Installing and Configuring Windows Server 2012 Exam Professional Standards & Competencies 4

Question 1

An administrator discovers unauthorized software installed on a Windows Server 2012 R2 production server. According to incident response best practices, what should be done FIRST?

Accepted Answer

Document the discovery, isolate the server, and follow the incident response plan

Answer

Incident response best practices require documenting the incident, containing the threat by isolating the affected system, and following the organization's formal incident response plan.

Question 2

A Windows Server 2012 administrator needs to ensure role separation in the data center. Which built-in Windows Server 2012 feature enforces this by limiting what tasks each administrator can perform?

Accepted Answer

Role-Based Access Control (RBAC) via Active Directory delegation

Answer

Active Directory delegation allows organizations to grant specific administrative permissions to specific users or groups, enforcing role separation without granting full Domain Admin rights.

Question 3

Which Windows Server 2012 R2 feature should an administrator use to prevent unauthorized applications from running on a server, supporting application whitelisting?

Accepted Answer

AppLocker

Answer

AppLocker allows administrators to define rules specifying which applications are allowed to run, implementing application whitelisting to prevent unauthorized software execution.

Question 4

An administrator is tasked with reducing the number of open inbound ports on a Windows Server 2012 R2 server per a security hardening standard. Which tool should be used?

Accepted Answer

Windows Firewall with Advanced Security

Answer

Windows Firewall with Advanced Security allows administrators to create granular inbound and outbound rules to block unnecessary ports and restrict network access.

Question 5

According to Microsoft best practices, what should an administrator do before applying a cumulative update to a production Windows Server 2012 R2 domain controller?

Accepted Answer

Test the update in a non-production environment and take a system state backup

Answer

Best practices require testing updates in a non-production environment and performing a system state backup before applying changes to production domain controllers.

Installing and Configuring Windows Server 2012 Exam Practice Test

Installing and Configuring Windows Server 2012 Exam Practice Test

Installing and Configuring Windows Server 2012 Exam Professional Standards & Competencies 4