Windows Server Administration & Group Policy Flashcards

Which command-line tool is used to verify the replication status between Domain Controllers and diagnose AD replication failures?

Answer: repadmin

Repadmin (Replication Diagnostics Tool) is used to monitor, diagnose, and troubleshoot Active Directory replication between domain controllers.

A Windows Server administrator needs to ensure that a specific application's event logs are collected centrally from multiple servers. Which feature should be configured?

Answer: Windows Event Collector (WEC) with event subscriptions

Windows Event Collector with event subscriptions forwards events from source computers to a collector computer, enabling centralized log management without third-party tools.

What is the function of the 'Infrastructure Master' FSMO role in a multi-domain Active Directory forest?

Answer: Updates cross-domain object references and phantom records for objects in other domains

The Infrastructure Master updates references to objects in other domains (phantom records) ensuring that group memberships referencing users from other domains remain accurate.

Which Windows Server role service enables IT administrators to centrally manage and deploy operating system images to computers over the network using PXE boot?

Answer: Windows Deployment Services (WDS)

Windows Deployment Services (WDS) is the Windows Server role service that enables network-based OS installation via PXE boot using WIM images.

An administrator runs 'gpresult /R' on a user's computer and sees a GPO listed under 'Denied GPOs' with the reason 'Inaccessible'. What is the most likely cause?

Answer: The client cannot contact a DC to read the GPO from SYSVOL

An 'Inaccessible' status in gpresult means the client was unable to retrieve the GPO files from the SYSVOL share, typically due to network connectivity or DNS issues preventing DC contact.

Which Windows Server feature enables administrators to use a single namespace to access files distributed across multiple servers and locations transparently?

Answer: Distributed File System Namespaces (DFS-N)

DFS Namespaces (DFS-N) allows administrators to create a single virtual directory tree that maps to multiple file servers, providing a unified namespace independent of the physical server location.

What does enabling 'Credential Guard' on Windows Server protect against?

Answer: Pass-the-hash and pass-the-ticket attacks by isolating LSASS in a virtualization-based security container

Credential Guard uses virtualization-based security (VBS) to isolate the LSASS process in a protected virtual container, preventing credential theft attacks like pass-the-hash and pass-the-ticket.