Designing and Implementing a Server Infrastructure Flashcards

Which domain functional levels can't be utilized with a practical forest level of Windows Server 2012?

Answer: Windows Server 2008

A forest functional level sets the minimum domain functional level allowed in that forest, so a Windows Server 2012 forest level cannot include any domain at a lower level like Windows Server 2008. Windows Server 2012 domains are allowed because they meet (and don't fall below) the forest's minimum.

What further action is necessary to enable the admin tools after installing RSAT for Windows 8.1?

Answer: Nothing

On Windows 8.1, RSAT tools are enabled automatically once the installation completes, so no further action is required. You don't need to reboot, run GPupdate, or manually turn the tools on via Windows Features as you did with older RSAT packages.

A central office and numerous sizable branch offices are part of your network. The configuration of each office is set up as a distinct child domain of the fiprint.com domain. Relatively sluggish cables connect the offices. There is occasionally a long wait when authenticating users who belong to universal groups on other domains. The effectiveness of authentication needs to be raised. The solution's bandwidth requirements should be kept to a minimum. What should you do?

Answer: In each branch site, turn on Universal Group Membership Caching

Explanation: To improve authentication performance in a multi-domain environment with slow links, where delays occur when authenticating users with membership in universal groups in other domains, you should enable Universal Group Membership Caching in each branch site. Universal Group Membership Caching is a feature in Active Directory that allows the caching of universal group memberships for users who log on to a domain controller in a site. This reduces the number of cross-domain queries that need to be performed over the slow links and, therefore, can improve the authentication performance.

Why might you want to set up or maintain a Kerberos delegation?

Answer: To permit a service to carry out authentication on a user's behalf

Kerberos delegation allows a service to authenticate to other resources on a user's behalf, which is essential for multi-tier applications that make additional hops (e.g., a web server accessing a database as the user). It is not about realm trusts, granting admin rights, or authenticating UNIX users — those involve different mechanisms.

How can you ensure a particular configuration is used on a computer regardless of who is using it now?

Answer: Loopback processing

Loopback processing forces the computer's assigned user-policy settings to apply to anyone who logs on, regardless of the user's own OU. Enforced policies, security filtering, and WMI filtering control which GPOs apply or override, but only loopback guarantees a consistent per-computer configuration for all users.

With the Hyper-V role installed, you are configuring a host cluster on a machine running Microsoft Windows Server 2012 R2. The host cluster is being set up using System Center 2012 R2 Virtual Machine Manager (VMM). The cluster virtual machines' operating system and shared storage files will be stored on a Windows Server 2012 R2. To avoid moving the shared storage.vhdx file to HDD storage, ensure it stays on an SSD disk. What should you do?

Answer: Run Set-FileStorageTier

To ensure the shared storage .vhdx file remains on an SSD disk, you should use the `Set-FileStorageTier` cmdlet. This PowerShell command allows administrators to explicitly assign files to specific storage tiers, such as SSD (for performance) or HDD (for capacity), within a Storage Spaces Direct or tiered storage configuration. This ensures critical VM files benefit from the higher performance of SSDs, preventing them from being moved to slower HDD storage.

What advantage does a simultaneous migration from Forefront UAG DirectAccess to Windows Server 2012 offer?

Answer: No downtime is required.

A simultaneous migration from Forefront UAG DirectAccess to Windows Server 2012 DirectAccess offers the advantage of no downtime. This is achieved by deploying the new DirectAccess server alongside the existing UAG server, allowing for a gradual transition of clients. Clients can be seamlessly migrated to the new infrastructure without interrupting their remote connectivity, ensuring continuous service availability throughout the process.