Installing and Configuring Windows Server 2012 Exam Case Studies & Practical Application 3 — Questions and Answers
Question 1: A Windows Server 2012 file server hosts sensitive HR documents. Management requires that only HR group members can read files, regardless of NTFS permissions. Which technology enforces this centrally?
- Share permissions set to HR group only
- Dynamic Access Control with Central Access Policies (Correct answer)
- EFS certificates assigned to HR users
- BitLocker drive encryption
Correct answer: Dynamic Access Control with Central Access Policies
Dynamic Access Control with Central Access Policies allows administrators to define and enforce file access rules centrally through Active Directory, overriding inconsistent local permissions.
Question 2: A branch office server running Windows Server 2012 needs to cache Active Directory logon credentials for users when the WAN link to the domain controller is unavailable. What feature handles this?
- Read-Only Domain Controller with credential caching (Correct answer)
- Active Directory Federation Services
- DirectAccess with domain controller tunneling
- WINS server replication
Correct answer: Read-Only Domain Controller with credential caching
An RODC caches credentials for specified users, allowing them to authenticate locally when the WAN link to writable domain controllers is down.
Question 3: After promoting a Windows Server 2012 member server to a domain controller, users report slow logon times. Event logs show SYSVOL is not replicating. What should the administrator check first?
- Whether DFS Replication service is running (Correct answer)
- Whether the server's NIC driver is current
- Whether Group Policy refresh interval is set correctly
- Whether WINS is configured on the server
Correct answer: Whether DFS Replication service is running
Windows Server 2012 uses DFS Replication for SYSVOL; if the DFSR service is stopped or misconfigured, SYSVOL will not replicate and logon scripts/GPOs will fail.
Question 4: A company acquires a subsidiary and needs to establish trust between two separate Active Directory forests. Users in both forests should access resources in either forest. What trust type is required?
- External trust (one-way)
- Forest trust (two-way) (Correct answer)
- Shortcut trust
- Realm trust
Correct answer: Forest trust (two-way)
A two-way forest trust allows users in both forests to access resources in either forest, providing full inter-forest authentication.
Question 5: A Windows Server 2012 server hosts a critical application that must survive hardware failure. The administrator wants automatic failover with no manual intervention. Which clustering feature should be implemented?
- Network Load Balancing
- Failover Clustering with Always-On (Correct answer)
- Hyper-V replication only
- DFS Replication with manual promotion
Correct answer: Failover Clustering with Always-On
Failover Clustering automatically moves resources and applications to surviving nodes when a node fails, with no administrator intervention required.
Question 6: An administrator configures a GPO to redirect the Documents folder for all users to a file server. Users complain that Documents are unavailable when offline. What feature should also be configured?
- Shadow Copies on the file server
- Offline Files with Sync Center (Correct answer)
- Volume Shadow Copy Service on the client
- BranchCache in hosted mode
Correct answer: Offline Files with Sync Center
Offline Files (client-side caching) combined with Sync Center allows redirected folders to be available locally when users are disconnected from the network.
Question 7: A Windows Server 2012 server running IIS 8 must enforce HTTPS for a financial application. The current SSL certificate has expired. What is the correct sequence to resolve this?
- Restart IIS, then renew the certificate from IIS Manager
- Obtain a new certificate, bind it to the HTTPS site in IIS Manager, then remove the expired cert (Correct answer)
- Delete the expired certificate and recycle the application pool
- Reinstall IIS to clear the expired certificate binding
Correct answer: Obtain a new certificate, bind it to the HTTPS site in IIS Manager, then remove the expired cert
The correct process is to obtain a renewed certificate, bind it to the HTTPS site in IIS Manager, and then remove the expired certificate to avoid binding conflicts.
Installing and Configuring Windows Server 2012 Exam Case Studies & Practical Application 3
A Windows Server 2012 file server hosts sensitive HR documents.
Management requires that only HR group members can read files, regardless of NTFS permissions.
Which technology enforces this centrally?