Microsoft 70-411: Administering Windows Server 2012 — Questions and Answers

Question 1: A server running Hyper-V has a virtual machine that requires more RAM than is physically available. The VM occasionally experiences performance issues. Which Hyper-V feature can help without adding physical RAM?

RemoteFX
VM Queue (VMQ)
Dynamic Memory (Correct answer)
Virtual NUMA

Correct answer: Dynamic Memory

Dynamic Memory allows Hyper-V to adjust the amount of RAM allocated to a VM at runtime based on workload demands.

Question 2: Your organization's risk assessment identifies that an unpatched Windows Server 2012 IIS vulnerability could be exploited. Which combination correctly maps the risk components?

Threat = unpatched server; Vulnerability = attacker; Risk = web server
Threat = attacker; Vulnerability = unpatched IIS; Risk = potential exploitation (Correct answer)
Threat = web server; Vulnerability = patch; Risk = attacker
Threat = IIS service; Vulnerability = network; Risk = patch

Correct answer: Threat = attacker; Vulnerability = unpatched IIS; Risk = potential exploitation

A threat (attacker) exploits a vulnerability (unpatched IIS) to create risk (potential exploitation of the system).

Question 3: For FERPA compliance, an educational institution wants file-level access control on student records stored on a Windows Server 2012 file share. Which feature enforces this?

BitLocker Network Unlock
BranchCache
Windows Server Backup
NTFS permissions and Access Control Lists (Correct answer)

Correct answer: NTFS permissions and Access Control Lists

NTFS permissions and ACLs control exactly which user accounts and groups can read, write, or modify files containing student records.

Question 4: Which Windows Server 2012 role enables federated identity across organizational boundaries so partner staff can access compliance portals without separate accounts?

Active Directory Certificate Services (AD CS)
Active Directory Lightweight Directory Services (AD LDS)
Active Directory Rights Management Services (AD RMS)
Active Directory Federation Services (AD FS) (Correct answer)

Correct answer: Active Directory Federation Services (AD FS)

AD FS enables federated SSO using claims-based identity, allowing partner organizations to authenticate with their own credentials across trust boundaries.

Question 5: When documenting Group Policy application for a research report, which tool shows the resultant set of policy applied to a specific user and computer?

Auditpol.exe
Gpupdate /force
Group Policy Management Console Modeling
Gpresult /H (Correct answer)

Correct answer: Gpresult /H

Gpresult /H generates an HTML report of the Resultant Set of Policy (RSoP) for the current or specified user/computer.

Question 6: Which PowerShell cmdlet is used to configure an IP address on a network adapter in Windows Server 2012?

New-NetIPAddress (Correct answer)
Add-IPConfig
Set-DNSClientServerAddress
Set-NetAdapter

Correct answer: New-NetIPAddress

New-NetIPAddress cmdlet assigns a static IP address to a specified network interface.

Question 7: What does the 'ipconfig /registerdns' command do on a Windows Server 2012 client?

Flushes the local DNS resolver cache
Displays all registered DNS entries
Forces re-registration of the client's DNS records with the DNS server (Correct answer)
Resets the TCP/IP stack

Correct answer: Forces re-registration of the client's DNS records with the DNS server

Running 'ipconfig /registerdns' triggers the DNS client to re-register its A (and PTR) records with the configured DNS server, useful after IP changes.

Question 8: Which Windows Server 2012 tool provides a graphical view of real-time CPU, disk, network, and memory usage broken down by process and service?

Performance Monitor
Resource Monitor (Correct answer)
Server Manager
Task Manager

Correct answer: Resource Monitor

Resource Monitor (resmon.exe) shows real-time resource usage per process, including disk I/O paths and network connections, in a single view.

Question 9: Under HIPAA, which Windows Server 2012 feature maintains an audit trail of who accessed files containing Protected Health Information (PHI)?

Windows Deployment Services
BitLocker Drive Encryption
Network Load Balancing
Object Access Auditing via Group Policy (Correct answer)

Correct answer: Object Access Auditing via Group Policy

Object Access Auditing in Group Policy records access to files and folders containing PHI, satisfying HIPAA audit control requirements.

Question 10: During a quality audit, you need to verify disk health on a Windows Server 2012 volume. Which built-in command checks and repairs file system errors without requiring a reboot when possible?

diskpart clean
format /q
defrag /u
chkdsk /f /r (Correct answer)

Correct answer: chkdsk /f /r

chkdsk /f /r locates bad sectors and recovers readable data; on live volumes it schedules the check on next boot.

Question 11: What tool in Windows Server 2012 provides a graphical view of network bandwidth usage and active connections in real time?

Network and Sharing Center
Event Viewer
Resource Monitor > Network tab (Correct answer)
Task Manager > Performance tab

Correct answer: Resource Monitor > Network tab

Resource Monitor's Network tab provides real-time data on per-process network activity, TCP connections, and listening ports on Windows Server 2012.

Question 12: An administrator needs to configure Windows Server 2012 to forward DNS queries for an external domain to a specific external DNS server. Which DNS feature accomplishes this?

Stub Zone
Secondary Zone
Conditional Forwarder (Correct answer)
Root Hints

Correct answer: Conditional Forwarder

Conditional Forwarders direct DNS queries for specific domain names to designated DNS servers rather than using standard resolution.

Question 13: A QA checklist requires confirming that Windows Server 2012 auditing is configured to log both successful and failed logon attempts. In which policy node is this configured?

Windows Settings > Scripts
Security Settings > Software Restriction Policies
Administrative Templates > System > Logon
Security Settings > Advanced Audit Policy Configuration > Logon/Logoff (Correct answer)

Correct answer: Security Settings > Advanced Audit Policy Configuration > Logon/Logoff

Advanced Audit Policy Configuration under Security Settings provides granular audit subcategories including Logon and Logoff success/failure.

Question 14: What type of DNS record maps a hostname to an IPv6 address in Windows Server 2012 DNS?

PTR
AAAA (Correct answer)
CNAME
A

Correct answer: AAAA

AAAA records (quad-A) map fully qualified domain names to 128-bit IPv6 addresses, while A records map to 32-bit IPv4 addresses.

Question 15: A QA team uses Windows Server 2012 WSUS to control update deployment. Which WSUS report type shows which computers have NOT yet installed an approved update?

Computer Detail Status report
Synchronization Results report
Update Status Summary report
Update Compliance by Computer Group (Correct answer)

Correct answer: Update Compliance by Computer Group

The Update Compliance by Computer Group report shows approval and installation status per group, identifying non-compliant machines.

Question 16: Which Windows Server 2012 tool runs a set of best-practice rules against server roles and reports configuration deviations?

Server Performance Advisor
Resource Monitor
Event Viewer
Best Practices Analyzer (BPA) (Correct answer)

Correct answer: Best Practices Analyzer (BPA)

Best Practices Analyzer (BPA) scans installed roles against Microsoft-defined best-practice rules and highlights deviations.

Question 17: You need to restrict which applications users can run on a Windows Server 2012 Remote Desktop Session Host. Which feature should you configure?

AppLocker (Correct answer)
Software Restriction Policies via MD5 hash
Windows Firewall with Advanced Security
BitLocker

Correct answer: AppLocker

AppLocker provides rule-based application control and is the recommended replacement for Software Restriction Policies on Server 2012.

Question 18: What is the purpose of a Read-Only Domain Controller (RODC) in Windows Server 2012?

Provide faster write operations
Synchronize time across the forest
Replace writable DCs in the main datacenter
Host AD DS in branch offices with limited physical security (Correct answer)

Correct answer: Host AD DS in branch offices with limited physical security

RODCs hold a read-only copy of the AD database and are designed for branch offices where physical security cannot be guaranteed.

Question 19: In Windows Server 2012, which tool is used to analyze server configuration against Microsoft best practices?

Best Practices Analyzer (BPA) (Correct answer)
Security Configuration Wizard
Windows Baseline Security Analyzer
Microsoft Assessment and Planning Toolkit

Correct answer: Best Practices Analyzer (BPA)

The Best Practices Analyzer (BPA) scans installed roles and compares the configuration against Microsoft best practices, reporting errors, warnings, and informational findings.

Question 20: To research intermittent network drops, an admin enables packet capture on Windows Server 2012. Which built-in command-line tool captures network traffic without installing third-party software?

tracert
ipconfig /all
netstat -a
netsh trace start (Correct answer)

Correct answer: netsh trace start

Netsh trace start captures live network traffic to an ETL file that can be analyzed in Microsoft Message Analyzer or converted to pcap.

Question 21: In Windows Server 2012, which DNS zone type is stored in Active Directory and replicated to all DNS-enabled domain controllers?

Stub zone
AD-integrated zone (Correct answer)
Primary zone (file-backed)
Secondary zone

Correct answer: AD-integrated zone

Active Directory-integrated zones store DNS data in the AD database, enabling multi-master replication and secure dynamic updates through existing AD replication.

Question 22: You need to capture performance data on a Windows Server 2012 server over a 24-hour period and review it later. Which tool should you use?

Event Viewer
Resource Monitor
Task Manager
Performance Monitor with a Data Collector Set (Correct answer)

Correct answer: Performance Monitor with a Data Collector Set

Data Collector Sets in Performance Monitor can schedule and log counters over extended periods for later analysis.

Question 23: A Windows Server 2012 Failover Cluster node fails and the cluster resources do not move to the surviving node. Cluster Validation passes on both nodes. What should you check first?

Whether the Cluster service is set to Automatic start on both nodes
The failover policy — maximum failures and period settings on the cluster role (Correct answer)
Whether both nodes are in the same Active Directory site
Whether Windows Firewall is blocking cluster heartbeat traffic

Correct answer: The failover policy — maximum failures and period settings on the cluster role

If the maximum failures threshold has been exceeded within the configured period, the cluster role will not fail over and will remain offline to prevent a failover loop.

Question 24: Which Windows Server 2012 feature allows administrators to switch between Server Core and full GUI without reinstalling?

Sysprep /generalize
Add/Remove Features in Server Manager (MinShell/Full GUI) (Correct answer)
Windows Deployment Services
Server Feature migration

Correct answer: Add/Remove Features in Server Manager (MinShell/Full GUI)

In Windows Server 2012, administrators can add or remove the GUI components (Server Graphical Shell) using Server Manager or PowerShell without reinstalling the OS.

Question 25: Which PowerShell cmdlet installs a Windows Server 2012 server role?

Add-WindowsComponent
Install-WindowsFeature (Correct answer)
Set-WindowsFeature
Enable-ServerRole

Correct answer: Install-WindowsFeature

Install-WindowsFeature is the PowerShell cmdlet used to install roles, role services, and features on Windows Server 2012, replacing the older Add-WindowsFeature from Server 2008.

Question 26: Which Windows Server 2012 Certificate Services configuration is required to issue S/MIME certificates for encrypted email compliance?

Network Device Enrollment Service (NDES)
Online Responder role service
Certificate Enrollment Web Service only
Active Directory Certificate Services with an Enterprise CA (Correct answer)

Correct answer: Active Directory Certificate Services with an Enterprise CA

An Enterprise CA integrated with AD can auto-enroll S/MIME certificates to users from templates, enabling compliant encrypted email.

Question 27: Which Windows Server 2012 feature allows an administrator to subscribe to events from multiple remote servers and consolidate them for centralized analysis?

Event Viewer Custom Views
Server Manager event alerts
Windows Event Forwarding (WEF) (Correct answer)
Task Scheduler event triggers

Correct answer: Windows Event Forwarding (WEF)

Windows Event Forwarding uses WinRM to collect events from remote computers into a Forwarded Events log on a collector server.

Question 28: For research on DNS query resolution failures, which DNS debug log must be enabled and where is it stored by default on Windows Server 2012?

System event log
Netsh trace ETL file
DNS debug logging enabled in DNS Manager; stored in %SystemRoot%\System32\dns\dns.log (Correct answer)
Application event log

Correct answer: DNS debug logging enabled in DNS Manager; stored in %SystemRoot%\System32\dns\dns.log

DNS Server debug logging is enabled via DNS Manager's server properties and writes to dns.log in the System32\dns folder.

Question 29: What Windows Server 2012 feature provides centralized monitoring and threshold-based alerts for server events?

BPA (Best Practices Analyzer)
Reliability and Performance Monitor with Data Collector Sets (Correct answer)
Event Subscriptions in Event Viewer
Windows Error Reporting

Correct answer: Reliability and Performance Monitor with Data Collector Sets

Performance Monitor with Data Collector Sets allows administrators to collect performance counters, set thresholds, and generate alerts when values exceed defined limits.

Microsoft 70-411: Administering Windows Server 2012

Validates skills for IT professionals administering Windows Server 2012 in an enterprise environment, covering Active Directory, network services, Group Policy, file/print services, and Network Policy Server infrastructure. Part of the MCSA: Windows Server 2012 certification pathway.

Questions

35 min

Time Limit

70%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds