Professional Standards & Competencies Flashcards
7 cards from real Installing and Configuring Windows Server 2012 Exam practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Professional Standards & Competencies flashcards as text
An administrator discovers unauthorized software installed on a Windows Server 2012 R2 production server. According to incident response best practices, what should be done FIRST?
Answer: Document the discovery, isolate the server, and follow the incident response plan
Incident response best practices require documenting the incident, containing the threat by isolating the affected system, and following the organization's formal incident response plan.
A Windows Server 2012 administrator needs to ensure role separation in the data center. Which built-in Windows Server 2012 feature enforces this by limiting what tasks each administrator can perform?
Answer: Role-Based Access Control (RBAC) via Active Directory delegation
Active Directory delegation allows organizations to grant specific administrative permissions to specific users or groups, enforcing role separation without granting full Domain Admin rights.
Which Windows Server 2012 R2 feature should an administrator use to prevent unauthorized applications from running on a server, supporting application whitelisting?
Answer: AppLocker
AppLocker allows administrators to define rules specifying which applications are allowed to run, implementing application whitelisting to prevent unauthorized software execution.
An administrator is tasked with reducing the number of open inbound ports on a Windows Server 2012 R2 server per a security hardening standard. Which tool should be used?
Answer: Windows Firewall with Advanced Security
Windows Firewall with Advanced Security allows administrators to create granular inbound and outbound rules to block unnecessary ports and restrict network access.
According to Microsoft best practices, what should an administrator do before applying a cumulative update to a production Windows Server 2012 R2 domain controller?
Answer: Test the update in a non-production environment and take a system state backup
Best practices require testing updates in a non-production environment and performing a system state backup before applying changes to production domain controllers.
A Windows Server 2012 administrator needs to maintain accurate asset inventory for licensing compliance. Which built-in capability can report installed roles, features, and software?
Answer: Server Manager's All Servers view and PowerShell Get-WindowsFeature
Server Manager provides a centralized view of installed roles and features across managed servers, and Get-WindowsFeature cmdlet can programmatically enumerate installed components for inventory purposes.
Which Windows Server 2012 R2 feature provides a structured mechanism for administrators to request and receive temporary elevated permissions, reducing standing privilege risks?
Answer: Privileged Access Workstation (PAW) combined with Just-In-Time (JIT) administration concepts
Privileged Access Workstations combined with JIT administration reduce the window of exposure by granting elevated access only when needed and revoking it afterward, minimizing standing privilege risks.