Case Studies & Practical Application Flashcards

Woodgrove Bank has a Windows Server 2012 R2 environment and wants to implement just-in-time (JIT) administration so that admin privileges are granted only when needed and automatically revoked after a set period. Which capability supports this?

Answer: Privileged Identity Management (PIM) using Active Directory Bastion Forest

PIM with a Bastion Forest in Active Directory provides time-limited, just-in-time elevation of administrative privileges.

A company is designing a new virtualization environment. They need to ensure that critical VMs automatically restart on another host if the physical host fails, without any manual intervention. What should they deploy?

Answer: Windows Server Failover Clustering with Hyper-V roles on cluster nodes

Failover Clustering with Hyper-V automatically restarts VMs on surviving cluster nodes when a host fails.

An organization needs to provide external partners with access to an internal web application. Partners should authenticate using their own corporate credentials without requiring accounts in the organization's AD. Which solution is most appropriate?

Answer: Deploy Web Application Proxy with AD FS claims-based authentication

AD FS with Web Application Proxy enables federated identity so partners authenticate with their own credentials via claims.

Northwind Traders' IT team discovers that their DHCP server is a single point of failure. They want to ensure IP address leases continue if the primary DHCP server goes offline. What is the recommended Windows Server solution?

Answer: Deploy DHCP Failover between two DHCP servers

DHCP Failover (introduced in Windows Server 2012) synchronizes lease information between two servers, providing hot standby or load-sharing.

A retailer with 200 stores needs to deploy a new POS application to all store servers overnight without impacting store operations during business hours. Which System Center tool and feature should they use?

Answer: SCCM with a maintenance window configured for off-hours deployment

SCCM maintenance windows restrict software deployments to approved time periods, ensuring installations occur only outside business hours.

A company's security policy requires that all communications between its web servers and internal application servers be encrypted, but certificates must be issued by an internal CA. Which Windows Server component should they deploy?

Answer: Active Directory Certificate Services (AD CS) with an Enterprise CA

AD CS with an Enterprise CA issues and manages internally-trusted certificates integrated with Active Directory for automated enrollment.

After a recent ransomware incident, a company wants to ensure that even if an administrator account is compromised, the attacker cannot delete backup data stored on Windows Server. Which feature should be implemented?

Answer: Use Windows Server Backup to WORM-capable storage with immutable backup policies

WORM (Write Once Read Many) storage with immutable policies prevents backup data from being deleted or modified even by privileged accounts.