FREE Administering Windows Server 2012 Question and Answers
Windows 2012 R2 is installed on the machine you own. The owner password (owner authorization) for the computer's Trusted Platform Module (TPM) is thought to have been compromised. You wish to prevent unauthorized users from making administrative modifications to the TPM. In order to secure the computer's operating system and data storage, BitLocker Data Encryption (BDE) is utilized. You don't want to lose any computer data or invalidate the current keys.
What course of action would you take?
Explanation:
The TPM is initialized and given ownership by Windows automatically. In contrast to earlier operating systems, which required you to initialize the TPM and set an owner password.
You are an Active Directory Domain Services (AD DS) domain administrator for a corporation. Corp.net is the name of the domain. Two domain controllers running Microsoft Windows Server 2012 R2 are DC1 and DC2. You need to back up SYSVOL and the AD database before you can perform maintenance on DC1. You should create a backup file that is as compact as possible and upload it to a network shared folder.
What course of action will you take next? (There may be more than one right response; select the BEST response.)
Explanation:
The local computer's system state is backed up and stored in the location selected.
You are employed by a business that manages a network with just one Active Directory domain. Microsoft Windows Server 2012 R2 is installed on every server in the network. All client machines use Windows 8.1. The marketing staff frequently travels and needs mobile access to the company's network. By setting up a Network Policy Server (NPS) and turning on the Routing and Remote Access role service on the server, you can connect remote users to a virtual private network (VPN). You need to specify a time frame for the allowed remote users' access to the company network. Between 9 and 10 in the morning. to 6 P.M. Each member of a security group made up only of approved remote users is a member of the group.
What action plan would you follow?
Explanation:
You can establish and enforce organization-wide network access policies for connection request authentication and authorization using the Network Policy Server (NPS).
Your company's network is set up as a single Active Directory Domain Services (AD DS) domain, and all domain controllers are running Windows Server 2012 R2 or Windows Server 2012. On a member server, the Network Policy Server (NPS) role is set up and configured as a Network Access Policy (NAP) server. Windows Server 2012 R2 is installed on this member server. You wish to impose health regulations on local 802.1x wireless clients. Client machines run Windows 8.1 or Windows 8 and are all positioned within the Wireless OU.
What would you do to minimize the administrative work?
Explanation:
Network administrators can specify which Remote Authentication Dial-In User Service (RADIUS) servers handle the authentication and authorization of connection requests that the server running Network Policy Server (NPS) receives from RADIUS clients by using connection request policies, which are sets of conditions and settings. It is possible to establish connection request policies to specify which RADIUS servers will be utilized for RADIUS accounting.
Your company's network is set up as a single Active Directory Domain Services (AD DS) domain, and all domain controllers are running Windows Server 2012 R2. Your organization has numerous locations, thus the network consists of a main office and a number of branch offices. DFS replication is configured as a hub-and-spoke system. The main office houses the hub. Windows Server 2012 R2 is used on all servers involved in DFS replication. All replication group members support read/write DFS databases. You notice there is a replication hiccup when you check the DFS log entries because the staging folder has turned into a bottleneck. You determine that the staging folder's quota size needs to be increased.
What course of action would you take?
Explanation:
The Distributed File System (DFS) Replication service settings on replication group members can be changed with the Set-DfsrServiceConfiguration cmdlet. Replicated folders are hosted by members of a replication group. Configure cleanup options, debug logging options, and automatic recovery for unanticipated shutdown using this cmdlet.
Windows Server 2012 R2 is running on the network you own. Three network servers are set up using a custom DNS lookup service. You need service hosts to return to DNS clients in a random order to provide load balancing.
What would you do, assuming there is a minimum quantity of work?
Explanation:
Lower numbers represent a higher priority as SRV records are handled in ascending order of priority.
All domain controllers in your company's network are operating Windows Server 2012 R2 or Windows Server 2012 and are set up as a single Active Directory Domain Services (AD DS) domain. An RADIUS server and RADIUS proxy are set up on a Network Policy Server (NIPS). Users occasionally link from your local network to the network of the partner firm, which is a company that your business partners with. While visitors should be authenticated via a RADIUS server in their home network, domain members should authenticate locally.
What course of action would you take?
Explanation:
The usage of NPS as a RADIUS server allows you to process some RADIUS request messages provided from RADIUS clients locally, while NPS can also act as a RADIUS proxy to route other types of messages to another RADIUS server.