FREE Administering Windows Server 2012 Question and Answers

Question 1

Your company's network is set up as a single Active Directory Domain Services (AD DS) domain, and all domain controllers are running Windows Server 2012 R2 or Windows Server 2012. On a member server, the Network Policy Server (NPS) role is set up and configured as a Network Access Policy (NAP) server. Windows Server 2012 R2 is installed on this member server. You wish to impose health regulations on local 802.1x wireless clients. Client machines run Windows 8.1 or Windows 8 and are all positioned within the Wireless OU.
What would you do to minimize the administrative work?

Accepted Answer

Enable the Extensible Authentication Protocol (EAP) enforcement agent

Answer

Enable the Wireless EAP over LAN (EAPOL) enforcement agent.

Answer

Use the NAP Client Configuration console to configure wireless clients.

Answer

Create and link a NAP Client Configuration Group Policy.

Question 2

You are an Active Directory Domain Services (AD DS) domain administrator for a corporation. Corp.net is the name of the domain. Two domain controllers running Microsoft Windows Server 2012 R2 are DC1 and DC2. You need to back up SYSVOL and the AD database before you can perform maintenance on DC1. You should create a backup file that is as compact as possible and upload it to a network shared folder.
What course of action will you take next? (There may be more than one right response; select the BEST response.)

Accepted Answer

Run Wbadmin start systemstatebackup.

Answer

Run Start-WBBackup

Answer

Run Ntdsutil snapshot.

Answer

Run Get-WBBackupSet

Question 3

Windows 2012 R2 is installed on the machine you own. The owner password (owner authorization) for the computer's Trusted Platform Module (TPM) is thought to have been compromised. You wish to prevent unauthorized users from making administrative modifications to the TPM. In order to secure the computer's operating system and data storage, BitLocker Data Encryption (BDE) is utilized. You don't want to lose any computer data or invalidate the current keys.
What course of action would you take?

Accepted Answer

Use the TPM Management MMC snap-in to change the password

Answer

Run Import-TpmOwnerAuth

Answer

Run Manage-bde -changepassword

Answer

Run Set-TpmOwnerAuth.

Question 4

Windows Server 2012 R2 is running on the network you own. Three network servers are set up using a custom DNS lookup service. You need service hosts to return to DNS clients in a random order to provide load balancing.
What would you do, assuming there is a minimum quantity of work?

Accepted Answer

Create a SRV record for each service host, all with the same priority

Answer

Configure the service hosts as a server cluster

Answer

Create a CNAME record for each of the service hosts, each with the same name

Answer

Configure Network Load Balancing (NLB) for the service hosts

Question 5

All domain controllers in your company's network are operating Windows Server 2012 R2 or Windows Server 2012 and are set up as a single Active Directory Domain Services (AD DS) domain. An RADIUS server and RADIUS proxy are set up on a Network Policy Server (NIPS). Users occasionally link from your local network to the network of the partner firm, which is a company that your business partners with. While visitors should be authenticated via a RADIUS server in their home network, domain members should authenticate locally.
What course of action would you take?

Accepted Answer

Configure two Connection Request policies

Answer

Configure a Connection Request policy

Answer

Configure two Network policies

Answer

Configure a Connection Request and a Network policy

Question 6

Your company's network is set up as a single Active Directory Domain Services (AD DS) domain, and all domain controllers are running Windows Server 2012 R2. Your organization has numerous locations, thus the network consists of a main office and a number of branch offices. DFS replication is configured as a hub-and-spoke system. The main office houses the hub. Windows Server 2012 R2 is used on all servers involved in DFS replication. All replication group members support read/write DFS databases. You notice there is a replication hiccup when you check the DFS log entries because the staging folder has turned into a bottleneck. You determine that the staging folder's quota size needs to be increased.
What course of action would you take?

Accepted Answer

Run Set-DfsrServiceConfiguration

Answer

Use DFS Management

Answer

Run Set-DfsrConnection

Answer

Use DFS Management

Question 7

You are employed by a business that manages a network with just one Active Directory domain. Microsoft Windows Server 2012 R2 is installed on every server in the network. All client machines use Windows 8.1. The marketing staff frequently travels and needs mobile access to the company's network. By setting up a Network Policy Server (NPS) and turning on the Routing and Remote Access role service on the server, you can connect remote users to a virtual private network (VPN). You need to specify a time frame for the allowed remote users' access to the company network. Between 9 and 10 in the morning. to 6 P.M. Each member of a security group made up only of approved remote users is a member of the group.
What action plan would you follow?

Accepted Answer

Create a network policy

Answer

Create a connection request policy

Answer

Create a health policy