Securing Windows Server 2016 Quiz Questions and Answers

You enable and configure PowerShell Script Block Logging. You need to view which script blocks were executed by using Windows PowerShell scripts. What should you do?

Answer :
  • View the Microsoft-Windows-PowerShell/Operational event log

You want to initiate a new installation of Windows Server 2016 from the command line. You plan to accomplish this by using the Setup.exe command-line setup utility. You want to use an answer file with this command. Which command-line option should you use?

Answer :
  • /unattend

Will is the network manager for a large company. He has been tasked with creating a deployment plan to automate installations for 100 computers that need to have Windows Server 2016 installed. Will wants to use WDS for the installations. To fully automate the installations, he needs to create an answer file. Will does not want to create the answer files with a text editor. What other program can he use to create unattended answer files via a GUI interface?

Answer :
  • Windows System Image Manager

A server named Nano1. Nano1 has two volumes named C and D. You are signed in to Server1. You need to configure Data Deduplication on Nano1. Which tool should you use?

Answer :
  • Server Manager

You need to implement BitLocker Network Unlock for all of the laptops. Which server role should you deploy to the network?

Answer :
  • Windows Deployment Services

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016. You need to allow network administrators to use Just Enough Administration (JEA) to change the TCP/IP settings on Server1. The solution must use the principle of least privilege. How should you configure the session configuration file?

Answer :
  • Set RunAsVirtualAccount to $true and set RunAsVirtualAccountGroups to Network Configuration Operators

Your network contains an Active Directory domain named contoso.com. The domain contains a member server named Server5 that runs Windows Server 2016. You need to configure Server5 as a Just Enough Administration (JEA) endpoint. Which two actions should you perform? Each correct answer presents part of the solution.

Answer :
  • Create and register a session configuration file
  • Create a maintenance Role Capability file

Your network contains an Active Directory forest named Corp. The forest functional level is Windows Server 2016. You deploy a new forest named Priv and set the forest functional level to Windows Server 2016. You need to implement Privileged Access Management (PAM). What should you do next?

Answer :
  • Create shadow accounts in the Priv forest.

You have a Host Guardian Service (HGS) and a guarded host. You have a VHDX file that contains an image of Windows Server 2016. You need to provision a virtual machine by using a shielded template. Which three files should you create? Each correct answer presents part of the solution.

Answer :
  • A shielding data .pdk file
  • A signature for the .vhdx file
  • An unattended.xml file

Your network contains an Active Directory forest named contoso.com. The functional level of the forest and the domain is Windows Server 2012 R2. You plan to use Local Administrator Password Solution (LAPS) for all member servers. You need to prepare the forest for LAPS. Which two actions should you perform? Each correct answer presents part of the solution.

Answer :
  • Run the Set-AdmPwdComputerSelfPermission cmdlet
  • Run the Update-AdmPwdADSchema cmdlet