Which service enables sign-on from any computer and centralized access to resources in a Windows domain?

Which service enables sign-on from any computer and centralized access to resources in a Windows domain?

• A. DHCP
• B. DNS
• C. Active Directory Domain Services
• D. FTP

Answer: (C)

Centralized identity and access management in a Windows domain is provided by Active Directory Domain Services. It stores user and computer accounts, groups, and policies, and runs on domain controllers that authenticate users and computers when they log on to any domain-joined machine. Because credentials are verified against the directory, a user can sign on from any computer in the domain and then access resources—files, printers, and applications—based on permissions and group memberships. DNS supports AD by helping locate domain controllers and services, but it doesn’t perform sign-on. DHCP assigns IP addresses, not user credentials, and FTP is just a file transfer protocol. So AD DS is the service that enables sign-on from any computer and centralized access to resources in a Windows domain.

Centralized identity and access management in a Windows domain is provided by Active Directory Domain Services. It stores user and computer accounts, groups, and policies, and runs on domain controllers that authenticate users and computers when they log on to any domain-joined machine. Because credentials are verified against the directory, a user can sign on from any computer in the domain and then access resources—files, printers, and applications—based on permissions and group memberships. DNS supports AD by helping locate domain controllers and services, but it doesn’t perform sign-on. DHCP assigns IP addresses, not user credentials, and FTP is just a file transfer protocol. So AD DS is the service that enables sign-on from any computer and centralized access to resources in a Windows domain.