Domains, Trees, and Forests Quiz

1.What determines whether two domains belong to the same domain tree?

• They share a contiguous DNS namespace, where a child domain's name extends its parent's name
• They are managed day to day by the same administrator
• They were created inside the same forest at the same time
• They use the same set of domain controllers

2.What binds two separate domain trees together into a single forest?

• A shared DNS namespace across every domain in the forest
• A shared schema, a shared global catalog, and shared forest-wide administrative groups
• A single administrator account that can log into every domain controller
• A single physical data center hosting every domain controller

3.Why does a single-domain environment still technically have a tree and a forest, even though it looks like "just AD"?

• Because domain, tree, and forest are still distinct concepts, just collapsed into their smallest possible instance
• Because Windows Server automatically creates two hidden placeholder domains behind the scenes
• Because the domain's namespace automatically splits into a tree and a forest for redundancy
• Because a tree and a forest only exist once a second domain controller is added

4.While enumerating a single environment, you see two unrelated DC= components in the distinguished names of objects you find. What does that most likely tell you?

• You are looking at two unrelated organizations that happen to share infrastructure
• You are dealing with a multi-tree forest, where every forest-wide fact you have already established still applies to both
• The DNS zone is misconfigured and needs to be corrected
• A trust relationship between the two domains was recently broken

5.What can you conclude about a security or trust relationship between two domains just from their DNS namespace?

• Nothing directly, since namespace is a naming convenience and trust or security scope is governed at the forest level
• A shared namespace always means the two domains have already merged into a single domain
• A different namespace always means the domains sit in separate forests
• A shared namespace always means the domains were created by the same person

6.An acquiring company's IT organization consolidates identity infrastructure into a single forest after a merger, but has no interest in renaming the acquired company's public domain name to match its own. What topology does this describe?

• A multi-tree forest
• A multi-domain tree
• A single-domain forest
• A trust relationship between two separate forests

7.Which statement correctly matches each term to the rule that defines it?

• Domain: administrative boundary with its own database and domain controllers. Tree: contiguous DNS namespace grouping. Forest: shared schema, global catalog, and admin groups
• Domain: contiguous DNS namespace grouping. Tree: administrative boundary. Forest: physical location boundary
• All three terms describe the same administrative boundary, just at different sizes
• Domain: shared schema boundary. Tree: administrative boundary. Forest: contiguous DNS namespace grouping