Administering Windows Server 2012 Professional Standards & Competencies 3 — Questions and Answers
Question 1: An administrator needs to track which admin performed specific Active Directory modifications over the past week. Which Windows Server 2012 feature provides this accountability?
- AD DS Audit Policy with Directory Service Changes subcategory (Correct answer)
- DNS debug logging
- DHCP server audit log
- Netlogon debug log
Correct answer: AD DS Audit Policy with Directory Service Changes subcategory
Enabling the 'Audit Directory Service Changes' subcategory records what was changed, by whom, and the old and new values in the Security event log.
Question 2: A Windows Server 2012 administrator is following industry standards for password policy. According to best practices, which setting combination is most appropriate for a domain password policy?
- Minimum 12 characters, complexity enabled, 90-day maximum age (Correct answer)
- Minimum 4 characters, no complexity, no expiration
- Minimum 8 characters, no complexity, 30-day maximum age
- Minimum 6 characters, complexity enabled, no expiration
Correct answer: Minimum 12 characters, complexity enabled, 90-day maximum age
Industry best practices recommend long complex passwords with periodic rotation, with 12+ characters and complexity requirements as a strong baseline.
Question 3: When a server administrator leaves the organization, which immediate action best protects Windows Server 2012 Active Directory security?
- Disable the departing admin's account and reset all shared credentials they may have known (Correct answer)
- Delete the account immediately from Active Directory
- Transfer all group memberships to a new account before disabling
- Archive the account by moving it to a different OU
Correct answer: Disable the departing admin's account and reset all shared credentials they may have known
Disabling the account prevents immediate access while preserving audit trails, and resetting shared credentials closes any backdoor access they had.
Question 4: A compliance audit requires that all Windows Server 2012 systems have consistent security settings. Which tool allows an administrator to compare current server configurations against a security baseline?
- Security Configuration and Analysis MMC snap-in (Correct answer)
- Event Viewer Security log
- Resource Monitor
- Task Scheduler
Correct answer: Security Configuration and Analysis MMC snap-in
The Security Configuration and Analysis snap-in allows administrators to import a security template and compare it against the current system configuration.
Question 5: An administrator discovers that a colleague is sharing their domain admin credentials with other technicians to 'make things easier.' What is the correct professional response?
- Report the practice to management and recommend individual privileged accounts for each administrator (Correct answer)
- Accept the practice as it increases team efficiency
- Create additional admin accounts using the shared credentials before reporting
- Ignore the issue since it is a personnel matter, not a technical one
Correct answer: Report the practice to management and recommend individual privileged accounts for each administrator
Sharing privileged credentials violates security policies and eliminates individual accountability; reporting and correcting this is the professional and ethical response.
Question 6: A Windows Server 2012 administrator must maintain a server inventory. Which command-line tool exports detailed hardware and software configuration information that can be saved for documentation?
- systeminfo /fo csv > inventory.csv (Correct answer)
- netstat -a > inventory.csv
- ipconfig /all > inventory.csv
- tasklist /v > inventory.csv
Correct answer: systeminfo /fo csv > inventory.csv
The systeminfo command with /fo csv formats output as comma-separated values, making it easy to redirect to a file for inventory documentation.
Question 7: When planning Windows Server 2012 maintenance windows, which professional standard best protects service availability for end users?
- Scheduling maintenance during off-peak hours with advance user notification and a tested rollback plan (Correct answer)
- Performing all changes during business hours for immediate support coverage
- Making configuration changes incrementally throughout the day without notification
- Applying all pending changes simultaneously to minimize total downtime windows
Correct answer: Scheduling maintenance during off-peak hours with advance user notification and a tested rollback plan
Off-peak scheduling minimizes user impact, advance notification sets expectations, and rollback plans ensure recovery if changes cause issues.
Administering Windows Server 2012 Professional Standards & Competencies 3
An administrator needs to track which admin performed specific Active Directory modifications over the past week.
Which Windows Server 2012 feature provides this accountability?