MCSE MSCE Server Infrastructure & Network Management 5 — Questions and Answers
Question 1: A Windows Server administrator needs to provide encrypted, certificate-based VPN access without requiring a pre-shared key. Which VPN protocol should be configured?
- PPTP
- L2TP/IPsec with pre-shared key
- SSTP (Secure Socket Tunneling Protocol) (Correct answer)
- IKEv2
Correct answer: SSTP (Secure Socket Tunneling Protocol)
SSTP tunnels PPP traffic over HTTPS using SSL/TLS certificates, eliminating the need for pre-shared keys and working through most firewalls on port 443.
Question 2: When configuring Active Directory Sites and Services for a multi-site organization, what object defines the network subnets associated with each AD site?
- Site Link
- Site Link Bridge
- Subnet object (Correct answer)
- Connection object
Correct answer: Subnet object
Subnet objects in AD Sites and Services map IP address ranges to specific sites, allowing the KCC and clients to determine their site membership for optimal DC selection.
Question 3: A Windows Server 2019 administrator needs to configure storage tiering to automatically move hot data to SSDs and cold data to HDDs. Which feature enables this?
- Data Deduplication
- Storage Spaces with Storage Tiering (Correct answer)
- ReFS with integrity streams
- iSCSI Target with MPIO
Correct answer: Storage Spaces with Storage Tiering
Storage Spaces with Storage Tiering automatically classifies data as hot or cold and moves it between SSD and HDD tiers based on access frequency.
Question 4: An administrator configures Network Policy Server (NPS) as a RADIUS proxy. Incoming RADIUS requests from wireless APs are forwarded to which NPS element for policy evaluation?
- Connection Request Policy
- Remote RADIUS Server Group (Correct answer)
- Network Policy
- Health Policy
Correct answer: Remote RADIUS Server Group
When NPS acts as a RADIUS proxy, Connection Request Policies forward requests to Remote RADIUS Server Groups, which contain the actual RADIUS servers that authenticate requests.
Question 5: During a server migration, an administrator needs to transfer all FSMO roles from a retiring domain controller. Which PowerShell cmdlet moves all five FSMO roles at once?
- Move-ADDirectoryServerOperationMasterRole (Correct answer)
- Set-ADDomain -PDCEmulator
- Netdom query fsmo
- Repadmin /syncall
Correct answer: Move-ADDirectoryServerOperationMasterRole
Move-ADDirectoryServerOperationMasterRole with the -OperationMasterRole parameter accepting all five roles (0-4 or named) transfers FSMO roles via PowerShell.
Question 6: A Windows Server administrator needs to prevent specific users from logging on locally to a server while still allowing remote desktop access. Which Group Policy setting achieves this?
- Deny log on through Remote Desktop Services
- Deny log on locally (user rights assignment) (Correct answer)
- Remove users from the Remote Desktop Users group
- Enable Network Level Authentication
Correct answer: Deny log on locally (user rights assignment)
The 'Deny log on locally' user rights assignment blocks interactive console logons for specified users or groups while leaving RDP access unaffected.
Question 7: In a Windows Server environment, which command-line tool tests DNS name resolution and provides detailed query information including the authoritative DNS server that responded?
- ipconfig /displaydns
- ping
- nslookup (Correct answer)
- pathping
Correct answer: nslookup
nslookup queries DNS servers directly and displays the responding server's name and address along with the resolved records, making it ideal for DNS troubleshooting.
MCSE MSCE Server Infrastructure & Network Management 5
A Windows Server administrator needs to provide encrypted, certificate-based VPN access without requiring a pre-shared key.
Which VPN protocol should be configured?