Installing and Configuring Windows Server 2012 Exam Risk Assessment & Management 4

Question 1

A Windows Server 2012 administrator discovers an unpatched vulnerability with a CVSS score of 9.8. Using risk-based patching, which action should be taken first?

Accepted Answer

Apply the patch immediately after testing in a lab environment

Answer

A CVSS score of 9.8 is critical; risk-based patching prioritizes immediate remediation after lab validation.

Question 2

Which type of risk assessment relies on expert judgment and experience rather than numerical data to evaluate threats?

Accepted Answer

Qualitative

Answer

Qualitative risk assessment uses expert judgment and descriptive categories rather than precise numerical calculations.

Question 3

An organization wants to reduce the likelihood of brute-force attacks on Windows Server 2012 domain accounts. Which Group Policy setting directly addresses this risk?

Accepted Answer

Account lockout threshold

Answer

Account lockout threshold locks accounts after a specified number of failed attempts, directly preventing brute-force attacks.

Question 4

During a Business Impact Analysis (BIA), which metric defines the maximum tolerable downtime before business operations are severely impacted?

Accepted Answer

Maximum Tolerable Downtime (MTD)

Answer

Maximum Tolerable Downtime (MTD) defines the absolute maximum time a system can be offline before causing unacceptable business damage.

Question 5

Which Windows Server 2012 feature enables administrators to apply fine-grained password policies to specific user groups, allowing different risk profiles?

Accepted Answer

Fine-Grained Password Policy (PSO)

Answer

Password Settings Objects (PSOs) allow different password policies for different user groups, supporting risk-tiered access control.

Installing and Configuring Windows Server 2012 Exam Practice Test

Installing and Configuring Windows Server 2012 Exam Practice Test

Installing and Configuring Windows Server 2012 Exam Risk Assessment & Management 4