Administering Windows Server 2012 Case Studies & Practical Application 4 — Questions and Answers
Question 1: After enabling auditing via Group Policy, an administrator notices that Security event logs fill up within hours and older events are overwritten. What should be configured to preserve audit data?
- Increase the Security log maximum size and set retention to 'Archive the log when full'
- Disable verbose auditing categories to reduce volume
- Configure log forwarding to a Windows Event Collector server
- Both A and C (Correct answer)
Correct answer: Both A and C
Increasing log size and archiving prevents overwrite, while forwarding logs to a central collector provides long-term retention and centralized analysis.
Question 2: A company uses a single-domain forest. A new acquisition requires a separate domain with its own administrators. The two domains must share resources. What should you create?
- A new forest with an external trust to the existing forest
- A child domain in the existing forest (Correct answer)
- A separate forest with a forest trust
- A stub zone in DNS
Correct answer: A child domain in the existing forest
Adding a child domain to the existing forest preserves the two-way transitive trust inherent to all domains within the same forest while allowing separate administrative boundaries.
Question 3: A web server running IIS on Windows Server 2012 must serve HTTPS only. An administrator installs a certificate but browsers still accept plain HTTP connections. What must be done?
- Enable HSTS in the HTTP response headers
- Remove the HTTP binding from the IIS site and add an HTTPS binding with the certificate
- Configure Windows Firewall to block inbound TCP port 80
- Both B and C (Correct answer)
Correct answer: Both B and C
Removing the HTTP binding prevents IIS from serving plain HTTP, and blocking port 80 in the firewall ensures no HTTP traffic reaches the server at all.
Question 4: A server's system drive is nearly full. An administrator finds a large Windows\WinSXS folder. What is the safest way to reclaim space from this folder on Windows Server 2012 R2?
- Manually delete files from WinSXS using an admin command prompt
- Run Disk Cleanup with the 'Clean up system files' option including Windows Update Cleanup
- Use DISM /online /cleanup-image /startcomponentcleanup
- Both B and C are safe approaches (Correct answer)
Correct answer: Both B and C are safe approaches
Both Disk Cleanup's Windows Update Cleanup and DISM's StartComponentCleanup safely remove superseded components from the component store.
Question 5: A Remote Desktop Services deployment has users complaining that their personalization settings reset after each session. Which RDS component stores user profile settings persistently across sessions?
- RD Gateway
- RD Web Access
- User Profile Disks (UPD) (Correct answer)
- RemoteFX
Correct answer: User Profile Disks (UPD)
User Profile Disks are VHD files stored on a network share that mount at logon, persisting user settings and data across RDS sessions.
Question 6: An administrator needs to prevent users from installing software on their workstations without affecting administrators. Which Group Policy feature is most appropriate?
- Software Restriction Policies set to Disallowed for all users
- AppLocker with rules scoped to the Users security group (Correct answer)
- UAC set to 'Always notify' via Default Domain Policy
- Removing local administrator rights from user accounts
Correct answer: AppLocker with rules scoped to the Users security group
AppLocker allows granular rules that restrict software execution for standard users while exempting administrators via group membership conditions.
Question 7: A DHCP server is handing out incorrect default gateway addresses to clients. After fixing the scope option, existing clients still use the wrong gateway. What is the fastest corrective action for existing clients?
- Restart the DHCP Server service
- Run ipconfig /release and ipconfig /renew on affected clients (Correct answer)
- Reduce the DHCP lease duration to force rapid renewal
- Delete and recreate the DHCP scope
Correct answer: Run ipconfig /release and ipconfig /renew on affected clients
Forcing a lease release and renewal on affected clients immediately requests a new lease with the corrected scope options.
Administering Windows Server 2012 Case Studies & Practical Application 4
After enabling auditing via Group Policy, an administrator notices that Security event logs fill up within hours and older events are overwritten.
What should be configured to preserve audit data?