MCSE Windows Server Administration & Group Policy 1 — Questions and Answers
Question 1: Which Windows Server role must be installed before you can promote a server to a Domain Controller using Server Manager?
- DNS Server
- Active Directory Domain Services (Correct answer)
- Active Directory Certificate Services
- Remote Desktop Services
Correct answer: Active Directory Domain Services
Active Directory Domain Services (AD DS) is the prerequisite role that must be installed before running the AD DS Configuration Wizard to promote a server to a Domain Controller.
Question 2: An administrator needs to configure a GPO so that settings apply only to computers in the Finance OU, not to users in the same OU. Which GPO processing option should be used?
- Loopback Processing in Replace mode (Correct answer)
- Block Inheritance
- WMI Filtering
- Enforced (No Override)
Correct answer: Loopback Processing in Replace mode
Loopback Processing in Replace mode causes the computer's GPOs to apply to all users who log on to that computer, effectively overriding user-side GPOs with computer-side settings.
Question 3: Which tool is used to perform an authoritative restore of deleted Active Directory objects without restoring the entire AD database?
- Windows Server Backup
- Ntdsutil
- Active Directory Recycle Bin (Correct answer)
- ADSI Edit
Correct answer: Active Directory Recycle Bin
The Active Directory Recycle Bin (enabled via Active Directory Administrative Center or PowerShell) allows deleted objects to be restored with all attributes intact without requiring a full authoritative restore.
Question 4: What is the default interval at which Group Policy is refreshed on domain member computers (non-domain controllers)?
- 15 minutes
- 30 minutes
- 60 minutes
- 90 minutes with a 0-30 minute random offset (Correct answer)
Correct answer: 90 minutes with a 0-30 minute random offset
By default, Group Policy refreshes every 90 minutes with a random offset of 0 to 30 minutes to prevent all machines from refreshing simultaneously.
Question 5: Which Windows Server feature enables administrators to install server roles and features on remote servers, including offline VHDs, directly from Server Manager?
- Remote Server Administration Tools (RSAT) (Correct answer)
- Server Manager Remote Management
- Remote Differential Compression
- Windows Deployment Services
Correct answer: Remote Server Administration Tools (RSAT)
RSAT allows administrators to manage roles and features on remote Windows Servers, including adding roles/features to offline VHDs, from a local Server Manager console.
Question 6: A GPO linked to the domain root has 'Enforced' set to enabled. A child OU has 'Block Inheritance' configured. What is the result?
- Block Inheritance prevents the enforced GPO from applying
- The enforced GPO still applies to the child OU despite Block Inheritance (Correct answer)
- Both policies cancel each other out and no GPO applies
- The child OU's local GPO takes precedence
Correct answer: The enforced GPO still applies to the child OU despite Block Inheritance
An Enforced (No Override) GPO cannot be blocked by Block Inheritance; the enforced GPO will always apply down the hierarchy.
Question 7: Which Windows Server 2019 feature provides a lightweight version of Windows Server that has no GUI and is managed remotely, with a smaller attack surface?
- Server Core (Correct answer)
- Nano Server
- Hyper-V Server
- Windows Server Essentials
Correct answer: Server Core
Server Core is a minimal installation of Windows Server with no GUI shell, reducing the attack surface, patching requirements, and resource consumption while supporting full server roles.
MCSE Windows Server Administration & Group Policy 1
Which Windows Server role must be installed before you can promote a server to a Domain Controller using Server Manager?