Microsoft 70-411: Administering Windows Server 2012 — Questions and Answers

Question 1: A server administrator needs to configure a Windows Server 2012 server to automatically restart failed services. Which feature should be used?

Task Scheduler
Event Viewer Triggers
Server Manager Alerts
Service Recovery Actions (Correct answer)

Correct answer: Service Recovery Actions

Service Recovery Actions in the service Properties dialog allow you to configure automatic restart, program execution, or computer reboot on service failure.

Question 2: How do Administering Windows Server 2012 professionals evaluate research quality?

By publication date only
By the reputation of the author only
By assessing methodology, sample size, peer review status, and relevance to practice (Correct answer)
Research quality cannot be evaluated

Correct answer: By assessing methodology, sample size, peer review status, and relevance to practice

This is fundamental to Administering Windows Server 2012 practice. By assessing methodology, sample size, peer review status, and relevance to practice represents the professional standard for research in the Administering Windows Server 2012 certification framework.

Question 3: What is the purpose of Managed Service Accounts (MSAs) introduced in Windows Server 2012?

Provide automatic password management and SPN registration for services (Correct answer)
Delegate admin rights to service desk staff
Enable smart card authentication for services
Manage user home folders automatically

Correct answer: Provide automatic password management and SPN registration for services

Managed Service Accounts provide automatic password rotation and SPN management, eliminating the need to manually manage service account credentials.

Question 4: How do Administering Windows Server 2012 professionals establish measurable quality objectives?

Using vague goals
By comparing to competitors only
By defining specific, measurable, achievable, relevant, and time-bound quality targets (Correct answer)
Through subjective assessment

Correct answer: By defining specific, measurable, achievable, relevant, and time-bound quality targets

This is fundamental to Administering Windows Server 2012 practice. By defining specific, measurable, achievable, relevant, and time-bound quality targets represents the professional standard for quality in the Administering Windows Server 2012 certification framework.

Question 5: In a Windows Server 2012 environment, what is the default lease duration for a DHCP scope?

3 days
1 day
8 days (Correct answer)
7 days

Correct answer: 8 days

The default DHCP lease duration in Windows Server 2012 is 8 days, after which clients must renew their IP address lease.

Question 6: What role does data analytics play in Administering Windows Server 2012 practice?

It supports evidence-based decision making by identifying patterns and trends in relevant data (Correct answer)
It is only for IT professionals
It replaces professional judgment
It creates unnecessary complexity

Correct answer: It supports evidence-based decision making by identifying patterns and trends in relevant data

This is fundamental to Administering Windows Server 2012 practice. It supports evidence-based decision making by identifying patterns and trends in relevant data represents the professional standard for technology in the Administering Windows Server 2012 certification framework.

Question 7: How do Administering Windows Server 2012 professionals contribute to advancing their field?

By competing with colleagues
By maintaining current practices
Individual contribution is not possible
By conducting research, sharing outcomes, mentoring others, and participating in professional forums (Correct answer)

Correct answer: By conducting research, sharing outcomes, mentoring others, and participating in professional forums

This is fundamental to Administering Windows Server 2012 practice. By conducting research, sharing outcomes, mentoring others, and participating in professional forums represents the professional standard for research in the Administering Windows Server 2012 certification framework.

Question 8: In Windows Server 2012, which tool is used to analyze server configuration against Microsoft best practices?

Security Configuration Wizard
Microsoft Assessment and Planning Toolkit
Best Practices Analyzer (BPA) (Correct answer)
Windows Baseline Security Analyzer

Correct answer: Best Practices Analyzer (BPA)

The Best Practices Analyzer (BPA) scans installed roles and compares the configuration against Microsoft best practices, reporting errors, warnings, and informational findings.

Question 9: An administrator wants a GPO setting to take effect immediately without waiting for the standard refresh interval. Which command should be run?

gpedit /refresh
gpresult /force
secedit /refreshpolicy
gpupdate /force (Correct answer)

Correct answer: gpupdate /force

The gpupdate /force command forces an immediate refresh of all Group Policy settings on the local computer, bypassing the normal refresh interval.

Question 10: Which Windows Server 2012 role enables federated identity across organizational boundaries so partner staff can access compliance portals without separate accounts?

Active Directory Rights Management Services (AD RMS)
Active Directory Federation Services (AD FS) (Correct answer)
Active Directory Certificate Services (AD CS)
Active Directory Lightweight Directory Services (AD LDS)

Correct answer: Active Directory Federation Services (AD FS)

AD FS enables federated SSO using claims-based identity, allowing partner organizations to authenticate with their own credentials across trust boundaries.

Question 11: Which Windows Server 2012 feature allows administrators to switch between Server Core and full GUI without reinstalling?

Add/Remove Features in Server Manager (MinShell/Full GUI) (Correct answer)
Windows Deployment Services
Sysprep /generalize
Server Feature migration

Correct answer: Add/Remove Features in Server Manager (MinShell/Full GUI)

In Windows Server 2012, administrators can add or remove the GUI components (Server Graphical Shell) using Server Manager or PowerShell without reinstalling the OS.

Question 12: In Windows Server 2012, what is IPAM used for?

Managing Internet proxy settings
Configuring IPsec tunnels
Centrally monitoring and managing IP address space, DHCP, and DNS (Correct answer)
Auditing IP-level firewall rules

Correct answer: Centrally monitoring and managing IP address space, DHCP, and DNS

IP Address Management (IPAM) provides a centralized framework for monitoring, auditing, and managing the IP address space along with associated DHCP and DNS infrastructure.

Question 13: How should an Administering Windows Server 2012 professional respond to a compliance violation?

Blame the regulatory framework
Wait for an external audit to find it
Report it promptly, investigate the root cause, and implement corrective actions (Correct answer)
Conceal it if minor

Correct answer: Report it promptly, investigate the root cause, and implement corrective actions

This is fundamental to Administering Windows Server 2012 practice. Report it promptly, investigate the root cause, and implement corrective actions represents the professional standard for regulatory in the Administering Windows Server 2012 certification framework.

Question 14: In Windows Server 2012 DNS, what is the purpose of a stub zone?

Store only the SOA, NS, and A records of an authoritative zone to resolve names in that zone (Correct answer)
Block DNS queries from external clients
Provide secondary DNS for a zone
Cache all DNS records for a zone

Correct answer: Store only the SOA, NS, and A records of an authoritative zone to resolve names in that zone

A stub zone contains only the SOA record, NS records, and A records for the zone's name servers, helping DNS servers locate authoritative servers for a zone.

Question 15: Which Windows Server 2012 feature allows administrators to preview the effect of a Group Policy Object before applying it?

Security Configuration Wizard
Group Policy Results
Resultant Set of Policy
Group Policy Modeling (Correct answer)

Correct answer: Group Policy Modeling

Group Policy Modeling simulates the effect of GPOs on users and computers before actual deployment, allowing administrators to preview policy application.

Question 16: Which Windows Server 2012 component provides a way to deploy and manage web applications using a standardized hosting platform?

Application Server role
Web Application Proxy
Windows Process Activation Service
Internet Information Services (IIS) 8.0 (Correct answer)

Correct answer: Internet Information Services (IIS) 8.0

IIS 8.0 in Windows Server 2012 provides enhanced features including SNI for SSL, CPU throttling, and application initialization.

Question 17: You need to capture performance data on a Windows Server 2012 server over a 24-hour period and review it later. Which tool should you use?

Event Viewer
Resource Monitor
Performance Monitor with a Data Collector Set (Correct answer)
Task Manager

Correct answer: Performance Monitor with a Data Collector Set

Data Collector Sets in Performance Monitor can schedule and log counters over extended periods for later analysis.

Question 18: What tool in Windows Server 2012 provides a graphical view of network bandwidth usage and active connections in real time?

Task Manager > Performance tab
Event Viewer
Network and Sharing Center
Resource Monitor > Network tab (Correct answer)

Correct answer: Resource Monitor > Network tab

Resource Monitor's Network tab provides real-time data on per-process network activity, TCP connections, and listening ports on Windows Server 2012.

Question 19: A Windows Server 2012 server hosts several websites on IIS. After a configuration change, one site returns HTTP 503 errors. What is the most likely cause?

The site's IP binding conflicts with another site
The website's SSL certificate has expired
Windows Firewall is blocking port 80
The application pool associated with the site has stopped (Correct answer)

Correct answer: The application pool associated with the site has stopped

HTTP 503 Service Unavailable typically means the application pool serving the site has crashed or been stopped.

Question 20: What is a risk mitigation strategy in Administering Windows Server 2012 practice?

Only addressing risks after they occur
Ignoring low-probability risks
Implementing controls that reduce the likelihood or impact of identified risks (Correct answer)
Transferring all responsibility

Correct answer: Implementing controls that reduce the likelihood or impact of identified risks

This is fundamental to Administering Windows Server 2012 practice. Implementing controls that reduce the likelihood or impact of identified risks represents the professional standard for risk management in the Administering Windows Server 2012 certification framework.

Question 21: Which Windows Server 2012 feature reduces storage consumption by eliminating duplicate copies of data on a volume?

Compression via NTFS
Storage tiering
Thin provisioning
Data Deduplication (Correct answer)

Correct answer: Data Deduplication

Data Deduplication in Windows Server 2012 identifies and removes redundant data chunks, storing a single copy while maintaining pointers, significantly reducing storage usage for file servers and VDI.

Question 22: In Windows Server 2012 DNS, what is DNSSEC used for?

Digitally signing DNS records to ensure their authenticity and integrity (Correct answer)
Hiding DNS zone data from external queries
Encrypting DNS zone transfers
Compressing DNS responses for faster delivery

Correct answer: Digitally signing DNS records to ensure their authenticity and integrity

DNSSEC adds digital signatures to DNS records so resolvers can verify the data has not been tampered with, protecting against cache poisoning attacks.

Question 23: A user reports they cannot log in after their password expired. The Help Desk needs to unlock their account immediately. Which tool provides the fastest resolution?

Local Security Policy
Group Policy Management Console
Active Directory Users and Computers (Correct answer)
Computer Management MMC

Correct answer: Active Directory Users and Computers

Active Directory Users and Computers (ADUC) allows administrators to quickly unlock accounts and reset passwords.

Question 24: For PCI DSS compliance, which remote access protocol should be DISABLED on Windows Server 2012 because it transmits credentials in cleartext?

HTTPS
SFTP
Telnet (Correct answer)
SNMPv3

Correct answer: Telnet

Telnet transmits all data including credentials in cleartext and violates PCI DSS Requirement 2.2.7, which mandates encrypted administration.

Question 25: Why is evidence-based practice important in Administering Windows Server 2012?

It only applies to academic settings
It replaces experience
It integrates best available evidence with professional expertise for optimal outcomes (Correct answer)
It is a theoretical concept only

Correct answer: It integrates best available evidence with professional expertise for optimal outcomes

This is fundamental to Administering Windows Server 2012 practice. It integrates best available evidence with professional expertise for optimal outcomes represents the professional standard for research in the Administering Windows Server 2012 certification framework.

Question 26: An organization wants to allow external users to access internal web applications securely without a VPN. Which Windows Server 2012 role is designed for this purpose?

DirectAccess
Remote Desktop Gateway
Network Policy Server
Web Application Proxy (Correct answer)

Correct answer: Web Application Proxy

Web Application Proxy (WAP) is a Remote Access role service that publishes internal applications externally with pre-authentication via AD FS.

Question 27: Which command-line tool in Windows Server 2012 allows you to query and modify Active Directory objects from the command prompt?

dcdiag
dsquery / dsmod (Correct answer)
nltest
netdom

Correct answer: dsquery / dsmod

Dsquery finds AD objects matching criteria, and dsmod modifies their attributes, both from the command line.

Question 28: A Windows Server 2012 administrator needs to configure shared storage accessible by all nodes in a Failover Cluster. Which storage type is NOT supported for cluster shared volumes?

USB-attached external drive (Correct answer)
iSCSI SAN
SMB 3.0 file share
Fibre Channel SAN

Correct answer: USB-attached external drive

USB-attached drives are local to a single node and cannot be shared across cluster nodes, making them unsupported for cluster shared volumes.

Question 29: Which Windows Server 2012 role provides automatic IP address assignment and management to network clients?

DNS Server
DHCP Server (Correct answer)
Routing and Remote Access
IPAM

Correct answer: DHCP Server

The DHCP Server role automatically assigns IP addresses, subnet masks, default gateways, and DNS server addresses to network clients.

Question 30: What is a corrective action in Administering Windows Server 2012 quality systems?

Temporary workarounds only
Ignoring minor issues
Blaming individuals for errors
A systematic response to eliminate the cause of a detected nonconformity and prevent recurrence (Correct answer)

Correct answer: A systematic response to eliminate the cause of a detected nonconformity and prevent recurrence

This is fundamental to Administering Windows Server 2012 practice. A systematic response to eliminate the cause of a detected nonconformity and prevent recurrence represents the professional standard for quality in the Administering Windows Server 2012 certification framework.

Question 31: Which Hyper-V virtual switch type in Windows Server 2012 allows VMs to communicate only with each other and not with the host or external network?

Internal virtual switch
NAT virtual switch
External virtual switch
Private virtual switch (Correct answer)

Correct answer: Private virtual switch

A Private virtual switch isolates VMs from the host and all external networks, allowing only VM-to-VM communication on the same private switch.

Question 32: You have the option of installing Windows Server 2012 with Server Core Installation or a Server with a GUI. <br> Which choice would lower the servicing needs and potential attack surface?

Server Core Installation (Correct answer)
Server with a GUI
Both of the above
None of the above

Correct answer: Server Core Installation

Explanation: <br> The Full installation option present in Windows Server 2008 R2 is identical to the "Server with a GUI" option offered in Windows 8. We advise selecting the "Server Core Installation" option unless you have a specific need for the extra user interface components and graphical management tools that are included in the "Server with a GUI" option. This is because the "Server Core Installation" option reduces the amount of disk space required, the potential attack surface, and especially the servicing requirements.

Question 33: How has digital technology transformed Administering Windows Server 2012 practice?

It has had no impact
It only affects large organizations
It has replaced all traditional methods
It has enhanced data collection, analysis, communication, and operational efficiency (Correct answer)

Correct answer: It has enhanced data collection, analysis, communication, and operational efficiency

This is fundamental to Administering Windows Server 2012 practice. It has enhanced data collection, analysis, communication, and operational efficiency represents the professional standard for technology in the Administering Windows Server 2012 certification framework.

Question 34: How should Administering Windows Server 2012 professionals apply research findings to practice?

Ignore research that contradicts experience
Implement immediately without evaluation
Critically evaluate applicability, adapt to context, and monitor outcomes (Correct answer)
Only follow systematic reviews

Correct answer: Critically evaluate applicability, adapt to context, and monitor outcomes

This is fundamental to Administering Windows Server 2012 practice. Critically evaluate applicability, adapt to context, and monitor outcomes represents the professional standard for research in the Administering Windows Server 2012 certification framework.

Question 35: A Windows Server 2012 administrator needs to allow remote management of servers without enabling full Remote Desktop. Which feature should they use?

Remote Assistance
Windows Remote Management (WinRM) (Correct answer)
Telnet Server
Remote Registry

Correct answer: Windows Remote Management (WinRM)

WinRM enables remote PowerShell and Server Manager connectivity without requiring a full graphical RDP session.

Question 36: What type of DNS record maps a hostname to an IPv6 address in Windows Server 2012 DNS?

PTR
CNAME
A
AAAA (Correct answer)

Correct answer: AAAA

AAAA records (quad-A) map fully qualified domain names to 128-bit IPv6 addresses, while A records map to 32-bit IPv4 addresses.

Question 37: Which Windows Server 2012 feature allows you to create a virtual hard disk (VHD) that grows in size only as data is written to it?

Fixed-size VHD
Pass-through disk
Differencing VHD
Dynamically expanding VHD (Correct answer)

Correct answer: Dynamically expanding VHD

A dynamically expanding VHD starts small and grows on-disk as data is written, up to its maximum defined size, saving storage space when the disk is not fully utilized.

Question 38: How does continuous improvement apply to Administering Windows Server 2012 quality management?

It involves ongoing incremental enhancements to processes based on data and feedback (Correct answer)
It means constant major changes
It applies only to products
It is a one-time initiative

Correct answer: It involves ongoing incremental enhancements to processes based on data and feedback

This is fundamental to Administering Windows Server 2012 practice. It involves ongoing incremental enhancements to processes based on data and feedback represents the professional standard for quality in the Administering Windows Server 2012 certification framework.

Question 39: In Windows Server 2012, what does Windows Firewall with Advanced Security use to control network traffic?

Inbound and outbound rules based on port, protocol, and application (Correct answer)
VLAN tagging
MAC address filtering only
Proxy rules

Correct answer: Inbound and outbound rules based on port, protocol, and application

Windows Firewall with Advanced Security uses granular inbound and outbound rules that can filter traffic by port, protocol, application, service, and IP address.

Question 40: Which Windows Server 2012 feature allows administrators to implement Quality of Service (QoS) policies on network traffic?

Network Load Balancing
Network Access Protection
Policy-based QoS via Group Policy (Correct answer)
VLAN trunking

Correct answer: Policy-based QoS via Group Policy

Policy-based QoS in Windows Server 2012 uses Group Policy to assign DSCP values and throttle bandwidth for specific applications or traffic flows.

Question 41: In Windows Server 2012, what is the Windows Server Core installation option?

A minimal installation without a GUI, managed via command line and PowerShell (Correct answer)
A read-only installation for testing only
An installation that only runs Hyper-V
A stripped-down version with no networking

Correct answer: A minimal installation without a GUI, managed via command line and PowerShell

Server Core provides a minimal Windows Server installation without the full graphical shell, reducing attack surface, resource usage, and requiring fewer updates.

Question 42: What is the purpose of a quality audit in Administering Windows Server 2012 practice?

To systematically evaluate processes against standards and identify improvement opportunities (Correct answer)
To satisfy external requirements only
To reduce staffing
To find fault with employees

Correct answer: To systematically evaluate processes against standards and identify improvement opportunities

This is fundamental to Administering Windows Server 2012 practice. To systematically evaluate processes against standards and identify improvement opportunities represents the professional standard for quality in the Administering Windows Server 2012 certification framework.

Question 43: A PCI DSS audit requires evidence that default vendor accounts were addressed on Windows Server 2012. Which built-in account must be renamed or disabled per PCI DSS Requirement 2.1?

Guest
Administrator (Correct answer)
Network Service
Local Service

Correct answer: Administrator

The built-in Administrator account has a well-known name and should be renamed or disabled per PCI DSS Requirement 2.1 to prevent targeted brute force attacks.

Question 44: A Windows Server 2012 Failover Cluster node fails and the cluster resources do not move to the surviving node. Cluster Validation passes on both nodes. What should you check first?

Whether the Cluster service is set to Automatic start on both nodes
Whether Windows Firewall is blocking cluster heartbeat traffic
Whether both nodes are in the same Active Directory site
The failover policy — maximum failures and period settings on the cluster role (Correct answer)

Correct answer: The failover policy — maximum failures and period settings on the cluster role

If the maximum failures threshold has been exceeded within the configured period, the cluster role will not fail over and will remain offline to prevent a failover loop.

Question 45: What is the default tombstone lifetime for deleted objects in Active Directory on Windows Server 2012?

30 days
180 days
60 days
90 days (Correct answer)

Correct answer: 90 days

The default tombstone lifetime in Windows Server 2012 Active Directory is 180 days, allowing deleted objects to be recovered within that window.

Question 46: How do Administering Windows Server 2012 professionals transfer knowledge from training to practice?

Training and practice are unrelated
Through supervised practice, mentoring, gradual independence, and ongoing feedback (Correct answer)
Knowledge transfers automatically
By passing the certification exam only

Correct answer: Through supervised practice, mentoring, gradual independence, and ongoing feedback

This is fundamental to Administering Windows Server 2012 practice. Through supervised practice, mentoring, gradual independence, and ongoing feedback represents the professional standard for practical in the Administering Windows Server 2012 certification framework.

Question 47: What distinguishes quality assurance from quality control in Administering Windows Server 2012 practice?

QA focuses on preventing defects through process improvement while QC detects defects through inspection (Correct answer)
They are identical concepts
QC is more important than QA
QA applies only to manufacturing

Correct answer: QA focuses on preventing defects through process improvement while QC detects defects through inspection

This is fundamental to Administering Windows Server 2012 practice. QA focuses on preventing defects through process improvement while QC detects defects through inspection represents the professional standard for quality in the Administering Windows Server 2012 certification framework.

Question 48: What is the default Group Policy refresh interval for domain computers in Windows Server 2012?

90 minutes (Correct answer)
120 minutes
15 minutes
30 minutes

Correct answer: 90 minutes

The default Group Policy refresh interval for domain member computers is 90 minutes, with a random offset of 0-30 minutes to prevent network flooding.

Question 49: What Windows Server 2012 Server Manager feature allows you to manage multiple remote servers from a single console?

Microsoft Management Console (MMC)
Multi-Server Management in Server Manager (Correct answer)
Windows Remote Management (WinRM) only
Remote Desktop Services

Correct answer: Multi-Server Management in Server Manager

Server Manager in Windows Server 2012 supports multi-server management, allowing administrators to add and manage multiple remote servers from a single dashboard.

Question 50: What distinguishes a peer-reviewed study in Administering Windows Server 2012 literature?

It was published in any format
Independent experts in the field evaluated the methodology and conclusions before publication (Correct answer)
It was published quickly
It was written by multiple authors

Correct answer: Independent experts in the field evaluated the methodology and conclusions before publication

This is fundamental to Administering Windows Server 2012 practice. Independent experts in the field evaluated the methodology and conclusions before publication represents the professional standard for research in the Administering Windows Server 2012 certification framework.

Question 51: Which tool is commonly used for root cause analysis in Administering Windows Server 2012 quality management?

Customer surveys only
Fishbone (Ishikawa) diagram to identify contributing factors systematically (Correct answer)
Random sampling
Profit analysis

Correct answer: Fishbone (Ishikawa) diagram to identify contributing factors systematically

This is fundamental to Administering Windows Server 2012 practice. Fishbone (Ishikawa) diagram to identify contributing factors systematically represents the professional standard for quality in the Administering Windows Server 2012 certification framework.

Question 52: Which PowerShell cmdlet installs a Windows Server 2012 server role?

Enable-ServerRole
Set-WindowsFeature
Install-WindowsFeature (Correct answer)
Add-WindowsComponent

Correct answer: Install-WindowsFeature

Install-WindowsFeature is the PowerShell cmdlet used to install roles, role services, and features on Windows Server 2012, replacing the older Add-WindowsFeature from Server 2008.

Question 53: What is the role of professional journals in Administering Windows Server 2012 practice?

They are outdated by publication time
They are optional reading
They only benefit academics
They disseminate current research, best practices, and professional developments (Correct answer)

Correct answer: They disseminate current research, best practices, and professional developments

This is fundamental to Administering Windows Server 2012 practice. They disseminate current research, best practices, and professional developments represents the professional standard for research in the Administering Windows Server 2012 certification framework.

Question 54: What is the primary purpose of regulatory compliance in Administering Windows Server 2012 practice?

To benefit regulators only
To create bureaucratic burden
To limit competition
To protect public safety, ensure quality standards, and maintain professional accountability (Correct answer)

Correct answer: To protect public safety, ensure quality standards, and maintain professional accountability

This is fundamental to Administering Windows Server 2012 practice. To protect public safety, ensure quality standards, and maintain professional accountability represents the professional standard for regulatory in the Administering Windows Server 2012 certification framework.

Question 55: Which cmdlet is used to view all currently running services on a Windows Server 2012 system via PowerShell?

Get-Process
List-Service
Get-Service (Correct answer)
Show-Service

Correct answer: Get-Service

Get-Service retrieves the status of services on a local or remote computer.

Microsoft 70-411: Administering Windows Server 2012

Validates skills for IT professionals administering Windows Server 2012 in an enterprise environment, covering Active Directory, network services, Group Policy, file/print services, and Network Policy Server infrastructure. Part of the MCSA: Windows Server 2012 certification pathway.

Questions

120 min

Time Limit

70%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds

These practice questions were written with AI tools. They are not real exam questions. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy

Sources & references

Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy

home.pearsonvue.com — Test delivery · verified Nov 2026
learn.microsoft.com — Retake policy, passing score, score release, renewal, score validity, eligibility · verified Nov 2026