MCSA/MCSE Self-Paced Training Kit (Exam 70-270): Installing ...

1-38 Chapter 1 Introduction to Windows XP Professional
Page
1-30
c. A workgroup is practical in environments with up to 100 computers.
d. A workgroup can contain computers running Windows Server 2003 as long as
the server is not configured as a domain controller.
A and D are correct. A is correct because in a workgroup, computers act as equals (or peers),
and the arrangement is also called a peer-to-peer network. D is correct because computers running
a server product might be part of a workgroup (such computers are called stand-alone
servers) as long as no server is acting as a domain controller. B is not correct because each
computer in a workgroup maintains its own security database instead of relying on a centralized
security database. C is not correct because a workgroup begins to become impractical
with more than 10 workstations—not 100 workstations.
2. What is a domain controller?
A domain controller is a computer running Windows 2000 Server that is configured as a domain
controller so that it can manage all security-related aspects of user and domain interactions.
3. A directory database contains user accounts and security information for the
domain and is known as the __________________. This directory database is the
database portion of ______________________________, which is the Windows
2000 directory service. Fill in the blanks.
directory, Active Directory service
4. A(n) ____________ provides a single logon for users to gain access to network
resources that they have permission to access—such as file, print, and application
resources. Fill in the blanks.
domain
Lesson 4 Review
1. What can you do when you log on locally to a computer, and what determines
what you can do when you log on locally to a computer?
When you log on locally to a computer, you can access the appropriate resources on that computer
and you can perform specific system tasks. What you can do when logged on locally to a
computer is determined by the access token assigned to the user account you used to log on.
The access token is your identification for that local computer; it contains your security settings.
These security settings allow you to access specific resources on that computer and to
perform specific system tasks.
2. What is the main difference in the authentication process for logging on locally to
a computer and logging on to a domain?
When you log on locally to a computer, its security subsystem uses the local security database
to authenticate the user name and password you entered. When you log on to a domain, a
domain controller uses the directory to authenticate the user name and password you entered.