUTER.

SAM is a database that has information about user accounts and security descriptors for users on the local computer.

Windows TIME service automatically synchronizes the LOCAL COMPUTER's time with other COMPUTERS on the NETWORK.

Windows Time service automatically synchronizes the local computer's time with other computers on the network.

ACTIVE DIRECTORY schema is the set of attributes and CLASSES that defines the types of objects and information about the objects STORED in Active Directory Domain Services.

Active Directory schema is the set of attributes and classes that defines the types of objects and information about the objects stored in Active Directory Domain Services.

LDAP is a protocol that directory clients USE to gain ACCESS to data, which is held by directory servers. It supports bind, unbind, read, and modify operations. It is also responsible for packaging and interpreting LDAP PACKETS over the network.

LDAP is a protocol that directory clients use to gain access to data, which is held by directory servers. It supports bind, unbind, read, and modify operations. It is also responsible for packaging and interpreting LDAP packets over the network.

Forest CONTAINS all the DOMAINS, sites, and trusts that are PART of Active DIRECTORY DOMAIN Services. It also contains a single domain by default, which is called the forest root domain.

Forest contains all the domains, sites, and trusts that are part of Active Directory Domain Services. It also contains a single domain by default, which is called the forest root domain.

ACTIVE Directory DOMAIN SERVICES defines the data structure and those services that PROVIDE organization, management, and security of accounts and resources in a Microsoft network.

Active Directory Domain Services defines the data structure and those services that provide organization, management, and security of accounts and resources in a Microsoft network.

In WINDOWS SERVER 2008 R2, Active Directory WEB Services is a new service that PROVIDES a Web service interface to Active Directory domains.

In Windows Server 2008 R2, Active Directory Web Services is a new service that provides a Web service interface to Active Directory domains.

UAC helps protect the network by preventing USERS from RUNNING malicious SOFTWARE.

UAC helps protect the network by preventing users from running malicious software.

The new feature of the smart card in WINDOWS 2008 R2 is the enhanced support for smart card-related Plug and Play and the Personal Identity VERIFICATION (PIV) standard from the National INSTITUTE of STANDARDS and Technology (NIST).

The new feature of the smart card in Windows 2008 R2 is the enhanced support for smart card-related Plug and Play and the Personal Identity Verification (PIV) standard from the National Institute of Standards and Technology (NIST).

AppLocker defines the rules based on FILE ATTRIBUTES DERIVED from the DIGITAL signature. These rules specify which files are allowed to RUN. Files that are not included in rules are not allowed to run.

AppLocker defines the rules based on file attributes derived from the digital signature. These rules specify which files are allowed to run. Files that are not included in rules are not allowed to run.

Yes, if the smart card USED for the logon is REMOVED from the smart card reader before any ENCRYPTION operations are performed, then SSO gets disabled and the user will be prompted for a smart card and PIN at the first EFS operation.

Yes, if the smart card used for the logon is removed from the smart card reader before any encryption operations are performed, then SSO gets disabled and the user will be prompted for a smart card and PIN at the first EFS operation.

Smart card SSO is triggered whenever a user LOGS on with a smart card in one of the following CONDITIONS:

1. The user does not have a valid EFS encryption key on the computer, and smart cards are required for EFS by policy settings.
2. The user has a valid EFS encryption key that resides on the smart card, which is used for logon.
When SSO is triggered, EFS caches the Personal Identification Number (PIN) entered by the user at the TIME of logon and uses it for EFS operations as well. Therefore, the user does not see any PIN prompts from EFS during the session.

Smart card SSO is triggered whenever a user logs on with a smart card in one of the following conditions:

1. The user does not have a valid EFS encryption key on the computer, and smart cards are required for EFS by policy settings.
2. The user has a valid EFS encryption key that resides on the smart card, which is used for logon.
When SSO is triggered, EFS caches the Personal Identification Number (PIN) entered by the user at the time of logon and uses it for EFS operations as well. Therefore, the user does not see any PIN prompts from EFS during the session.

The new functionality of EFS is the ABILITY to store ENCRYPTION certificates on smart cards, per-user encryption of FILES in the client-side cache, additional Group Policy options, and a new REKEYING wizard.

The new functionality of EFS is the ability to store encryption certificates on smart cards, per-user encryption of files in the client-side cache, additional Group Policy options, and a new rekeying wizard.

The Robocopy UTILITY, added as a NEW feature in Windows Server 2008, is used to copy EFS-encrypted FILES without needing the decryption key.

The Robocopy utility, added as a new feature in Windows Server 2008, is used to copy EFS-encrypted files without needing the decryption key.

KRA STANDS for KEY RECOVERY Agent and DRA stands for DATA Recovery Agent.

KRA stands for Key Recovery Agent and DRA stands for Data Recovery Agent.