Case Studies & Practical Application Flashcards

Adventure Works is designing an IP address management strategy for 50 sites. They need centralized visibility into all DHCP and DNS data across all sites. Which Windows Server feature provides this?

Answer: Implement IP Address Management (IPAM) in Windows Server

Windows Server IPAM provides centralized monitoring, auditing, and management of DHCP and DNS across multiple servers and sites.

A university needs to allow students to bring their own devices and connect to the campus network, but student devices must be placed in a restricted VLAN with internet-only access. Which technology should they implement?

Answer: 802.1X authentication with RADIUS policies redirecting non-compliant devices to the restricted VLAN

802.1X with RADIUS (NPS) allows dynamic VLAN assignment based on authentication results, placing unknown devices in a restricted VLAN.

A company runs Windows Server 2012 R2 Hyper-V and wants to allow VMs to use more memory than is physically installed by enabling memory overcommitment. Which Hyper-V feature enables this?

Answer: Dynamic Memory with Smart Paging

Dynamic Memory with Smart Paging allows VMs to burst beyond physical RAM using disk-based paging as a last resort.

Datum Corporation must ensure that remote employees can access internal applications securely without installing a VPN client. The solution must use SSL and provide access through a web browser. Which role should they deploy?

Answer: Web Application Proxy publishing internal applications via AD FS

Web Application Proxy with AD FS publishes internal web applications over HTTPS, accessible via a browser without a VPN client.

A law firm stores sensitive documents on a file server. They need to ensure that documents labeled 'Confidential' cannot be emailed outside the organization, even if a user downloads the file to their laptop. Which technology enforces this?

Answer: Active Directory Rights Management Services (AD RMS) with file classification

AD RMS embeds persistent usage policies within documents that travel with the file, restricting actions like forwarding via email regardless of location.

A company's Help Desk team needs to be able to reset passwords and unlock accounts in a specific OU, but should have no other administrative rights. What is the most precise way to grant this?

Answer: Delegate control on the specific OU for password reset and account unlock permissions only

Delegation of Control at the OU level grants only the specified permissions (reset password, unlock account) without broader administrative rights.

A manufacturing company requires that servers on the production floor cannot communicate with the corporate network but must still receive Windows Updates. Which architecture achieves this with minimal internet exposure?

Answer: Enable automatic updates via WSUS with production servers in an isolated network segment with only outbound access to the WSUS server

WSUS in an isolated network allows production servers to pull updates from an internal server using only outbound connections, with no direct internet access.