Intermediate Windows Administration test (Intermediate)

Sample questions

5 sample questions from the Intermediate Windows Administration test, with the answers. Samples are taken out of the live test, so you will not meet these when you sit it.

1. Which of the following statements accurately describes the role of Organisational Units (OUs) in Active Directory domain structure?

   1. Organisational Units (OUs) are used exclusively for storing user and computer accounts, not for administrative delegation or GPO linking.
   2. Organisational Units (OUs) are used to directly apply permissions to resources and should be used for this purpose.
   3. Organisational Units (OUs) are not relevant to Active Directory domain structure and are only used for organisational purposes.
   4. Organisational Units (OUs) are used for delegation and Group Policy Object (GPO) linking, not for directly applying permissions to resources.

   Answer: D. Organisational Units (OUs) are used for delegation and Group Policy Object (GPO) linking, not for directly applying permissions to resources.

   In Active Directory, Organisational Units (OUs) are primarily used for delegation of administrative tasks and for linking Group Policy Objects (GPOs). Directly applying permissions to resources through OUs is not recommended, as it can lead to misconfigurations and difficulties in managing access controls. Instead, permissions should be applied through access control lists (ACLs) on objects, and OUs should be used for logical grouping and administrative delegation.

2. You are managing an IIS server that hosts multiple websites, each requiring its own SSL certificate. The server has only one public IP address. How should you configure the SSL certificates for the websites to ensure they are correctly applied?

   1. Apply the certificate to the site's HTTPS binding using Server Name Indication (SNI).
   2. Use a wildcard certificate and apply it to all websites without specifying individual bindings.
   3. Install the certificate on the server's local machine store and configure it globally for all websites.
   4. Assign the certificate to the default website and configure all other websites to use the same IP address and port.

   Answer: A. Apply the certificate to the site's HTTPS binding using Server Name Indication (SNI).

   In IIS, when multiple websites require SSL certificates on the same IP address and port (such as 443), Server Name Indication (SNI) is used to distinguish between them. This allows multiple certificates to be applied to the same IP address, and the correct certificate is selected based on the hostname in the client's request. Other options are incorrect because they either describe unrelated concepts or are not valid methods for applying SSL certificates in IIS.

3. Which feature of Group Policy allows for user-changeable settings and item-level targeting, making it more flexible than traditional Group Policy policies?

   1. Group Policy Management Console
   2. Group Policy Settings
   3. Group Policy Preferences
   4. Group Policy Objects

   Answer: C. Group Policy Preferences

   Group Policy Preferences (GPP) are used for user-changeable settings and allow item-level targeting, making them more flexible than traditional Group Policy policies. Group Policy policies are enforced and cannot be changed by users, while GPP allows for greater customization and control over individual settings.

4. Which of the following factors determines the maximum number of concurrent Remote Desktop sessions that can be established on a Windows Server?

   1. The maximum number of concurrent RDP sessions is determined by the number of Remote Desktop Services (RDS) CALs licensed.
   2. The maximum number of concurrent RDP sessions is determined by the total RAM available on the server.
   3. The maximum number of concurrent RDP sessions is determined by the number of network adapters on the server.
   4. The maximum number of concurrent RDP sessions is determined by the number of physical processors on the server.

   Answer: A. The maximum number of concurrent RDP sessions is determined by the number of Remote Desktop Services (RDS) CALs licensed.

   The number of concurrent Remote Desktop sessions is limited by the number of Remote Desktop Services (RDS) Client Access Licenses (CALs) that are licensed for the server. Each CAL allows one user to connect to the server simultaneously. If more users attempt to connect than there are CALs, additional users will be denied access.

5. A client on a remote subnet is unable to obtain an IP address from a DHCP server located on a different subnet. What is the most likely cause of this issue?

   1. The client is using a static IP address instead of requesting one dynamically.
   2. The DHCP scope has reached its maximum number of leases.
   3. The DHCP server is not authorized in Active Directory.
   4. The DHCP relay agent is not configured on the router, causing the request to be dropped.

   Answer: D. The DHCP relay agent is not configured on the router, causing the request to be dropped.

   A DHCP relay agent is necessary for forwarding DHCP requests between subnets. If it is not configured on the router, the request will not be forwarded to the DHCP server, resulting in the client not receiving an IP address. Other options either relate to incorrect configurations or unrelated issues.