Administering Windows Server 2012 Professional Standards & Competencies 4 — Questions and Answers
Question 1: A Windows Server 2012 administrator is tasked with ensuring servers meet the organization's security baseline. Which Microsoft tool provides predefined security configuration templates for Windows Server roles?
- Microsoft Security Compliance Manager (SCM) (Correct answer)
- Windows Assessment and Deployment Kit (ADK)
- Remote Server Administration Tools (RSAT)
- Windows Deployment Services (WDS)
Correct answer: Microsoft Security Compliance Manager (SCM)
The Microsoft Security Compliance Manager provides baseline templates aligned with Microsoft and industry security standards for various Windows Server roles.
Question 2: During a security review, an auditor asks how the organization ensures Windows Server 2012 patches are applied consistently. Which tool provides centralized patch management reporting across the environment?
- Windows Server Update Services (WSUS) with compliance reports (Correct answer)
- Windows Event Forwarding only
- Task Scheduler on each individual server
- Manual review of Windows Update history on each server
Correct answer: Windows Server Update Services (WSUS) with compliance reports
WSUS provides centralized update management with built-in compliance reports showing patch status across all managed systems.
Question 3: A Windows Server 2012 administrator must ensure that sensitive configuration data in scripts and automation tools is protected. Which practice aligns with professional security standards?
- Store credentials in encrypted credential stores or use service accounts with minimal permissions (Correct answer)
- Embed plaintext passwords directly in PowerShell scripts for reliability
- Save all passwords in a shared text file on a network drive
- Use the same password for all service accounts to simplify management
Correct answer: Store credentials in encrypted credential stores or use service accounts with minimal permissions
Credential stores (like Windows Credential Manager or encrypted vaults) protect secrets at rest, while minimal-permission service accounts reduce breach impact.
Question 4: An IT manager asks an administrator to establish an SLA for server uptime. The admin needs to calculate current uptime for a Windows Server 2012 system. Which command quickly shows how long the server has been running?
- net statistics server (Correct answer)
- ipconfig /all
- netstat -s
- arp -a
Correct answer: net statistics server
The 'net statistics server' command displays server statistics including the time the server was started, allowing uptime calculation.
Question 5: A Windows Server 2012 administrator needs to establish a backup verification procedure. Which professional best practice ensures backups are actually usable when needed?
- Perform regular test restores to verify backup integrity and recoverability (Correct answer)
- Check only that backup jobs complete without errors in the log
- Store backups on the same server to ensure fast access
- Verify backup file size has increased compared to the previous backup
Correct answer: Perform regular test restores to verify backup integrity and recoverability
Backup completion without errors does not guarantee recoverability; only actual test restores confirm that data can be successfully recovered.
Question 6: When handling a suspected security breach on a Windows Server 2012 system, which initial response aligns with incident response best practices?
- Isolate the affected system from the network while preserving volatile evidence before changes are made (Correct answer)
- Immediately reimage the server to restore normal operations as quickly as possible
- Delete suspicious files and continue operating to avoid business disruption
- Notify all users about the breach details via company-wide email immediately
Correct answer: Isolate the affected system from the network while preserving volatile evidence before changes are made
Isolation prevents further compromise while evidence preservation (memory dumps, logs) supports forensic investigation and root cause analysis.
Question 7: An organization requires that all Windows Server 2012 administrative actions be logged for a 1-year retention period. Where should event logs be configured to ensure this requirement is met?
- Configure centralized event log forwarding to a dedicated log server with sufficient storage retention (Correct answer)
- Increase the maximum log size on each individual server's Event Viewer settings
- Export logs manually each month and store in a shared folder
- Rely on Windows Server Backup to preserve event logs
Correct answer: Configure centralized event log forwarding to a dedicated log server with sufficient storage retention
Centralized log forwarding with a dedicated SIEM or log server ensures logs are preserved even if individual servers are reimaged or decommissioned.
Administering Windows Server 2012 Professional Standards & Competencies 4
A Windows Server 2012 administrator is tasked with ensuring servers meet the organization's security baseline.
Which Microsoft tool provides predefined security configuration templates for Windows Server roles?