Default Group Policy Objects in AD:
A . Default Domain Policy: This is a built-in GPO that is applied to all users and computers in the domain. It contains security settings, password policies, and other domain-wide configurations.
B . Default Domain Controllers Policy: This GPO is specifically applied to the Domain Controllers organizational unit (OU). It contains settings relevant to domain controllers, such as security settings and audit policies.
Reference:
Active Directory Group Policy documentation
Best practices for managing Group Policy in Active Directory

To establish a trust between a FreeIPA domain and an Active Directory domain, the correct command is ipa trust-add. This command is used to add a trust relationship with an Active Directory (AD) domain. The --type ad specifies the type of the trust, addom is the domain name, --admin Administrator specifies the AD administrator account, and --password prompts for the administrator's password.
The complete command looks like this:
a trust-add --type ad addom --admin Administrator --password
This command will initiate the trust creation process, which involves providing the credentials of the AD administrator.
Reference:
FreeIPA Trusts
FreeIPA Trust Management

The profilePath parameter in a user object specifies the path to the user's roaming profile. A roaming profile is a feature in Windows that allows user profile data to be stored on a network share so that users can access their profiles from any workstation within the network. By setting the profilePath, administrators can define where on the network the profile data is stored.
Reference:
Roaming User Profiles
User Account Properties

The SMB protocol (Server Message Block) is used for providing shared access to files and printers.
Historically, SMB ran on top of NetBIOS over TCP/IP using port 139.
SMB can also run directly over TCP/IP without the NetBIOS layer, which uses port 445.
Therefore, TCP port 445 is used to provide the SMB protocol without NetBIOS.
Reference:
Official IANA port numbers: https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml Microsoft documentation on SMB: https://docs.microsoft.com/en-us/windows/win32/fileio/microsoft-smb-protocol-and-cifs-protocol-overview

Flexible Single Master Operations (FSMO) roles, also known as operations master roles, are specialized domain controller tasks in an Active Directory environment. The FSMO roles include:
C . PDC Emulator
The Primary Domain Controller (PDC) Emulator is responsible for synchronizing time and managing password changes.
D . RID Master
The Relative ID (RID) Master allocates blocks of RIDs to each domain controller in the domain.
Reference:
Microsoft Docs - FSMO Roles