Administering Windows Server 2012 Administering Windows Server 4 — Questions and Answers
Question 1: A scheduled task on a Windows Server 2012 server runs successfully when triggered manually but fails when scheduled. What is the most likely cause?
- The service account running the task lacks the required permissions or 'Log on as a batch job' right (Correct answer)
- The Task Scheduler service is disabled
- The task's trigger interval is set too low
- The server's time zone is misconfigured
Correct answer: The service account running the task lacks the required permissions or 'Log on as a batch job' right
Scheduled tasks running under a service account require that account to have the 'Log on as a batch job' user right and appropriate file system permissions.
Question 2: You need to restrict which applications users can run on a Windows Server 2012 Remote Desktop Session Host. Which feature should you configure?
- AppLocker (Correct answer)
- BitLocker
- Windows Firewall with Advanced Security
- Software Restriction Policies via MD5 hash
Correct answer: AppLocker
AppLocker provides rule-based application control and is the recommended replacement for Software Restriction Policies on Server 2012.
Question 3: Which Windows Server 2012 role service allows remote users to access internal web applications through a browser without a VPN client?
- Web Application Proxy (part of AD FS) (Correct answer)
- Remote Desktop Gateway
- DirectAccess
- Routing and Remote Access (RRAS)
Correct answer: Web Application Proxy (part of AD FS)
Web Application Proxy publishes internal applications externally and can pre-authenticate users via AD FS before granting access.
Question 4: After promoting a Windows Server 2012 server to a domain controller, which partition in Active Directory stores information about all objects in the domain?
- Domain partition (Correct answer)
- Schema partition
- Configuration partition
- Application partition
Correct answer: Domain partition
The domain partition holds all domain-specific objects such as users, computers, and groups, and is replicated only to DCs in the same domain.
Question 5: You want to prevent users from installing printers on a Windows Server 2012 Remote Desktop Server. Which GPO setting should you configure?
- Prevent users from installing printer drivers (Computer Configuration > Policies > Windows Settings > Security Settings)
- Disable the Print Spooler service via Group Policy Preferences
- Set 'Do not allow client printer redirection' in RDS settings (Correct answer)
- Remove users from the local Power Users group
Correct answer: Set 'Do not allow client printer redirection' in RDS settings
The RDS policy 'Do not allow client printer redirection' prevents client-side printers from being mapped into Remote Desktop sessions.
Question 6: Which Windows Server 2012 command verifies the integrity of system files and replaces corrupted files from a cached copy?
- sfc /scannow (Correct answer)
- chkdsk /f
- dism /online /cleanup-image /restorehealth
- bcdedit /fixboot
Correct answer: sfc /scannow
System File Checker (sfc /scannow) scans all protected system files and restores incorrect versions from the Windows component store.
Question 7: A Windows Server 2012 administrator needs to allow a specific application through the firewall only on the domain profile. Where is this configured?
- Windows Firewall with Advanced Security — Inbound Rules with profile set to Domain (Correct answer)
- Network and Sharing Center — Advanced sharing settings
- Local Group Policy — Software Restriction Policies
- Server Manager — Local Server properties
Correct answer: Windows Firewall with Advanced Security — Inbound Rules with profile set to Domain
Windows Firewall with Advanced Security lets you create rules that apply only to the Domain, Private, or Public network profile independently.
Administering Windows Server 2012 Administering Windows Server 4
A scheduled task on a Windows Server 2012 server runs successfully when triggered manually but fails when scheduled.
What is the most likely cause?