Administering Windows Server 2012 Network Infrastructure & DNS Services 2 — Questions and Answers
Question 1: In Windows Server 2012, what does Windows Firewall with Advanced Security use to control network traffic?
- Proxy rules
- Inbound and outbound rules based on port, protocol, and application (Correct answer)
- MAC address filtering only
- VLAN tagging
Correct answer: Inbound and outbound rules based on port, protocol, and application
Windows Firewall with Advanced Security uses granular inbound and outbound rules that can filter traffic by port, protocol, application, service, and IP address.
Question 2: Which Windows Server 2012 role service allows remote users to connect to internal network resources securely over the Internet without a VPN client?
- DirectAccess (Correct answer)
- SSTP VPN
- L2TP/IPsec VPN
- PPTP VPN
Correct answer: DirectAccess
DirectAccess provides seamless, always-on connectivity to corporate resources over the Internet using IPv6 and IPsec, without requiring users to manually initiate a VPN.
Question 3: In Windows Server 2012 DNS, what is DNSSEC used for?
- Encrypting DNS zone transfers
- Digitally signing DNS records to ensure their authenticity and integrity (Correct answer)
- Hiding DNS zone data from external queries
- Compressing DNS responses for faster delivery
Correct answer: Digitally signing DNS records to ensure their authenticity and integrity
DNSSEC adds digital signatures to DNS records so resolvers can verify the data has not been tampered with, protecting against cache poisoning attacks.
Question 4: What Windows Server 2012 feature allows two DHCP servers to share scope information and provide failover for DHCP services?
- DHCP split scope
- DHCP failover (Correct answer)
- DHCP superscope
- DHCP multicast scope
Correct answer: DHCP failover
DHCP failover, new in Windows Server 2012, allows two DHCP servers to synchronize lease information and continue serving clients if one server fails.
Question 5: Which command verifies DNS name resolution from a Windows Server 2012 command prompt?
- ipconfig /flushdns
- nslookup (Correct answer)
- netstat -r
- ping /resolve
Correct answer: nslookup
Nslookup is the standard command-line tool for querying DNS servers and verifying name resolution on Windows Server 2012.
Question 6: In Windows Server 2012, which DNS zone type is stored in Active Directory and replicated to all DNS-enabled domain controllers?
- Primary zone (file-backed)
- Secondary zone
- AD-integrated zone (Correct answer)
- Stub zone
Correct answer: AD-integrated zone
Active Directory-integrated zones store DNS data in the AD database, enabling multi-master replication and secure dynamic updates through existing AD replication.
Administering Windows Server 2012 Network Infrastructure & DNS Services 2
In Windows Server 2012, what does Windows Firewall with Advanced Security use to control network traffic?