SYSYAD PRELIM QUIZ 2

Gateway

Which component of Windows Admin Center is responsible for managing the connection between the web interface and the managed servers

Use a standard user account

In the context of the least-privilege administration concept, what is the primary recommendation for day-to-day tasks performed by IT administrators?

1.4 GHz

What is the minimum processor speed required to install Windows Server 2019?

Windows Server 2019 Essentials

Which Windows Server 2019 edition is specifically excluded from core-based licensing, instead targeting small businesses with up to 25 users?

Setup.exe

An administrator needs to perform an in-place upgrade to Windows Server 2019. Which file must be executed from the installation media to begin this process?

8

When licensing a server with Windows Server 2019 Standard, what is the minimum number of core licenses required for each physical processor?

Device Guard: HVCI

Which tool is used to leverage virtualization-based security on a Jump server to ensure kernel mode components comply with code integrity policies?

5 GB

What is the approximate minimum disk space footprint for a basic installation of Windows Server Core?

Twice a year

Under the Semi-Annual Channel (SAC) servicing model, how frequently are new features and functionality typically delivered?

PowerShell Direct

Which PowerShell feature allows an administrator to run commands on a virtual machine directly from the host operating system?

To include binaries from the Desktop Experience for improved application support

What is the primary purpose of the 'Server Core App Compatibility Feature on Demand (FOD)'?

Sconfig

Which tool provides a text-based menu with 15 options to perform initial configuration tasks on a Server Core machine?

Remote Server Administration Tools (RSAT

To manage a Windows Server 2019 environment from a computer running Windows 10, which set of tools should an administrator install?

Remote Credential Guard

Which security feature is used on a Jump server to prevent the transfer of remote credentials by utilizing Kerberos protocol version 5 single sign-on tickets?

512 MB

What is the minimum amount of RAM required for a basic installation of Windows Server 2019?

Microsoft Assessment and Planning (MAP) Toolkit

Which free Microsoft tool is used to analyze an organization's inventory and assist in planning for Hyper-V server deployments and Office 2019 upgrades?

16

In the core-based licensing model, how many core licenses must be purchased at minimum for a single physical server?

Cluster Sets

Which Windows Server 2019 feature allows for the creation of large, scale-out clusters and was introduced as a 'new' capability in this version?

Semi-Annual Channel (SAC)

Which servicing channel identifies releases using a version number based on the year and month of the feature release?

Server Manager

A server administrator wants to manage a remote group of servers and monitor the status of services and event logs from a single dashboard. Which built-in tool is best suited for this?

Many third-party line-of-business applications cannot be installed

Which of the following is a primary 'disadvantage' of using the Server Core installation option?

Cmdlet

Which PowerShell command-line unit is defined as a small command that performs a specific function and can be combined or piped together?

Volume Activation Service.

Which activation method allows an organization to use an Active Directory-based service to activate Windows Server installations automatically?

Performing administration tasks only

A Privileged Access Workstation (PAW) should ideally be used for which of the following activities?

Delegation of Control Wizard

Which tool would you use to delegate the specific task of resetting passwords to a non-administrator group in Active Directory?

A major version is released only every two to three years

What is a key benefit of the Long-Term Servicing Channel (LTSC) over the Semi-Annual Channel (SAC)?

SQL Server manager

Which of the following is NOT one of the four modules that comprise the Windows Admin Center application?

Managing devices in a different security zone

What is the primary role of a 'Jump server' in a secure network architecture?

Windows Defender ATP and Exploit Guard

Which new feature in Windows Server 2019 provides host intrusion prevention and detection for zero-day exploits?

Install an SSL certificate

To use the Windows Admin Center, which of the following is a mandatory requirement according to the module review?

Microsoft Deployment Toolkit (MDT)

Which deployment accelerator is described as a 'lightweight tool' used to automate standardized image deployments and unattended setup files?

32 GB

What is the minimum hard drive space requirement specified for installing Windows Server 2019?

Delegate specific rights using the Delegation of Control Wizard

A user group needs to Reset Passwords for an Organizational Unit (OU). According to the principle of least privilege, how should this be handled?

Deduplication for ReFS volumes

Which Windows Server 2019 feature allows for the deduplication of the ReFS file system, previously a limitation in older versions?

Integrated Scripting Environment (ISE)

Which administrative tool is described as a graphical user interface-based tool for running commands and creating, debugging, and testing PowerShell scripts?

2

What is the maximum number of virtual machines that can be run on Windows Server 2019 Standard edition before additional licenses are required?

1

In a Server Core installation, which menu option in the Sconfig tool would you select to join the server to a domain?

Device Guard: Configurable code integrity

Which technology allows administrators to create a custom code integrity policy and specify exactly which software is trusted to run on a jump server?

Windows Admin Center

Which tool is essentially a modular web application comprising modules like Failover Clusters and Windows 10 Clients?

Accept the license agreement

If you perform a 'Clean install' of Windows Server 2019, what must you do immediately after selecting the installation language and architecture?

64-bit

Which specific hardware architecture is required to run Windows Server 2019?

It makes the server much less vulnerable to exploits

What is the primary benefit of the small attack surface in a Server Core installation?

PowerShell Direct

Which PowerShell-based solution enables managing virtual machines even when the VM has no network connectivity or remote management enabled?

Server Manager

Which tool would an administrator use to create a server group for managing multiple servers simultaneously?

They are deleted/removed

What happens to 'personal files and apps' if an administrator chooses 'nothing' during an in-place upgrade to Windows Server 2019?

A small command that performs a specific functior

Which of the following describes a 'cmdlet' in Windows PowerShell?

Long-Term Servicing Channel (LTSC)

Which servicing channel is most appropriate for a server that runs critical infrastructure and requires high stability with fewer changes?

7

When using sconfig on Server Core, which numbered option allows an administrator to configure Remote Desktop settings?

It protects credentials using Virtual Secure Mode

What is the role of 'Isolated LSA (LSAIso)' in the context of Privileged Access Workstations?

Windows Server 2019 Datacenter

Which edition of Windows Server 2019 is designed for highly virtualized datacenter and cloud environments?

It indicates a release from September 2018

What is the significance of the version number '1809' in a Semi-Annual Channel release of Windows Server?

Active Directory (AD)

It is used to manage and organize resources, such as users, computers, and groups, within a network environment

Active Directory (AD)

__ provides centralized authentication and authorization services, making it easier to manage user accounts, assign permissions, and control access to network resources

Domain Controller (DC)

A ____ is a server that runs the Active Directory Domain Services (AD DS) role in a Windows Server environment

Domain Controller (DC)

It is responsible for authenticating users, enforcing security policies, and managing network resources within a specific domain

domain

A __ is a logical grouping of computers and users that share a common security database

Active Directory Domain Controller Service (NTDS)

It is responsible for maintaining and replicating the Active Directory database, handling authentication requests, and providing directory services to clients within the domain

Active Directory Domain Controller Service (NTDS)

___ensures that changes made to the directory are synchronized across all domain controllers in the domain, ensuring consistency and fault tolerance

Authentication

__ is the process of verifying a user’s identity on a network

Authorization

__is a process of verifying that an authenticated user has permission to perform an action

Active Directory Domain Services

__provides a centralized system for managing users, computers, and other resources on a network

local Administrator

To install a new AD DS forest, you need to be __ on the server.

Domain Admins group

To install an additional domain controller in an existing domain, you need to be a member of the __.

Domain controllers

Contain copies of the AD DS database. Domain-specific information can be updated from any domain controller that is a member of the same domain.

Data store

The files on each domain controller that store the AD DS information, such as the ntds.dit database, the Espresso Database (EDB) log files, and the system volume share, and, as it appears in File Explorer, SYSVOL.

Global catalog servers

Host the global catalog, which is a partial, read-only copy of all the objects in every domain in the forest. A global catalog speeds up searches for objects that might be stored on domain controllers in a different domain in the forest

RODCs

A special AD DS install in read-only format. You typically use these in branch offices where physical security may not be available and Information Technology (IT) support staff is not always available on premises compared to an enterprise's main corporate centers.

Partition

A section of the AD DS database. You can view, manage, and replicate distinct sections of the ntds.dit database, such as partitions, or naming contexts.

Schema

Defines the list of object types and attributes from which all AD DS objects are derived

Domain Tree

A collection of domains that share a common root domain and an AD DS namespace.

Forest

A collection of one or more domains that share a common AD DS.

Site

Defines logical location of ADDS objects based on association with TCP/IP networks. A site is used to control AD DS replication traffic. By default, AD DS assumes that consistent, low-latency, adequate bandwidth exists between all AD DS computers. Because of this assumption, AD DS computers attempt near-immediate replication with each other constantly. If network-based constraints exist between AD DS computers, then additional AD DS sites should be defined and logically linked together in order to control AD DS replication traffic. Sites are useful in planning administrative tacks cuch as renlication of changes to the AD DS datahace

Organizational units (OUs)

__ are containers in AD DS that provide an option to group AD DS objects logically within a domain. _ also provide a framework for delegating administrative rights and for linking Group Policy Objects (GPOs).

domain controller

A __ is a server with the AD DS server role installed that has

specifically been promoted to a domain controller

Global catalog servers

__ are domain controllers that also store a copy of the global

catalog

data store

The AD DS __contains the database files and processes that store and

manage directory information for users, services, and applications

AD DS replication

_ copies all updates of the AD DS database to all other domain

controllers in a domain or forest

AD DS site

An __ is used to represent a network segment where all domain controllers

are connected by a fast and reliable network connection

The AD DS Schema:

●Defines every type of object that can be stored in the directory

●Enforces rules regarding object creation and configuration

Class Object

What objects can be created in the

directory
• User

• Computer

Attribute Object

Information that can be attached to an

object
• Display name

Domains

__ are used to group and manage objects in an

organization

domain tree

A __ is a hierarchy of domains in AD DS

forest

A __ is a collection of

one or more domain trees

OUs

__ are Active Directory containers that can contain users, groups, computers, and

other OUs

Trusts

_ provide a mechanism for users to gain access to resources in another domain

Directional

The trust __flows from

trusting domain to the trusted

domain

Transitive

The trust relationship is extended

beyond a two-domain trust to

include other trusted domains

User

Enables network resource access for a user

InetOrgPerson

• Similar to a user account

• Used for compatibility with other directory services

Contacts

• Used primarily to assign e-mail addresses to external users

• Does not enable network access

Groups

• Used to simplify the administration of access control

Computers

• Enables authentication and auditing of computer access to

resources

Printers

• Used to simplify the process of locating and connecting to

printers

Shared folders

• Enables users to search for shared folders based on properties