MCSE Cheat Sheet 2026

The 30 highest-yield MCSE facts, distilled from real exam questions. Print it, save it as a PDF, or study it here — free, no sign-up.

1. What is the default site link cost in Active Directory Sites and Services? → 100
2. Which Windows Server 2003 backup method backs up only files that have changed since the last Normal or Incremental backup and clears the archive bit? → Incremental backup
3. Which Windows XP feature allows the operating system to detect and install hardware automatically? → Plug and Play (PnP)
4. What is the purpose of the Automated System Recovery (ASR) feature in Windows XP? → Restores the system partition from backup after a catastrophic failure
5. What is the purpose of a Global Catalog server in Active Directory? → Stores a partial replica of all objects in the forest for fast searches
6. Which tool in Windows Server 2003 allows administrators to manage remote servers' services, event logs, and shares from a single console? → Computer Management MMC snap-in
7. Which protocol does Windows Server 2003 RRAS use to advertise routing information to other routers on the network? → RIP v2
8. What does the 'Last Known Good Configuration' startup option restore in Windows XP? → Registry settings from the last successful logon
9. What is the maximum number of concurrent Remote Desktop connections allowed on Windows XP Professional? → 1
10. What is the MOST secure way to store the backup of a CA's private key? → Hardware Security Module (HSM) or encrypted offline media stored in a secure vault
11. Which feature of Windows Server 2003 IPSec allows you to require encryption for all traffic between two specific servers? → IPSec policy with Require Security rule
12. Which of the following could become an issue with automatic Windows updates? → Some updates require the server to restart upon completion
13. Which Windows XP component provides offline file access to network shared folders when the network is unavailable? → Offline Files (Client-Side Caching)
14. Which of the above counters can be used to keep an eye on network traffic across all server types? → Memory, Processor, Network, and Disk
15. What tool in Windows XP allows an administrator to view and manage all running processes and their resource usage? → Task Manager (taskmgr.exe)
16. Which of the following will assist Windows Server 2003 defragment the hard drive on a DC? → Restarting the DC in DS Restore mode and using compact db.
17. When designing an Active Directory forest structure, what is the primary reason to create multiple forests? → To maintain separate security boundaries
18. What is the minimum Kerberos ticket lifetime that Microsoft recommends to prevent replay attacks? → 5 minutes
19. What is the purpose of 802.1X authentication in a wired or wireless network security design? → Requires devices to authenticate before gaining network access
20. Which of the following do Microsoft operating systems like Windows XP, Windows 2000, and Windows Server 2003 refer to as an APIPA? → 169.254.0.0/16
21. Which Windows Server 2003 log file records successful and failed security events as configured by audit policy? → Security log in Event Viewer
22. What is the function of the WINS server in a Windows network? → Resolves NetBIOS names to IP addresses
23. Which port must be open in a firewall for Kerberos authentication to function across a firewall? → 88 (TCP and UDP)
24. Which Operations Master among the following is principally in charge of creating Active Directory objects? → Schema Master
25. What is the order of Group Policy application from lowest to highest priority? → Local, Site, Domain, OU
26. Which of the following describes a rule that controls how packet filters are used? → Verification of source address of the incoming packet is a must
27. Which security setting controls the minimum age before a user can change their password again? → Minimum password age
28. What does placing a Global Catalog server in each site accomplish? → Eliminates the need to cross WAN links for universal group membership queries during logon
29. What is the effect of setting the LAN Manager Authentication Level to 'Send NTLMv2 response only. Refuse LM & NTLM'? → Forces all authentication to use NTLMv2, blocking weaker LM and NTLM protocols
30. What is the recommended DHCP scope utilization threshold that should trigger adding a new scope or server? → 80%