Windows Server

Questions and Answers

• You need to create a file share for your company that must be accessible from all branch offices and its share path must have the name Work Share. Which server role do you install?
  1. BranchCache for Network Files
  2. File Server
  3. Work Folders
  4. DFS Namespaces
• You support an IT infrastructure for an organization that has physical locations and WAN connections from the main office to each branch. You are designing a network where users at all locations have access to shared files, both online and offline. Which Windows technology is best for your design?
  1. Data Deduplication
  2. BranchCache
  3. DFS Replication
  4. File and Storage Services
• Which type ot DNS record is most commonly used in a forward lookup zone to resolve a host name to a specific IP address?
  1. an MX record
  2. an A record
  3. an RTP record
  4. a TXT record
• What can you perform to free up space on a Windows Server 2012 R2 C: drive?
  1. a disk migration
  2. a disk cleanup
  3. a disk consolidation
  4. a disk defragmentation
• A Windows Server 2012 R2 VM is available to use. You created an XML file that includes all the server roles and features you require for a file server. The XML tile is stored at the root of the D: drive. What PowerShell command do you run to configure the server?
  1. `Install-WindowsServices -ConfigurationFilePath d:\PowerShellConfig.xml`
  2. `Install-WindowsFeature -ConfigurationFilePath d:\root\PowerShellConfigFile.xml`
  3. `Install-WindowsRole -ConfigurationFilePath d:\FileServerConfig.xml`
  4. `Install-WindowsFeature -ConfigurationFiIePath d:\FileServerConfig.xml`
• When configuring a CA which role service provides a web interface for users to easily request and renew certificates?
  1. Network Device Enrollment Service
  2. Certification Authority Web Enrollment
  3. Online Responder
  4. Certificate Enrollment Policy Web Service
• Hyper-V \_ is a disaster recovery tool that replicates virtual machines from one Hyper-V host server to another in a Hyper-V Windows Server 2016 environment.
  1. Manager
  2. Replica
  3. Backup
  4. Data Protection Manager
• You deployed a Windows Server 2012 R2 virtual machine and configured the File and Storage Services server role. Where do you begin configuring the use of Previous Versions for restoring files?
  1. A
  2. B
  3. C
  4. D
• You have installed the Remote Desktop Services role. Which remote desktop mode comes with two built-in licenses?
  1. RDA Administration Mode
  2. RDS Session Mode
  3. RDS User Mode
  4. RDA Application Mode
• How would you link a unique users policy made for the Human Resources Department users in your domain?
  1. Link the GPO to the Human Resources OU.
  2. Link the GPO to the Default Domain Policy.
  3. Link the GPO to the domain root
  4. Link the GPO to the Computers OU.
• You've deployed a Server Core installation of Windows Server 2016. Which is NOT a way to update the server?
  1. Configure the server to use a WSUS server with Group Policy.
  2. Run the following command: `Net stop wuauserv %systemroot%\system32\Cscript scregedit.wsf /AU 4 Net start wuauserv`.
  3. Run the following command: `Wusa .msu /quiet`.
  4. Install the WSUS server role.
• When deploying a Windows Server as a print server, which role needs to be installed?
  1. Print Services
  2. File Services
  3. Print and Document Services
  4. Print Server
• Which type of DNS record is NOT specifically associated with an AD domain controller?
  1. LDAP
  2. Kerberos
  3. GC
  4. PTR
• Your Hyper-V server has two physical disks installed, Disk 1 is a C: drive that hosts the Windows system files, and disk 2 is a D: drive that has no data. You need to connect the D: drive to a newly created VM using a pass-through disk configuration. What is true about the D: drive?
  1. The physical disk must be in a RAID 6 configuration.
  2. The physical disk must be reformatted.
  3. The physical disk must be offline.
  4. The physical disk must use iSCSI.
• Which Windows Server technology enables replication of volumes between servers or clusters for disaster recovery?
  1. Storage Replica
  2. Storage Spaces Direct
  3. Stretch Cluster
  4. Storage Spaces
• You are setting up new branch that has 50 client computers, all of which have been joined to the existing Active Directory domain. You deployed a DHCP server and were able to log in with your domain admin credentials, however the local clients are not receiving IP addresses. What is the cause of this issue?
  1. The DHCP server is not part of the DHCP Servers OU in AD.
  2. The DHCP server has not been authorized.
  3. Your domain admin account is not part of the local computer's Administrators group.
  4. The DHCP server is not part of the AD domain.
• You want to verify that a DHCP server has been authorized use in Active Directory. Which cmdlet do you run in Windows PowerShell?
  1. Add-DhcpServerInDC
  2. Get-DhcpServerInDC
  3. Get-WindowsFeature DHCP
  4. Inst?11-WindowsFeature DHCP
• You log in to the domain controller to manage some user and computer accounts in Active Directory (AS) and you cannot find the AD tools. To resolve this using the Add Roles and Features Wizard, which feature would you install without any unnecessary services?
  1. Hyper-V Management Tools
  2. Remove Server Administration Tools
  3. Active Directory Rights Management Services
  4. AD DS and AD LDS Tools
• You deploy Windows Server 2012 R2 server as a VPN server and must configure new firewall rules for workstation connections. Which command do you use to configure the new rules with the least amount of effort?
  1. Use dism.exe from the command prompt.
  2. Use dsadd.exe from the command prompt.
  3. Use the New-NetFirewallRule command in PowerShell.
  4. use the Enable-NetFirewallRule in PowerShell.
• A basic DHCP server can provide clients with an IP address, subnet mask, default gateway, DNS IP address. and what other IP address?
  1. file server
  2. WINS server
  3. WSUS
  4. proxy server
• When setting up a disaster recovery plan for your Hyper-V virtual machines in a System Center Virtual Machine Manager (VMM) cloud, what happens during the initial replication?
  1. A Hyper-V VM snapshot is taken.
  2. Delta replication begins.
  3. Delta disk changes are logged and merged with the parent disk.
  4. Virtual hard disks on the VM are replicated to the secondary site.
• You want to secure your Windows server so the built-in web browser can navigate only to sites listed in Internet Explorer's 'trusted sites' list. How can you configure this security capability?
  1. Go to the Manager and enable IE Enhanced Security Configuration.
  2. Go to Internet Explorer's Internet Options end add unauthorized website URLs te the 'restricted sites' list.
  3. Go to Internet Explorer's Internet Options and add authorized website URLs to the 'trusted sites' list.
  4. Go to the Control Panel and enable user Account Control.
• After adding a network printer to the Windows print server, you try to add the printer to a Windows 8 desktop client. While typing the network path to the new printer, you are unable to find it. Why is the new network printer unavailable for selection?
  1. You did not add the printer drivers to the print server.
  2. You did not select the Share the Printer check box.
  3. You need to re-add the printer to the Print Management console.
  4. The printer lost connection to the network.
• You built a container image on Nano Server. The container image has multiple layers, including a custom application built for your company, and your development team pushed the image to your Azure image registry. What happens if you attempt to pull that image to a new server with previously downloaded OS images?
  1. Your custom layers will be pulled from your Azure registry and you will receive an notifying you of the missing base image.
  2. You will receive an notifying you of the missing base image and you will not be allowed to pull the image.
  3. All layers will be downloaded from your Azure registry.
  4. The base OS image layers will automatically be pulled from Microsoft's registry at Docker Hub, and your custom layers will be pulled from your Azure registry.
• You need to configure your DHCP server to deny certain client MAC addresses receiving an IP address. Where do you configure this setting?
  1. Filters folder
  2. Policies folder
  3. Scope Default folder
  4. Scope Options folder
• Where can you go to restore deleted objects in Active Directory without the use of Microsoft PowerShell or ldp.exe?
  1. Active Directory Administrative Center
  2. Active Directory Domains and Trusts
  3. Active Directory and Computers
  4. Active Directory Sites and Services
• You have a running Active Directory Certificate Services (AD CS) server and need to back up the certificate databases and private keys. How do you accomplish this?
  1. Use the certutil.exe command.
  2. Schedule a full backup of the server.
  3. Perform a direct copy of database files and private keys to a file share.
  4. Schedule an incremental backup of the server.
• You must configure set of three DNS IP addresses to be given to clients that receive IP configuration from your DHCP server. The DNS IP will apply to all DHCP created on the server. Where on your DHCP do you configure this setting?
  1. Server Options
  2. Scope Options
  3. Scope Clients
  4. Policies
• You are working toward managing cross-forest certificate enrollment deployment and need to copy objects in the source forest to the target forest. How do you keep the source and target forest synchronized?
  1. storage replication
  2. pkisync.ps1
  3. site replication
  4. certificate templates
• A company IIS server will host the corporate site, which is accessible only by company computers. You need to configure this website to SSL. You obtain certificate to install on the server. Into which certificate store should you import the server's certificate?
  1. Trusted Root Certification Authorities under Local Computer
  2. Trusted Root Certification Authorities under Current User
  3. Personal under Local Computer
  4. Client Authentication Computer
• You are preparing a Windows Server 2016 server image for deployment. You want to further customize your server by adding applications and device drivers, and to test your computer in Windows environment. What sysprep.exe parameters would you select when customizing your server image?
  1. A
  2. B
  3. C
  4. D
• A domain GPO must apply to users based on the location of the computer to which they are logging in. You set up this ability by using which group policy feature?
  1. inheritance
  2. administrative
  3. loopback
  4. filter
• You are planning to install a SAN that will utilize iSCSI storage. You want to provide automatic discovery, management and configuration of iSCSI devices. After running the Get-WindowsFeature \* PowerShell command, which should you install?
  1. Network Load Balancing
  2. EnhancedStorage
  3. iSNS
  4. Multipath IO
• As you create a new share, you are unable to configure the default classification of data on the folder. Why would the New Share Wizard prevent this configuration?
  1. The File Resource Manager must be installed.
  2. The Distributed File System server must also be installed.
  3. The Windows server license is not compatible with the feature.
  4. The file share groups must be configured first.
• When installing the AD DS server role, which will NOT be installed as part of the requited features and services for AD DS to run?
  1. DFS Replication
  2. DFS Namespaces
  3. Active Directory Lightweight Directory Services
  4. File Replication services
• Which is NOT a reason to deploy a DHCP super scope in your network?
  1. The current address pool is almost depleted and more clients will added.
  2. Clients will be migrated to a new scope in a phased approach.
  3. More than one DHCP server wants to manage separate logical IP networks on the same physical network segment.
  4. A proven failover option is required so clients are always connected.
• You prestaged a computer in Active Directory in a domain controller at company headquarters. After 30 minutes, that new computer object is still not available at the branch office domain What should you run from prompt to get a summary of the AD replication status in your domain from the perspective of all domain controllers?
  1. `repadmin /replsum`
  2. `repadmin /showrepl *`
  3. `ntdsutil.exe`
  4. `repadmin /queue`
• You currently have a DHCP server issuing addresses to clients. Which task should you perform first to set up your DHCP server to dynamically issue addresses to clients on the network?
  1. Add IPv6 scope.
  2. Configure an IPv6 address for the interface on the DHCP server.
  3. Set up Windows client configuration.
  4. Install the DHCPv6 server role.
• In the Add Roles and Features Wizard window, you are unable to remove Active Directory domain Services?the check box is greyed out. How can you remove AC DS from a Windows Server 2012 R2?
  1. Click Next and review the Features section.
  2. Click Previous choose a different server.
  3. Click Cancel and restart the server.
  4. Click Cancel and open the Remove Roles and Features Wizard.
• In the image below, what is being installed on the server?
  1. AD CS
  2. AD FS
  3. AD DS
  4. AD LDS
• The first ot root server in a PKI must have the Active Directory Certificate Services installed running which role service?
  1. Certification Authority Web Enrollment
  2. Certificate Authority
  3. Network Device Enrollment Service
  4. Online Responder
• You have shared folder on your FILESVR01 server. You want to be notified vie email when files are saved in the folder. How do you automate this task?
  1. Use Storage Reports.
  2. Use File Management Tasks.
  3. Use Quota Management.
  4. Use File Screen Management.
• What you use to implement a secure hardware store for your CA keys?
  1. storage area network
  2. network attached storage
  3. hardware security module
  4. encrypted hard drive
• You are deploying a highly available file server using a Hyper-V cluster configuration. After creating the cluster, why must you add d disk as a cluster shared volume (CSV)?
  1. to provide nodes in cluster independent VMs slot age location
  2. to implement fault tolerance zero downtime for the VM
  3. to protect data from loss
  4. to prevent nodes in a cluster from accessing a storage location
• When setting up a new RADIUS client, what piece of information verifies a secure and trusted connection with the RADIUS server?
  1. shared secret
  2. hash key
  3. vendor name availability
  4. authentication methods
• You run a script to encrypt a client computer's hard drive with BitLocker and back up the recovery password to Active Directory. When researching the computer object's properties, you cannot find the BitLocker recovery password. What may be the cause?
  1. BitLocker Drive Encryption Administration Utilities are not installed on the client computer.
  2. BitLocker Drive Encryption Administration Utilities are not installed on the domain controller.
  3. BitLocker Drive Encryption Tools are not installed on the domain controller.
  4. BitLocker Drive Encryption Tools are not installed on the client computer.
• After running the PowerShell cmdlet Add-WindowsFeature Adcs-Cert-Authority -IncludeManagementTool on a Windows Server 2016 server, which command will make it a Root Certificate Authority (CA)?
  1. Install-CertificationAuthority
  2. Install-CertificationAuthority -CAType RootCA
  3. Install-AdcsCertificationAuthority -CAType EnterpriseRootCA
  4. Install-AdcsCertificationAuthority -CAType RootCA
• A set of computer and user settings can be applied to multiple clients and servers in a domain through the use of `___`.
  1. Group Policy Objects
  2. Microsoft Management Console
  3. Users and Groups
  4. Computer Objects
• What is the Microsoft implementation of a RADIUS server?
  1. IP address Management (IPAM) Server
  2. Network Policy Server (NPS)
  3. Network Load Balancing
  4. Web Server (IIS)
• After installing the active directory domain services role to your windows server 2016 OS, how do you promote the server to a domain controller using the GUI?
  1. Open mmc.exe
  2. Run dcpromo.exe
  3. Click Add Roles and Features.
  4. Click the notification flag in the Server Manager windows.
• You want to host two virtual machines on the same physical server. Their memory settings in Hyper-V are set to optimize the use of physical memory for each virtual machine. What makes this optimization possible?
  1. dynamic memory
  2. memory buffer
  3. virtual memory
  4. ReadyBoost
• Group policy objects are not being applied to domain controllers because the Default Domain Controllers and Default Domain group policies are corrupt. What can you run in a command prompt to recover them?
  1. dcgpofix.exe
  2. dcdiagfix.exe
  3. ntdsutil.exe
  4. dcpromo.exe
• A domain controller is a server running \_\_.
  1. DFS
  2. RDS
  3. IIS
  4. AD DS
• You want to ensure there are redundant DHCP services avaliable for your network. What should you set up on your server to make this possible?
  1. create new multicast scope
  2. create new superscope
  3. replicate failover scopes
  4. configure failover
• Two companies with different names and domains are merging. What do you set up to ensure that name resolution requests are forwarded directly to the other company's authoritative server?
  1. DNS conditional forwarder
  2. DNS secondary zone
  3. DNS forward lookup zone
  4. DNS reverse lookup zone
• You have installed the Remote Desktop Services role. Which remote desktop mode comes with two built-in licenses?
  1. RDA Administration Mode
  2. RDS Session Mode
  3. RDS User Mode
  4. RDA Application Mode
• In a two-tier hierarchy CA design, what is a common security best practice?
  1. The issuing CA servers are placed in different geographical locations.
  2. The intermediate or policy CA server is offline.
  3. The root CA server is offline.
  4. Only FIPS-compliant hardware security modules are used.
• What type of CAs must be domain members and are typically online to issue certificates or certificate policies?
  1. Enterprise
  2. Root
  3. Client
• Windows Server 2012 R2 server has two network adapters. You are required to configure load balancing on a pair of network adapters. Which management console would you use to accomplish this task?
  1. the Terminal Services Manager console
  2. the Group Manager console
  3. the Remote Desktop Manager console
  4. the Server Manager console
• You set up a storage area network that makes use of iSCSI storage. You then install the iSNS Server service feature on Windows Server 2012 R2. Why do you need this feature?
  1. to provide discovery services of iSCSI devices
  2. to view information about host bus adapters
  3. to manage RAID storage volumes
  4. to set up storage Fibre Channels
• Using Storage Pools under Files and Storage Services, you configure a mixture of SSD (solid state disk) and HDD (hard disk drive) for tiered storage by creating what?
  1. multitenancy volumes
  2. storage pools
  3. parity volumes
  4. storage spaces
• In the Server Manager window shown, how can you manage more servers?
  1. Click **Server**, above **Volumes**.
  2. Click **Tools**.
  3. Type a computer name in the filter text box.
  4. Click **Manage**.
• You need to make assignments to other admins to manage certificate templates in a multidomain forest. What change is required in Active Directory?
  1. You must create a group in Active Directory and add that group to the security properties of the CA server in the Certificate Authority console.
  2. Add a group or user to the Certificate Templates property security tab from the configuration partition of your domain using ADSI.
  3. Add the domain group or user account to the CA root server's local Administrator group.
  4. The domain group or user account must be given Read and Enroll security permission.
• Your organization has the main datacenter on the west side of North America. A secondary site is located on the east side, where data is replicated from west to east. During a disaster recovery, your organization can pick up operations at the east datacenter in about one to two hours. In an official disaster recovery plan document, the east datacenter is referred to as what type of site?
  1. far
  2. backup
  3. warm
  4. cold
• You currently have a Windows Server 2008 R2 print server named PRT01. You deploy a Windows Server 2012 R2 print server named PRT02. How do you begin the migration process?
  1. Run the `printbrm -b` command on PRT02
  2. Run the `printbrm -b` command on PRT01
  3. Run the `printbrm -r` command on PRT01
  4. Run the `printbrm -q` command on PRT02
• Your organization wants to design a disaster recovery plan with two geographical sites. The two sites must be up in an active/active configuration, and some or all services should be able to failover seamlessly. Which Storage Replica configuration would you setup with your Windows Server 2016 systems?
  1. Cluster-to-Cluster
  2. Server-to-Server
  3. Storage Replica is incompatible.
  4. Stretch Cluster
• You are working toward managing a cross-forest certificate enrollment deployment and need to copy objects in the source forest to the target forest. How do you keep the source and target forst synchonized?
  1. certificate templates
  2. site replication
  3. pkysync.ps1
  4. storage replication