Installing and Configuring Windows Server 2012 Exam Risk Assessment & Management 3

Question 1

When configuring Windows Server 2012 for a high-security environment, which Group Policy setting reduces attack surface by disabling unnecessary services based on risk assessment findings?

Accepted Answer

Security Configuration Wizard (SCW) baseline

Answer

The Security Configuration Wizard generates role-based security policies that disable unnecessary services identified during risk assessment.

Question 2

A residual risk remains after implementing security controls. What is the recommended next step if the residual risk exceeds the organization's risk tolerance?

Accepted Answer

Implement additional controls or transfer the risk

Answer

If residual risk exceeds tolerance, additional controls should be applied or the risk transferred (e.g., through insurance) until it falls within acceptable limits.

Question 3

Which Windows Server 2012 component provides centralized logging to support risk monitoring and incident detection across multiple servers?

Accepted Answer

Windows Event Forwarding (WEF)

Answer

Windows Event Forwarding centralizes event logs from multiple servers to a collector, enabling centralized risk monitoring.

Question 4

During a risk assessment, a threat agent's capability and motivation are evaluated. What risk component do these factors directly influence?

Accepted Answer

Threat likelihood

Answer

Threat likelihood is determined by the capability and motivation of a threat agent to exploit a vulnerability.

Question 5

An organization purchases cyber insurance to cover losses from ransomware attacks on Windows servers. Which risk strategy does this represent?

Accepted Answer

Risk transference

Answer

Purchasing cyber insurance transfers the financial impact of a risk to a third party (the insurer).

Installing and Configuring Windows Server 2012 Exam Practice Test

Installing and Configuring Windows Server 2012 Exam Practice Test

Installing and Configuring Windows Server 2012 Exam Risk Assessment & Management 3