Microsoft 70-410: Installing and Configuring Windows Server 2012 — Questions and Answers

Question 1: What is a corrective action in Installing and Configuring Windows Server 2012 Exam quality systems?

Blaming individuals for errors
Temporary workarounds only
A systematic response to eliminate the cause of a detected nonconformity and prevent recurrence (Correct answer)
Ignoring minor issues

Correct answer: A systematic response to eliminate the cause of a detected nonconformity and prevent recurrence

This is fundamental to Installing and Configuring Windows Server 2012 Exam practice. A systematic response to eliminate the cause of a detected nonconformity and prevent recurrence represents the professional standard for quality in the Installing and Configuring Windows Server 2012 Exam certification framework.

Question 2: A Windows Server 2012 DHCP server is not assigning IP addresses. You verify the scope is active and has available addresses. What should you check next?

Whether the subnet mask is correct
Whether the DHCP server is authorized in Active Directory (Correct answer)
Whether the default gateway is reachable
Whether DNS is running

Correct answer: Whether the DHCP server is authorized in Active Directory

In an Active Directory environment, a DHCP server must be authorized in AD before it can assign IP addresses to clients.

Question 3: What technology does Windows Server 2012 use to deduplicate redundant data on a volume to save disk space?

Single Instance Storage
Compression
Data Deduplication (Correct answer)
Sparse Files

Correct answer: Data Deduplication

Data Deduplication, a role service in Windows Server 2012, identifies and removes redundant data chunks on a volume, storing only unique chunks to save disk space.

Question 4: According to Windows Server 2012 deployment research, which Sysprep generalize option must be used before capturing an image for deployment to different hardware?

/quiet
/audit
/oobe
/generalize (Correct answer)

Correct answer: /generalize

Sysprep /generalize removes hardware-specific settings and resets the SID so the image can be deployed to different hardware without conflicts.

Question 5: How should Installing and Configuring Windows Server 2012 Exam professionals handle conflicts with stakeholders?

Avoid all conflict
Address issues professionally through active listening, finding common ground, and seeking resolution (Correct answer)
Ignore stakeholder concerns
Escalate immediately to management

Correct answer: Address issues professionally through active listening, finding common ground, and seeking resolution

This is fundamental to Installing and Configuring Windows Server 2012 Exam practice. Address issues professionally through active listening, finding common ground, and seeking resolution represents the professional standard for communication in the Installing and Configuring Windows Server 2012 Exam certification framework.

Question 6: A Windows Server 2012 administrator needs to audit all failed logon attempts on a domain controller. Which Group Policy setting should be configured?

Account Logon Events - Failure (Correct answer)
Directory Service Access - Failure
Account Management - Failure
Logon Events - Failure

Correct answer: Account Logon Events - Failure

Auditing Account Logon Events tracks authentication attempts processed by domain controllers, capturing failed logon events.

Question 7: A Windows Server 2012 administrator wants to get approval to enable Remote Desktop access for a new team. Which justification is most persuasive to management?

Request approval verbally without any written documentation
Quantify productivity gains and reduced travel costs, and explain the security controls that will be applied (Correct answer)
Mention that competitors are already using Remote Desktop
Explain the RDP protocol technical architecture in detail

Correct answer: Quantify productivity gains and reduced travel costs, and explain the security controls that will be applied

Management approves IT requests more readily when they see a clear business benefit paired with a security assurance.

Question 8: How do Installing and Configuring Windows Server 2012 Exam professionals transfer knowledge from training to practice?

By passing the certification exam only
Training and practice are unrelated
Through supervised practice, mentoring, gradual independence, and ongoing feedback (Correct answer)
Knowledge transfers automatically

Correct answer: Through supervised practice, mentoring, gradual independence, and ongoing feedback

This is fundamental to Installing and Configuring Windows Server 2012 Exam practice. Through supervised practice, mentoring, gradual independence, and ongoing feedback represents the professional standard for practical in the Installing and Configuring Windows Server 2012 Exam certification framework.

Question 9: Which Windows Server 2012 feature enables administrators to manage servers remotely using a graphical interface from a single console?

Windows Admin Center
Remote Assistance
Remote Desktop Services
Server Manager (Correct answer)

Correct answer: Server Manager

Server Manager in Windows Server 2012 allows centralized management of multiple remote servers from one console.

Question 10: An administrator needs stakeholder approval for purchasing additional Windows Server 2012 CALs. Which document best supports this request to management?

A list of installed Windows features
A network topology diagram
A licensing compliance report showing current CAL usage versus the number of connected devices or users (Correct answer)
The server hardware specification sheet

Correct answer: A licensing compliance report showing current CAL usage versus the number of connected devices or users

A CAL usage report demonstrates the compliance gap and business need, giving management the data needed to justify the purchase.

Question 11: After completing a Windows Server 2012 storage migration, what should the administrator send to stakeholders to confirm successful completion?

A screenshot of the server's IP configuration
A post-implementation review report with verification results, any issues encountered, and final system status (Correct answer)
Only a verbal confirmation during the next team meeting
An automated ping response from the server

Correct answer: A post-implementation review report with verification results, any issues encountered, and final system status

A post-implementation review documents that the change succeeded, captures lessons learned, and provides stakeholders with formal closure.

Question 12: What is the maximum storage capacity of a .vhdx virtual hard disk in Hyper-V 2012?

128 TB
64 TB (Correct answer)
2 TB
16 TB

Correct answer: 64 TB

The .vhdx format supports virtual hard disks up to 64 TB, compared to the 2 TB ceiling of the older .vhd format.

Question 13: What role does peer review play in Installing and Configuring Windows Server 2012 Exam practice?

It replaces formal certification
It is only for beginners
It provides quality assurance and professional development through collegial evaluation (Correct answer)
It creates unnecessary competition

Correct answer: It provides quality assurance and professional development through collegial evaluation

This is fundamental to Installing and Configuring Windows Server 2012 Exam practice. It provides quality assurance and professional development through collegial evaluation represents the professional standard for professional standards in the Installing and Configuring Windows Server 2012 Exam certification framework.

Question 14: Which type of Hyper-V migration moves a running virtual machine to another host with no user-visible downtime?

Quick migration
Cold migration
Live migration (Correct answer)
Storage migration

Correct answer: Live migration

Live Migration transfers a powered-on VM between Hyper-V hosts by copying memory state while the VM continues running, resulting in no downtime.

Question 15: What is the default TTL for DNS records created in a Windows Server 2012 DNS zone?

1 day
7 days
15 minutes
1 hour (Correct answer)

Correct answer: 1 hour

The default TTL for DNS records in Windows Server 2012 is 1 hour (3600 seconds), controlling how long resolvers cache the record.

Question 16: A Windows Server 2012 R2 administrator is preparing for a third-party security audit. Which log should be reviewed to demonstrate that privileged account usage is being monitored?

System Event Log only
Application Event Log
DNS Debug Log
Security Event Log with Account Logon and Privilege Use auditing enabled (Correct answer)

Correct answer: Security Event Log with Account Logon and Privilege Use auditing enabled

The Security Event Log, when configured with Account Logon and Privilege Use audit policies, records all privileged account activities and provides the evidence auditors require.

Question 17: What is the maximum number of virtual processors (vCPUs) that can be assigned to a single VM in Windows Server 2012 Hyper-V?

64 (Correct answer)
32
320
16

Correct answer: 64

Windows Server 2012 Hyper-V supports up to 64 virtual processors per virtual machine, doubling the 32 vCPU limit of Windows Server 2008 R2.

Question 18: According to Windows Server 2012 capacity planning research, which metric is the most reliable leading indicator of memory pressure on a server?

Pages/sec consistently above 20 (Correct answer)
Page Faults/sec exceeding 1000
Available MBytes dropping below 100 MB
Committed Bytes exceeding physical RAM

Correct answer: Pages/sec consistently above 20

Pages/sec above 20 sustained over time indicates excessive paging activity and is the evidence-based leading indicator of a memory bottleneck.

Question 19: Evidence-based Windows Server 2012 network research recommends enabling which feature on server NICs to improve throughput for large file transfers?

Large Send Offload (LSO)
Interrupt Moderation
Receive Segment Coalescing (RSC)
Jumbo Frames (Correct answer)

Correct answer: Jumbo Frames

Jumbo Frames (MTU 9000) reduce per-packet overhead and CPU usage during large file transfers, improving throughput on networks where all devices support them.

Question 20: For FedRAMP compliance, you must ensure all remote administrative connections are encrypted. Which Windows Server 2012 feature should be used instead of Telnet or unencrypted RDP?

Telnet Server role
VNC without encryption
RDP with Network Level Authentication (NLA) and TLS encryption enforced (Correct answer)
HTTP-based management tools only

Correct answer: RDP with Network Level Authentication (NLA) and TLS encryption enforced

Enforcing NLA and TLS on RDP ensures credentials and sessions are encrypted, meeting FedRAMP encryption-in-transit requirements.

Question 21: Which Hyper-V storage type provides the best I/O performance for intensive workloads by bypassing virtualization overhead?

Fixed-size disk
Differencing disk
Dynamically expanding disk
Pass-through disk (Correct answer)

Correct answer: Pass-through disk

Pass-through disks allow VMs to access physical storage directly without any virtual disk file abstraction, delivering the best possible I/O performance.

Question 22: A server administrator identifies a critical vulnerability in Windows Server 2012 that requires an emergency patch. Who should be the first stakeholder contacted?

All end users immediately via broadcast email
The hardware vendor
The IT security officer or CISO to assess risk and authorize emergency change procedures (Correct answer)
The domain registrar

Correct answer: The IT security officer or CISO to assess risk and authorize emergency change procedures

Security vulnerabilities require risk assessment and authorized change approval before any action, making the security officer the first contact.

Question 23: Your organization must comply with HIPAA. Which Windows Server 2012 feature best helps enforce data encryption for Protected Health Information (PHI) stored on disk?

BitLocker Drive Encryption (Correct answer)
Encrypting File System (EFS)
NTFS permissions
Windows Firewall with Advanced Security

Correct answer: BitLocker Drive Encryption

BitLocker Drive Encryption provides full-volume encryption, protecting PHI on disk even if the physical drive is removed.

Question 24: A server administrator must deploy a Windows Server 2012 R2 role in a production environment. According to change management best practices, what should be done FIRST?

Deploy the role immediately and document afterward
Submit a change request and obtain approval before making changes (Correct answer)
Test the role in production during off-peak hours
Notify users after the change is complete

Correct answer: Submit a change request and obtain approval before making changes

Change management best practices require submitting a formal change request and obtaining approval before making any modifications to a production environment.

Question 25: When setting up a Storage Space with two-way mirror resiliency, what is the minimum number of physical disks required?

2 (Correct answer)
1
5
3

Correct answer: 2

A two-way mirror Storage Space requires a minimum of 2 physical disks because it maintains two copies of the data, one on each disk.

Question 26: Which Windows Server 2012 role provides centralized management of distributed file system namespaces and replication?

BranchCache
DFS (Distributed File System) (Correct answer)
File and Storage Services
Work Folders

Correct answer: DFS (Distributed File System)

DFS (Distributed File System) provides namespace aggregation and DFS Replication (DFSR) to synchronize folder content across multiple servers.

Question 27: An organization's risk appetite is described as 'conservative.' How should this influence security control selection for Windows Server 2012 deployments?

Implement robust, layered controls even when risk probability is low (Correct answer)
Implement only mandatory compliance controls to minimize cost
Accept all risks below a high severity threshold
Deploy controls only after a security incident occurs

Correct answer: Implement robust, layered controls even when risk probability is low

A conservative risk appetite means the organization prefers stronger controls and less tolerance for uncertainty, even for lower-probability risks.

Question 28: An organization's security policy requires that all Windows Server 2012 administrator actions be traceable to individual users. Which configuration BEST satisfies this requirement?

Enable auto-logon with the Administrator account
Create one service account for all administrative tasks
Disable the built-in Administrator account and use named admin accounts with audit policies (Correct answer)
Share the Administrator account credentials with all IT staff

Correct answer: Disable the built-in Administrator account and use named admin accounts with audit policies

Disabling the shared built-in Administrator account and requiring named individual accounts with audit logging ensures all administrative actions can be attributed to a specific person.

Question 29: Which Windows Server 2012 feature allows you to install server roles and features without using the graphical Server Manager interface?

Windows PowerShell with Install-WindowsFeature
Deployment Image Servicing and Management (DISM)
Both A and B (Correct answer)
Neither A nor B

Correct answer: Both A and B

Both Install-WindowsFeature in PowerShell and DISM.exe can install roles/features without the graphical Server Manager interface.

Question 30: A QA checklist item requires verifying that the Windows Server 2012 firewall is active on all three profiles. Which PowerShell command checks this?

Show-NetFirewallRule -All
Get-NetFirewallProfile | Select Name, Enabled (Correct answer)
Get-FirewallStatus -All
netsh firewall show state

Correct answer: Get-NetFirewallProfile | Select Name, Enabled

Get-NetFirewallProfile retrieves the Domain, Private, and Public firewall profiles and their Enabled status in a single command.

Question 31: A junior administrator asks how to verify that a Windows Server 2012 R2 installation meets organizational security baselines. What is the BEST tool to use?

Microsoft Baseline Security Analyzer (MBSA) (Correct answer)
Task Manager
Disk Cleanup
Resource Monitor

Correct answer: Microsoft Baseline Security Analyzer (MBSA)

Microsoft Baseline Security Analyzer (MBSA) scans Windows systems for missing security updates and common security misconfigurations against Microsoft best practices.

Question 32: An administrator needs to extend a Windows Server 2012 Active Directory schema to support a new application. Which tool is used to perform this task?

Ntdsutil
Active Directory Users and Computers
Active Directory Schema snap-in (schmmgmt.msc) (Correct answer)
ADSI Edit

Correct answer: Active Directory Schema snap-in (schmmgmt.msc)

The Active Directory Schema snap-in (schmmgmt.msc) provides the GUI interface for extending the AD schema with new object classes and attributes.

Question 33: When using Active Directory Sites and Services, what object defines the network boundaries of an Active Directory site?

Domain Controller
Connection Object
Subnet (Correct answer)
Site Link

Correct answer: Subnet

Subnets are associated with Active Directory sites to define which IP address ranges belong to each site.

Question 34: Which Windows Server 2012 security feature prevents users from running unauthorized applications by allowing only approved executables, scripts, and installers?

User Account Control
Windows Defender
AppLocker (Correct answer)
Software Restriction Policies

Correct answer: AppLocker

AppLocker in Windows Server 2012 provides rule-based application control using publisher, path, or file hash conditions to whitelist allowed software.

Question 35: Which Windows Server 2012 logging feature should an administrator configure to maintain an audit trail of who accessed sensitive files on a file server?

Event Forwarding subscriptions only
Performance Monitor counters
Object Access Auditing via Group Policy (Correct answer)
Windows Error Reporting

Correct answer: Object Access Auditing via Group Policy

Object Access Auditing, configured through Group Policy and enabled on specific files/folders via SACL, records who accessed or attempted to access sensitive resources.

Question 36: Which Windows Server 2012 audit policy category should be enabled to detect unauthorized privilege escalation attempts?

Privilege Use (Correct answer)
Object Access
Account Management
Policy Change

Correct answer: Privilege Use

The Privilege Use audit category tracks when users exercise sensitive privileges, helping detect escalation attempts.

Question 37: Which Windows Server 2012 feature should be used to validate that critical system files have not been altered from their original state?

Disk Management
System File Checker (sfc /scannow) (Correct answer)
Defragmenter
Chkdsk

Correct answer: System File Checker (sfc /scannow)

System File Checker (sfc /scannow) scans and verifies the integrity of protected Windows system files and replaces corrupted files.

Question 38: An administrator is preparing documentation for a new Windows Server 2012 deployment. Which item is MOST critical to include for disaster recovery purposes?

A list of installed desktop shortcuts
A log of failed login attempts during setup
Baseline configuration and network topology diagrams (Correct answer)
The server's wallpaper and theme settings

Correct answer: Baseline configuration and network topology diagrams

Baseline configuration documentation and network topology diagrams are essential for disaster recovery, enabling administrators to restore servers to their original state.

Question 39: What is reflective practice in Installing and Configuring Windows Server 2012 Exam professional development?

Writing personal diaries
Avoiding past mistakes
Systematically examining experiences to gain insight and improve future practice (Correct answer)
Only reflecting on successes

Correct answer: Systematically examining experiences to gain insight and improve future practice

This is fundamental to Installing and Configuring Windows Server 2012 Exam practice. Systematically examining experiences to gain insight and improve future practice represents the professional standard for practical in the Installing and Configuring Windows Server 2012 Exam certification framework.

Question 40: Which type of risk assessment relies on expert judgment and experience rather than numerical data to evaluate threats?

Quantitative
Qualitative (Correct answer)
Statistical
Hybrid

Correct answer: Qualitative

Qualitative risk assessment uses expert judgment and descriptive categories rather than precise numerical calculations.

Question 41: How do Installing and Configuring Windows Server 2012 Exam professionals establish measurable quality objectives?

By defining specific, measurable, achievable, relevant, and time-bound quality targets (Correct answer)
Through subjective assessment
Using vague goals
By comparing to competitors only

Correct answer: By defining specific, measurable, achievable, relevant, and time-bound quality targets

This is fundamental to Installing and Configuring Windows Server 2012 Exam practice. By defining specific, measurable, achievable, relevant, and time-bound quality targets represents the professional standard for quality in the Installing and Configuring Windows Server 2012 Exam certification framework.

Question 42: A Windows Server 2012 administrator needs to notify department heads about a scheduled Active Directory maintenance window. Which notification method best ensures acknowledgment from all stakeholders?

Update the intranet homepage only
Verbally notify one manager and assume word will spread
Post a note on the server room door
Send an email and request read receipts (Correct answer)

Correct answer: Send an email and request read receipts

Email with read receipts creates a documented trail and confirms that each stakeholder received and opened the notification.

Question 43: You want to configure a Windows Server 2012 server as an iSCSI target. Which feature must be installed?

File Server role with iSCSI Target Server role service (Correct answer)
Multipath I/O (MPIO)
iSCSI Initiator
Network Policy Server

Correct answer: File Server role with iSCSI Target Server role service

The iSCSI Target Server role service (part of the File and Storage Services role) enables a Windows Server 2012 machine to act as an iSCSI target.

Question 44: Which type of trust is automatically created when a child domain is added to an existing Active Directory forest?

Shortcut trust
Parent-child trust (Correct answer)
Forest trust
External trust

Correct answer: Parent-child trust

Parent-child trusts are automatically created as two-way transitive trusts when a new child domain is added within an existing domain tree.

Question 45: A security administrator needs to quantify the potential financial loss from a server failure. Which metric represents the estimated monetary loss from a single occurrence of a risk event?

Annualized Rate of Occurrence (ARO)
Annualized Loss Expectancy (ALE)
Single Loss Expectancy (SLE) (Correct answer)
Return on Security Investment (ROSI)

Correct answer: Single Loss Expectancy (SLE)

Single Loss Expectancy (SLE) represents the monetary loss expected from a single occurrence of a specific risk event.

Question 46: An organization calculates that a data breach has a 20% chance of occurring each year and would cost $500,000. What is the Annualized Loss Expectancy (ALE)?

$1,000,000
$500,000
$250,000
$100,000 (Correct answer)

Correct answer: $100,000

ALE = SLE × ARO = $500,000 × 0.20 = $100,000.

Question 47: An Active Directory forest with the domain contoso.com exists on your network. The forest includes the websites Site1 and Site2, as well as the domains contoso.com and child.contoso.com. The sites and domains are set up as stated in the following table. Users are unable to access Site2 while the connectivity between Site1 and Site2 is down. You must figure out what keeps Site2 users from accessing the child.contoso.com domain. <br> What must you mention?

The placement of the global catalog server
The placement of the infrastructure master
The placement of the domain naming master
The placement of the PDC emulator (Correct answer)

Correct answer: The placement of the PDC emulator

Explanation: <br> The exhibit demonstrates that Site2 lacks a PDC emulator. The RID operations master role and the RID operations master role have a close relationship, therefore this is significant. <br> PDC emulator function.

Question 48: Research on Windows Server 2012 Active Directory replication recommends which site link cost configuration when two sites have unequal bandwidth?

Assign higher cost to the higher-bandwidth link
Set equal costs on all site links
Disable site link bridging
Assign lower cost to the higher-bandwidth link (Correct answer)

Correct answer: Assign lower cost to the higher-bandwidth link

Evidence-based AD design assigns lower site link costs to higher-bandwidth connections so the KCC prefers them for replication traffic routing.

Question 49: A Windows Server 2012 Hyper-V host needs emergency maintenance. The administrator must quickly communicate to stakeholders which virtual machines will be affected. What is the fastest reliable method?

Use a pre-established emergency contact list with phone and email contacts for each VM owner (Correct answer)
Update the ticketing system and assume owners will check it
Send a company-wide broadcast about all systems
Wait until the maintenance is complete before notifying anyone

Correct answer: Use a pre-established emergency contact list with phone and email contacts for each VM owner

A pre-established emergency contact list ensures stakeholders are reached quickly without wasting time searching for contact information during an outage.

Question 50: Evidence-based Windows Server 2012 virtualization guidelines recommend setting Hyper-V virtual machine memory to which configuration for dynamic workloads?

Dynamic Memory with startup and maximum values (Correct answer)
Maximum memory only
Static allocation matching peak demand
Minimum memory only

Correct answer: Dynamic Memory with startup and maximum values

Hyper-V Dynamic Memory, configured with startup and maximum values, allows VMs to consume only what they need, improving host density based on research evidence.

Microsoft 70-410: Installing and Configuring Windows Server 2012

The Microsoft 70-410 exam (MCSA: Windows Server 2012) validates skills in installing, configuring, and administering Windows Server 2012, covering server roles, Hyper-V virtualization, Active Directory, network services, and Group Policy.

Questions

120 min

Time Limit

70%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds