Administering Windows Server 2012 Administering Windows Certification Server 3 — Questions and Answers
Question 1: Which Windows Server 2012 role provides centralized authentication and authorization for remote access connections?
- DHCP Server
- Network Policy Server (NPS) (Correct answer)
- DNS Server
- File and Storage Services
Correct answer: Network Policy Server (NPS)
Network Policy Server acts as a RADIUS server to centrally manage network access authentication and authorization policies.
Question 2: What command is used to force an immediate Group Policy refresh on a Windows Server 2012 computer?
- gpupdate /force (Correct answer)
- gpresult /r
- secedit /refreshpolicy
- netsh gp refresh
Correct answer: gpupdate /force
gpupdate /force immediately reapplies all Group Policy settings, both user and computer, regardless of whether they have changed.
Question 3: A server administrator needs to delegate control of an OU to a junior admin so they can reset passwords but not create accounts. Which tool should be used?
- Active Directory Users and Computers – Delegation of Control Wizard (Correct answer)
- Group Policy Management Console
- Local Security Policy
- Active Directory Sites and Services
Correct answer: Active Directory Users and Computers – Delegation of Control Wizard
The Delegation of Control Wizard in ADUC allows granular permission assignment on specific OU tasks like password resets.
Question 4: Which Windows Server 2012 feature allows administrators to deploy, manage, and update virtual machines across multiple Hyper-V hosts?
- System Center Virtual Machine Manager
- Hyper-V Manager (Correct answer)
- Server Manager
- Remote Server Administration Tools
Correct answer: Hyper-V Manager
Hyper-V Manager is the built-in tool for managing virtual machines on local and remote Hyper-V hosts in Windows Server 2012.
Question 5: An administrator configures a new DHCP scope but clients are not receiving addresses. The DHCP server is authorized in AD. What is the most likely cause?
- The scope is not activated (Correct answer)
- The DHCP service is set to manual startup
- DNSSEC is blocking DHCP
- The subnet mask is incorrect
Correct answer: The scope is not activated
A DHCP scope must be both created and activated before the server will hand out addresses from that range.
Question 6: Which Windows Server 2012 technology enables read-only access to Active Directory data for branch office domain controllers to minimize security risk?
- Global Catalog Server
- Read-Only Domain Controller (RODC) (Correct answer)
- Active Directory Lightweight Directory Services
- Fine-Grained Password Policy
Correct answer: Read-Only Domain Controller (RODC)
RODCs host a read-only copy of the AD database, reducing the risk if a branch office DC is physically compromised.
Question 7: What is the default port number used by Remote Desktop Protocol (RDP) on Windows Server 2012?
- 22
- 80
- 3389 (Correct answer)
- 8080
Correct answer: 3389
RDP listens on TCP port 3389 by default for Remote Desktop connections on Windows Server 2012.
Administering Windows Server 2012 Administering Windows Certification Server 3
Which Windows Server 2012 role provides centralized authentication and authorization for remote access connections?