Case Studies & Practical Application Flashcards

After enabling auditing via Group Policy, an administrator notices that Security event logs fill up within hours and older events are overwritten. What should be configured to preserve audit data?

Answer: Both A and C

Increasing log size and archiving prevents overwrite, while forwarding logs to a central collector provides long-term retention and centralized analysis.

A company uses a single-domain forest. A new acquisition requires a separate domain with its own administrators. The two domains must share resources. What should you create?

Answer: A child domain in the existing forest

Adding a child domain to the existing forest preserves the two-way transitive trust inherent to all domains within the same forest while allowing separate administrative boundaries.

A web server running IIS on Windows Server 2012 must serve HTTPS only. An administrator installs a certificate but browsers still accept plain HTTP connections. What must be done?

Answer: Both B and C

Removing the HTTP binding prevents IIS from serving plain HTTP, and blocking port 80 in the firewall ensures no HTTP traffic reaches the server at all.

A server's system drive is nearly full. An administrator finds a large Windows\WinSXS folder. What is the safest way to reclaim space from this folder on Windows Server 2012 R2?

Answer: Both B and C are safe approaches

Both Disk Cleanup's Windows Update Cleanup and DISM's StartComponentCleanup safely remove superseded components from the component store.

A Remote Desktop Services deployment has users complaining that their personalization settings reset after each session. Which RDS component stores user profile settings persistently across sessions?

Answer: User Profile Disks (UPD)

User Profile Disks are VHD files stored on a network share that mount at logon, persisting user settings and data across RDS sessions.

An administrator needs to prevent users from installing software on their workstations without affecting administrators. Which Group Policy feature is most appropriate?

Answer: AppLocker with rules scoped to the Users security group

AppLocker allows granular rules that restrict software execution for standard users while exempting administrators via group membership conditions.

A DHCP server is handing out incorrect default gateway addresses to clients. After fixing the scope option, existing clients still use the wrong gateway. What is the fastest corrective action for existing clients?

Answer: Run ipconfig /release and ipconfig /renew on affected clients

Forcing a lease release and renewal on affected clients immediately requests a new lease with the corrected scope options.