CREST Practitioner Security Analyst (CPSA) Practice

What is a key characteristic of Flexible Single Master Operations (FSMO) roles?

1. They can be duplicated across multiple domain controllers

2. Only one domain controller can handle certain functions at a time

3. They are solely related to user authentication

4. They are used exclusively for backup processes

The correct answer is: Only one domain controller can handle certain functions at a time

A key characteristic of Flexible Single Master Operations (FSMO) roles is that only one domain controller can handle certain functions at a time. This design ensures that critical operations within Active Directory, such as schema management, domain naming, and the relative identifier (RID) pool management, are performed consistently and avoid conflicts that could arise if multiple controllers attempted to carry out the same operations simultaneously. The focus on single-master roles is crucial because Active Directory's multi-master replication model, where domain controllers can independently make changes, is supplemented by specific roles that require a single point of control. This separation helps maintain stability and coherence in directory operations, particularly in environments with complex changes or large numbers of objects. While the other options touch on related themes, they do not accurately represent the fundamental aspect of FSMO roles: the necessity of having a single designated controller for specific operations to ensure data integrity and system reliability.