70-413 Exam Quality Control & Assurance 2 — Questions and Answers
Question 1: A server infrastructure team needs to validate that all deployed Windows Server 2012 R2 systems meet baseline security configurations before production release. Which tool provides automated compliance scanning against Security Configuration Wizard (SCW) policies?
- Microsoft Baseline Security Analyzer (MBSA)
- Security Configuration Wizard (SCW) analyze mode (Correct answer)
- Attack Surface Analyzer
- Microsoft Assessment and Planning Toolkit
Correct answer: Security Configuration Wizard (SCW) analyze mode
SCW's analyze mode compares a server's current configuration against a saved SCW policy XML file to identify deviations from the approved baseline.
Question 2: During acceptance testing of a new Hyper-V cluster, you need to verify that live migration between nodes meets the defined SLA of under 5 seconds. Which PowerShell cmdlet initiates a live migration for testing purposes?
- Move-VM (Correct answer)
- Test-VHD
- Migrate-VMStorage
- Start-VMFailover
Correct answer: Move-VM
Move-VM cmdlet initiates live migration of a running virtual machine to another Hyper-V host, allowing you to time and validate the migration duration.
Question 3: Your organization requires that all server deployments pass a pre-deployment checklist validated through System Center Configuration Manager (SCCM). Which SCCM feature enforces compliance settings and reports non-compliant systems?
- Software Update Point
- Compliance Settings (DCM) (Correct answer)
- Endpoint Protection
- Asset Intelligence
Correct answer: Compliance Settings (DCM)
Desired Configuration Management (DCM)/Compliance Settings in SCCM allows you to define configuration baselines and automatically assess and report device compliance.
Question 4: A quality assurance process requires logging all administrative actions taken on production servers. Which Windows Server feature should you enable to capture detailed records of PowerShell commands executed by administrators?
- Windows Event Forwarding
- PowerShell Script Block Logging (Correct answer)
- Advanced Audit Policy — Process Creation
- System Center Operations Manager alerting
Correct answer: PowerShell Script Block Logging
PowerShell Script Block Logging records the full content of all script blocks executed, providing a complete audit trail of administrative PowerShell activity.
Question 5: After deploying a new DNS infrastructure, QA tests reveal intermittent name resolution failures under load. Which tool would you use to stress-test DNS server performance and identify the query threshold at which failures begin?
- Dcdiag /test:DNS
- DNSBench (Correct answer)
- NSlookup batch mode
- DNSLint
Correct answer: DNSBench
DNSBench is a specialized tool that performs performance benchmarking of DNS servers including throughput testing under simulated concurrent query loads.
Question 6: Your change management policy requires a rollback plan for every infrastructure deployment. When deploying a new Active Directory forest root domain, what is the correct rollback procedure if critical issues are discovered post-deployment?
- Run dcpromo /forceremoval on all DCs then restore from backup (Correct answer)
- Delete the domain partition from ADSI Edit
- Seize all FSMO roles then demote domain controllers
- Use System State restore on the first DC promoted
Correct answer: Run dcpromo /forceremoval on all DCs then restore from backup
Forced removal with dcpromo /forceremoval cleans up the DC metadata when normal demotion fails, followed by restoring from pre-deployment backup to fully roll back.
Question 7: A test plan for a new branch office deployment specifies that WAN link failover must occur within 60 seconds of link failure. Which Windows Server 2012 R2 feature, combined with routing protocols, enables you to validate automatic failover between two WAN connections?
- NIC Teaming with LACP
- Routing and Remote Access Service (RRAS) with dead gateway detection (Correct answer)
- DirectAccess with multi-site failover
- Network Load Balancing (NLB)
Correct answer: Routing and Remote Access Service (RRAS) with dead gateway detection
RRAS supports dead gateway detection and can be configured with multiple default routes at different metrics, automatically failing over to a secondary WAN link when the primary becomes unreachable.
70-413 Exam Quality Control & Assurance 2
A server infrastructure team needs to validate that all deployed Windows Server 2012 R2 systems meet baseline security configurations before production release.
Which tool provides automated compliance scanning against Security Configuration Wizard (SCW) policies?