Your network contains an Active Directory domain named contoso.com. The domain contains a domain
controller named DC1.
You run ntdsutil as shown in the exhibit. (Click the Exhibit button.)
You need to ensure that you can access the contents of the mounted snapshot.
What should you do?
A.
From the snapshot context of ntdsutil, run activate instance “NTDS”.
B.
From a command prompt, run dsamain.exe -dbpath
c:\$snap_201204131056_volumec$\windows\ntds\ntds. dit -Idapport 389.
C.
From the snapshot context of ntdsutil, run mount {79f94f82-5926-4f44-8af0-2f56d827a57d}.
D.
From a command prompt, run dsamain.exe -dbpath
c:\$snap_201204131056_volumec$\windows\ntds\ntds. dit -Idapport 33389.
Explanation:
By default, only members of the Domain Admins group and the Enterprise Admins group are allowed to view
the snapshots because they contain sensitive AD DS data. If you want to access snapshot data from an old
domain or forest that has been deleted, you can allow nonadministrators to access the data when you run
Dsamain.exe.
If you plan to view the snapshot data on a domain controller, specify ports that are different from the ports
that the domain controller will use.
A client starts an LDAP session by connecting to an LDAP server, called a Directory System Agent (DSA), by
default on TCP port and UDP [7] port 389. The client then sends an operation request to the server, and the
server sends responses in return. With some exceptions, the client does not need to wait for a response before
sending the next request, and the server may send the responses in any order. All information is transmitted
using Basic Encoding Rules (BER).http: //technet. microsoft. com/en-us/library/cc753609(v=ws. 10). aspx
JohnyBoy says:
December 10, 2014 at 6:33 pm
I vote: A
I believe we need to mount it first indeed.
Even in the image we have:
mount {…a57d}
http://technet.microsoft.com/en-us/library/cc753609(v=WS.10).aspx
Although it is not a requirement, you can schedule a task that regularly runs Ntdsutil.exe to take snapshots of the volume that contains the AD DS or AD LDS database.
2. Run Ntdsutil.exe to list the snapshots that are available and then mount the snapshot that you want to view.
3. Run Dsamain.exe to expose the snapshot volume as an LDAP server.
JohnyBoy says:
December 12, 2014 at 5:20 pm
I’ve just tried this.
You can see in the image “c:\$SNAP…” this means the image has been mounted.
Now we need to use dsamain to make it available in a specific port.
Correct answer is D
why not B
Guessing I would say not B because it is using the default ldap port at the DC already uses for the current ldap database.