Installing and Configuring Windows Server 2012 Exam Case Studies & Practical Application 5 — Questions and Answers
Question 1: A Windows Server 2012 administrator deploys a new GPO but changes are not applying to a specific OU. Running gpresult /r shows the GPO is not listed. What is the MOST likely cause?
- The GPO is not linked to the OU or is blocked by Block Inheritance (Correct answer)
- The Group Policy service is stopped on the domain controller
- The administrator did not run gpupdate /force on the DC
- The OU contains computer objects instead of user objects
Correct answer: The GPO is not linked to the OU or is blocked by Block Inheritance
If a GPO does not appear in gpresult output, it is either not linked to the target OU or Block Inheritance is preventing it from applying.
Question 2: A Windows Server 2012 WSUS server shows that approved updates are not installing on client computers. Clients show 'No updates available' in Windows Update. What should the administrator check first?
- Whether the WSUS server has sufficient disk space
- Whether the Group Policy pointing clients to the WSUS server URL is applied (Correct answer)
- Whether the Windows Update service is set to Automatic on clients
- Whether the WSUS console shows updates as approved
Correct answer: Whether the Group Policy pointing clients to the WSUS server URL is applied
Clients must receive the correct WSUS server URL via Group Policy; without this setting, clients default to Microsoft Update and will not see WSUS-approved updates.
Question 3: A company runs a web application on Windows Server 2012 IIS. After a security audit, the team must prevent the server version from being disclosed in HTTP response headers. What is the correct configuration?
- Disable the HTTP Logging feature in IIS
- Remove the X-Powered-By and Server headers via URL Rewrite or custom headers (Correct answer)
- Set the IIS application pool to 32-bit mode
- Enable Dynamic IP Restrictions in IIS
Correct answer: Remove the X-Powered-By and Server headers via URL Rewrite or custom headers
Removing or masking the Server and X-Powered-By HTTP response headers via URL Rewrite rules or custom headers configuration prevents version disclosure to attackers.
Question 4: A Windows Server 2012 domain has users in multiple sites connected by slow WAN links. Logon times are slow because authentication traffic must cross the WAN. What is the BEST solution?
- Install an additional domain controller at each remote site (Correct answer)
- Increase the WAN link bandwidth
- Configure universal group membership caching at each site
- Implement a second domain for each remote site
Correct answer: Install an additional domain controller at each remote site
Placing a domain controller at each remote site allows users to authenticate locally, eliminating WAN latency during the logon process.
Question 5: An administrator needs to ensure that Windows Server 2012 Hyper-V VMs can be live migrated between two hosts without shared storage. Which feature enables this?
- Shared Nothing Live Migration (Correct answer)
- Quick Migration with CSV storage
- Hyper-V Replica with planned failover
- Storage Migration within the same host
Correct answer: Shared Nothing Live Migration
Shared Nothing Live Migration in Windows Server 2012 allows live migration of VMs between Hyper-V hosts without requiring shared storage such as a SAN or CSV.
Question 6: A server administrator must ensure that the Windows Server 2012 server time is always synchronized with an external NTP source. Which command configures this?
- w32tm /config /manualpeerlist:time.windows.com /syncfromflags:manual /reliable:yes /update (Correct answer)
- net time /set /y time.windows.com
- ntpdate -u time.windows.com
- Set-Date -NtpServer time.windows.com
Correct answer: w32tm /config /manualpeerlist:time.windows.com /syncfromflags:manual /reliable:yes /update
The w32tm command is the correct Windows tool for configuring NTP synchronization, setting the peer list and sync flags for reliable time service.
Question 7: A Windows Server 2012 administrator needs to delegate the ability to reset passwords in a specific OU to the help desk team without granting them Domain Admin rights. What is the correct approach?
- Add the help desk team to the Account Operators group
- Use the Delegation of Control Wizard on the target OU (Correct answer)
- Grant the help desk team Write permission on all AD objects
- Create a new domain and place the help desk team as domain admins there
Correct answer: Use the Delegation of Control Wizard on the target OU
The Delegation of Control Wizard allows granular permission assignment on specific OUs, such as resetting passwords, without elevating users to Domain Admins.
Installing and Configuring Windows Server 2012 Exam Case Studies & Practical Application 5
A Windows Server 2012 administrator deploys a new GPO but changes are not applying to a specific OU.
Running gpresult /r shows the GPO is not listed.
What is the MOST likely cause?