Microsoft Server 2012 R2 Final Exam

Front 1

What service does Dynamic Host Configuration Protocol (DHCP) provide?

Back 1

Configures the IP address and other TCP/IP settings on network computers

Front 2

For DHCP address allocation, by how much is network traffic reduced related to periodic lease renewal messages when switching from dynamic allocation to automatic allocation?

Back 2

100% because dynamic address allocation requires periodic lease renewal messages whereas automatic does not

Front 3

What is the first packet sent to a DHCP server when a computer boots up?

Back 3

DHCPDISCOVER

Front 4

How does a DHCP client communicate which offered IP address it will accept from which DHCP server?

Back 4

The client sends a DHCPREQUEST message to all servers with teh IP address of tgeh chosen DHCP server.

Front 5

What is the default lease period for DHCP dynamic address allocation?

Back 5

8 days

Front 6

What are the advantages of using a distributed DHCP infrastructure?

Back 6

1. All the client/server network traffic is local, so minimal DHCP traffic on routers

2. Clients have ready access to DHCP server

Front 7

Before a DHCP server can hand out addresses, which of the following steps must be completed? (Choose 2 answers)

Back 7

1. A DHCP scope must be created and and activated.

2. The DHCP server must be created and authorized.

Front 8

Which of the following steps must be completed in order to ensure a network printer is assigned the same address through the DHCP server?

Back 8

Create a reservation in the DHCP scope.

Front 9

What kinds of servers should NOT be DHCP clients?

Back 9

Domain controllers, internet web servers, and DHCP servers

Front 10

What is the key benefit of DHCP manual IP address allocation over manually configuring the IP address by person?

Back 10

This prevents accidental duplication of permanently assigned IP addresses.

Front 11

What are the servers at the top of the DNS hierarchy called?

Back 11

Root servers

Front 12

The domain name part of a DNS name is ________ and consists of two or more words, separated by _________.

Back 12

hierarchical; periods

Front 13

When using DNS for name resolution only, why should a company consider using DNS servers outside of the network perimeter?

Back 13

Less Administration

Front 14

Who is responsible for the ratification of the new top-level domains?

Back 14

Internet Corporation for Assigned Names and Numbers (ICANN)

Front 15

Concerning DNS, what is negative cashing?

Back 15

when a DNS server receives information about a non-existent host.

Front 16

What is the default TTL for a Windows Server 2012 R2 DNS server?

Back 16

1 hour

Front 17

You registered the domain name contoso.com. The FQDNs seattle.contoso.com and halifax.contoso.com are examples of different________>

Back 17

Subdomains of contoso.com

Front 18

Concerning DNS domain hierarchy, what are examples of global top-level domains

Back 18

.com, .net, and .org

Front 19

What is the primary purpose of name caching?

Back 19

Name caching enables the second name resolution request for the same name to bypass the referral process.

Front 20

What is the primary benefit of a DNS forwarder?

Back 20

Reducing the traffic and making efficient use of available bandwidth across the network perimeter.

Front 21

What DNS server is never the authoritative source for a domain, but only severs to resolve names?

Back 21

Caching-only server

Front 22

What DNS sever is responsible for maintaining a particular domain's resource records?

Back 22

Authoritative source

Front 23

What is the process of granting the user access onlyh to the resources he or she is permitted to use?

Back 23

Authorization

Front 24

What defines what objects exist as well as what attributes are associated with any object in the Active Directory?

Back 24

Active Directory Schema

Front 25

Active Directory keeps a naming convention for the domain that mirrors _______.

Back 25

DNS

Front 26

If an administrator creates a domain tree in an Active Directory forest, and then creates a separate and different domain tree, what is the relationship between the two domain trees?

Back 26

same security entity as one Active Directory forest, bidirectional trust between domain trees.

Front 27

What is the global catalog?

Back 27

an index of all AD DS objects in a forest.

Front 28

What is an important difference between groups and OU's?

Back 28

Group memberships are independent of the domain's tree structure.

Front 29

Fro Server Core installations, how does Windows Server 2012 R2 differ from Windows Server 2008 when installing the AD DS role and promoting the system to a domain controller?

Back 29

Windows Server 2012 F2 now allows administrators to use PowerShell.

Front 30

Which of the following features allows you to create virtual machines on a leased cloud resource.

Back 30

Infrastructure as a Service (IaaS)

Front 31

What administrative division in Active Directory is defined as a collection of subnets that have good connectivity between them to facilitate the replication process?

Back 31

Sites

Front 32

When is an Active Directory site topology created?

Back 32

Site topology is manually configured dependent on WAN

Front 33

An Active Directory _______ consists of one or more separate domain trees.

Back 33

Forest

Front 34

What is a container object that functions in a subordinate capacity to a domain, and still inherits policies and permissions from its parent objects?

Back 34

Organizational Unit

Front 35

Resource access for individuals takes place through their ______.

Back 35

user accounts

Front 36

What are the two built-in user accounts created on a computer running Windows Server 2012 R2

Back 36

administrator and guest

Front 37

What do you call the process of confirming a user's identity by using a known value such as a password, a smart card, or a fingerprint?

Back 37

Authentication

Front 38

The LDIFDE.exe utility is most similar to what other utility?

Back 38

CSVDE.exe

Front 39

Which of the following guidelines are NOT best practice for securing the Administrator account?

Back 39

Using the Administrator account for daily, non-Administrative tasks.

Front 40

What user creation tool incorporates new features such as the Active Directory Recycle Bin and fine-grained password policies?

Back 40

Active Directory Administrative Center (ADAC)

Front 41

To perform an offline domain join, how many times would an administrator run the Djoin.exe command?

Back 41

Two

Front 42

What would be a sufficient user account to provide temporary access to the network for a user such as a vendor representative or a temporary employee?

Back 42

Guest

Front 43

What graphical tool can create user and computer accounts and was redesigned for Windows Server 2012?

Back 43

Active Directory Administrative Center (ADAC)

Front 44

Which of the following is a PowerShell cmdlet for creating user objects?

Back 44

New-ADUser

Front 45

Which of the following is NOT a group scope?

Back 45

Security groups

Front 46

Of the key reasons for creating organizational units, which of the following is NOT one of them?

Back 46

Assigning permissions to network resources

Front 47

Within a domain, the primary hierarchical building block is the _______.

Back 47

Organizational unit

Front 48

The delegation of Control Wizard is capable of ________ permissions.

Back 48

Granting

Front 49

An administrator needs to grant an e-mail distribution group of 100 members access to a database, how would the administrator proceed? The e-mail group is obsolete and can be dissolved.

Back 49

Convert the distribution group to a security group and then assign the group access permissions.

Front 50

What is the group scope for Domain Admins, Domain Controllers, and Domain Users default groups?

Back 50

Global

Front 51

Which of the following is NOT an example of a special identity?

Back 51

Dialup Service

Front 52

What are the different kinds of groups?

Back 52

There are two types: security and distribution; and there are three group scopes: domain local, global, and universal.

Front 53

What command-line utility allows administrators to modify a group's type and scope as well as add or remove members?

Back 53

Dsmod.exe

Front 54

Which of these groups would an administrator use to assign permissions to resources in the same domain?

Back 54

Domain local groups.

Front 55

Which of these groups is not related to security and cannot have permissions assigned to it?

Back 55

Distribution groups

Front 56

What is the proper term for associating a Group Policy to a set of AD DS objects

Back 56

Linking

Front 57

The three types of Group Policy Objects (GPO's) include local, domain and _______.

Back 57

Starter

Front 58

Configuring a Central Store of ADMX files help solve the problem of _______.

Back 58

"SYSVOL bloat"

Front 59

What is the Microsoft Management Console (MMC) snap-in that you use to create GPO's and manage their deployment to AD DS objects?

Back 59

Group Policy Management console

Front 60

Group Policy settings are divided into two subcategories: User Configuration and Computer Configuration. Each of those two are further organized into three subnodes. What are the three?

Back 60

Software settings, Windows settings, and Administrative Templates

Front 61

What is the technique called that you can modify the default permission assignments so that only certain users and computers receive the permissions and, consequently, the settings in the GPO?

Back 61

security filtering

Front 62

What is the order in which Windows systems receiving and process multiple GPO's?

Back 62

LSDOU(local, site, domain, then OU)

Front 63

Local GPO's contain fewer options than domain GPO's. Local GPO's do not support ________.

Back 63

Folder redirection or Group Policy software installation.

Front 64

If creating a Local Group Policy Object, then a secondary GPO, then a tertiary GPO, what policy settings are included in each GPO?

Back 64

The first GPO contains both Computer Configuration and User Configuration settings, while the secondary and tertiary GPOs contain only User Configuration Settings

Front 65

What nonlocal GPO has its properties stored in the Active Directory object Group Policy container (GPC), as well as a Group Policy template located in the SYSVOL share?

Back 65

domain GPO

Front 66

What capability allows you to create specific GPO settings for one or more local users configured on a workstation?

Back 66

multiple local GPOs

Front 67

What are the two categories of security settings within Group Policy? Select two answers.

Back 67

1. User

2. Computer

Front 68

What are the three primary event logs?

Back 68

Application, Security, and System

Front 69

What is the default size for each of the three Event logs?

Back 69

16,384 KB

Front 70

What is a collection of configuration settings stored as a text file with an .inf extension?

Back 70

Security template

Front 71

When does Windows apply User Configuration policies by default?

Back 71

As the user logs in

Front 72

You create a GPO that contains computer settings, but not user settings. What can you do to quicken GPO processing?

Back 72

You can disable the setting area that is not configured for faster processing.

Front 73

What did Microsoft introduce in Windows Server 2008, which is used to ensure users with administrative privileges still operate routing tasks as standard users?

Back 73

User Account Control (UAC)

Front 74

How are most Group Policy settings applied or reapplied?

Back 74

At the refresh interval

Front 75

What are the two interfaces available for creating and managing user accounts in Windows Server 2012 R2?

Back 75

User Accounts control panel and the Local Users and Groups snap-in for MMC

Front 76

What tool for creating new users is only valid while the Windows Server 2012 R2 computer is part of a workgroup and not joined to AD DS domain?

Back 76

User Accounts Control Panel

Front 77

What tool for user creation provides full access to all local user and group accounts on the computer?

Back 77

Local Users and Groups snap-in

Front 78

What service works with Group Policy to install, upgrade, patch, or remove software applications?

Back 78

Windows Installer

Front 79

When configuring a GPO to deploy a software package, what is the difference between assigning and publishing the application?

Back 79

Assigning forces the application, whereas publishing provides the option to install

Front 80

After deploying software by GPO using the Assigned option, where is the package made available for the user?

Back 80

Start menu or desktop

Front 81

Not all software on the market provides .msi support. What is your best option to use Windows Installer to assign and publish the software?

Back 81

Repackage the software for Windows Installer

Front 82

In what Group Policy objects container are AppLocker settings located?

Back 82

Computer Configuration\Windows Settings\Security Settings\Application Control Policies\AppLocker (this is the longest answer of the choices given)

Front 83

How does AppLocker handle all executables, installer packages, and scripts by default?

Back 83

AppLocker blocks all by default, except for those specified in Allow rules

Front 84

What are the three default security levels within software restriction policies?

Back 84

Unrestricted, Disallowed, and Basic User

Front 85

What is the most common way to implement software restrictions policies?

Back 85

Linking Group Policy objects to Active Director Domain Services containers, so that you can apply their policy settings to several computers simultaneously

Front 86

When installing software using Group Policy, what file or files does an administrator use?

Back 86

Windows Installer package files, or .msi files-modifications to the package files require transform files, or .mst files. Further, patch files are designated as .msp files. (longest available answer)

Front 87

Software restriction relies on four types of rules to specify which programs can or cannot run. What type identifies software by its directory where the application is stored in the file system?

Back 87

Path

Front 88

Software restriction relies on four types of rules to specify which programs can or cannot run. What type enables Windows Installer packages to be installed only if they come from a trusted area of the network?

Back 88

Network Zone

Front 89

Firewall rules function in two ways: admit all traffic, except that which conforms to the applied rules, and secondly, block all traffic, except that which conforms to the applied rules. How does the Windows Firewall work for inbound traffic and for outbound traffic?

Back 89

Inbound - block all, Outbound - permit all

Front 90

Windows Firewall uses three profiles to represent the type of network to which the server is connected. What are the three profiles?

Back 90

Domain, Private, and Public

Front 91

What does the term "filter" refer to in the Windows Firewall With Advanced Security console?

Back 91

The ability to display inbound or outbound rules according to a profile (longest available answer)

Front 92

What tool offers more flexibility in creating rules compared with the Windows Firewall interface under Control Panel?

Back 92

Windows Firewall With Advanced Security snap-in for the Microsoft Management console

Front 93

By exporting the Windows Firewall policy, you have a file with a .wfw extension that contains _______.

Back 93

all its rules, including the preconfigured rules and the ones you have created or modified

Front 94

Windows Firewall allows an administrator to import and export firewall rules. What are the rules' file extension

Back 94

.wfw

Front 95

You can configure the Windows Firewall to allow or block specific________.

Back 95

ports, protocols, applications, users, and IP address ranges

Front 96

What is the primary objective of firewall?

Back 96

To permit traffic in and out for legitimate users, and to block the rest.

Front 97

When creating a firewall execption, what is the difference between opening a port and allowing an application through?

Back 97

Allowing an application opens the specified port only while the program is running, and thus is less risky.

Front 98

What parameter in the Windows Firewall New Inbound Rule Wizard specifies the IP address range of local and remote systems to which the rule applies?

Back 98

Scope

Front 99

What parameter in the Windows Firewall New Inbound Rule Wizard specifies what the firewall should do when a packet matches the rule?

Back 99

Action

Front 100

What is a key difference between a domain tree hierarchy and the organizational unit (OU) hierarchy within a domain?

Back 100

Inheritance