Title: Quiz 4
Course: CTS 2392 Configuring Advanced Windows 2012 Services > Section: Module 4

Q: What network services will you require in the remote site used to host a multi-site cluster? (Choose all that apply)
- AD Domain Services
- DHCP
- QoS
- DNS
A: AD Domain Services; DNS
If right: You will need to place one or more domain controllers and DNS servers in the remote site to ensure client computers in that site have uninterrupted access to those services at all times.
If wrong: You will need to place one or more domain controllers and DNS servers in the remote site to ensure client computers in that site have uninterrupted access to those services at all times.

Q: What is the default heartbeat interval in a Windows Server 2012 failover cluster?
- 10 milliseconds
- 10 seconds
- 100 milliseconds
- 1 second
A: 1 second
If right: By default, the heartbeat occurs once every second (1,000 milliseconds).
If wrong: By default, the heartbeat occurs once every second (1,000 milliseconds).

Q: When configuring a multi-site cluster using Windows Server 2012, how can you configure data replication to occur? (Choose all that apply)
- Block level hardware-based replication
- Software-based file replication
- Application-based replication
- Windows MPIO-based replication
A: Block level hardware-based replication; Software-based file replication; Application-based replication
If right: You will need to find a solution for data replication outside of Windows when configuring a multi-site cluster. Some applications handle replication internally, such as Exchange Server and SQL Server.
If wrong: You will need to find a solution for data replication outside of Windows when configuring a multi-site cluster. Some applications handle replication internally, such as Exchange Server and SQL Server.

Q: What advantage does asynchronous replication offer over synchronous replication?
- Application performance is typically improved
- Data latency is typically reduced
- Data concurrency is typically higher
- Storage systems can be purchased with lower specifications
A: Application performance is typically improved
If right: Application performance is typically improved since the asynchronous replication to the remote site occurs on a scheduled basis, removing the need to wait for a successful acknowledgment of replication completion as with synchronous replication.
If wrong: Application performance is typically improved since the asynchronous replication to the remote site occurs on a scheduled basis, removing the need to wait for a successful acknowledgment of replication completion as with synchronous replication.

Q: Regarding an X.509 digital certificate, what is the name of the key typically only found on the device the certificate has been issued to?

Q: When attempting to enable Hyper-V Replica, you notice that the replication options are grayed out on your server. What is the most likely reason for this?

Q: In a Windows Server 2012 failover cluster, after how many missed heartbeats in a row will a node become failed?
- 3
- 5
- 7
- 9
A: 5
If right: If a node misses five heartbeats in a row, another node will initiate failover.
If wrong: If a node misses five heartbeats in a row, another node will initiate failover.

Q: Which of the following quorum configurations would not be acceptable for a multi-site cluster configuration? (Choose all that apply)
- Node Majority
- Node and Disk Majority
- Node and File Share Majority
- No Majority
A: Node Majority; No Majority
If right: Because sites are geographically dispersed, you cannot use a quorum configuration that requires a witness disk. If there is an odd number of nodes, then use the Node Majority quorum. If there is an even number of nodes, which is typical in a geographically dispersed cluster, you can use the Node Majority with File Share Majority quorum.
If wrong: Because sites are geographically dispersed, you cannot use a quorum configuration that requires a witness disk. If there is an odd number of nodes, then use the Node Majority quorum. If there is an even number of nodes, which is typical in a geographically dispersed cluster, you can use the Node Majority with File Share Majority quorum.

Q: Which DHCP client option is used to provide a list of IP addresses for WINS servers?
- Option 3
- Option 6
- Option 15
- Option 44
A: Option 44
If right: Option 44 specifies a list of IP addresses for WINS name servers available to the client.
If wrong: Option 44 specifies a list of IP addresses for WINS name servers available to the client.

Q: When configuring Split Scopes for DHCP, what is the traditional percentage split of the scope range?
- 50% to the primary server, 50% to the secondary server
- 60% to the primary server, 40% to the secondary server
- 70% to the primary server, 30% to the secondary server
- 80% to the primary server, 20% to the secondary server
A: 80% to the primary server, 20% to the secondary server
If right: For years, if you wanted high availability, you would use a split-scope configuration, also known as the 80-20 configuration. It is known as the 80-20 configuration because the primary server is assigned 80 percent of the available addresses, whereas the secondary server is assigned 20 percent of the available addresses.
If wrong: For years, if you wanted high availability, you would use a split-scope configuration, also known as the 80-20 configuration. It is known as the 80-20 configuration because the primary server is assigned 80 percent of the available addresses, whereas the secondary server is assigned 20 percent of the available addresses.

Q: Which DHCP client option is used to provide a list of IP addresses for the default gateway to the client?
- Option 3
- Option 6
- Option 15
- Option 44
A: Option 3
If right: Option 3 specifies a list of IP addresses for the default gateway or router on the client's subnet.
If wrong: Option 3 specifies a list of IP addresses for the default gateway or router on the client's subnet.

Q: When configuring DHCP failover partners, the time synchronization between the partners is critical. What is the maximum allowable time skew between DHCP failover partners?
- 15 seconds
- 30 seconds
- 45 seconds
- 60 seconds
A: 60 seconds
If right: DHCP failover is time sensitive. The time between partners must be no greater than one minute. If the time is greater, the failover process will halt with a critical error.
If wrong: DHCP failover is time sensitive. The time between partners must be no greater than one minute. If the time is greater, the failover process will halt with a critical error.

Q: Which DHCP client option is used to provide a list of domain names to use in name resolution queries?
- Option 3
- Option 6
- Option 15
- Option 44
A: Option 15
If right: Option 15 specifies the DNS domain name that the client should use for DNS computer name resolution.
If wrong: Option 15 specifies the DNS domain name that the client should use for DNS computer name resolution.

Q: On what port does DHCP failover listen for failover traffic?
- UDP port 67
- UDP port 68
- TCP port 647
- TCP port 648
A: TCP port 647
If right: DHCP uses TCP port 647 to listen for failover traffic.
If wrong: DHCP uses TCP port 647 to listen for failover traffic.

Q: What is the name of the special resource record that Windows Server 2012 DHCP will create to track which machine originally requested a specific name in DNS?
- DHCP Name Protection
- Dynamic Host Configuration Identifier
- DNS Host Owner Record
- DDNS Host Protection Identifier
A: Dynamic Host Configuration Identifier
If right: DHCP Name Protection addresses use a resource record known as a Dynamic Host Configuration Identifier (DHCID) to track which machines originally requested specific names. When DHCP assigns or renews an address, the DHCP server refers to the DHCID in DNS to verify that the machine requesting the name is the original machine that used the name. If it is not the same machine, then the DNS resource record is not updated.
If wrong: DHCP Name Protection addresses use a resource record known as a Dynamic Host Configuration Identifier (DHCID) to track which machines originally requested specific names. When DHCP assigns or renews an address, the DHCP server refers to the DHCID in DNS to verify that the machine requesting the name is the original machine that used the name. If it is not the same machine, then the DNS resource record is not updated.

Q: What term describes the network transmissions method where packets are sent from one to a specific group of other hosts?
- Multicast
- Unicast
- Anycast
- Broadcast
A: Multicast
If right: Multicast occurs when packets are sent from one host to multiple hosts (one point to a set of other points). Multicasting delivers the same packet simultaneously to a group of clients, which results in less bandwidth usage.
If wrong: Multicast occurs when packets are sent from one host to multiple hosts (one point to a set of other points). Multicasting delivers the same packet simultaneously to a group of clients, which results in less bandwidth usage.

Q: Regarding DNSSEC, what is used to sign the zone data?
- Key Signing Key
- Zone Signing Key
- Trust Anchor
- DNSSEC Resource Records
A: Zone Signing Key
If right: The ZSK is used to sign zone data.
If wrong: The ZSK is used to sign zone data.

Q: Regarding DNSSEC, what are the new records created once a zone is signed?
- Key Signing Key
- Zone Signing Key
- Trust Anchor
- DNSSEC Resource Records
A: DNSSEC Resource Records
If right: Once a zone is signed, there are a number of new DNSSEC Resource records available. These records are in addition to the standard A, NS, and SRV records in an unsigned zone. These DNSSEC Resource records include DNSKEY, RRSIG, and NSEC.
If wrong: Once a zone is signed, there are a number of new DNSSEC Resource records available. These records are in addition to the standard A, NS, and SRV records in an unsigned zone. These DNSSEC Resource records include DNSKEY, RRSIG, and NSEC.

Q: After a DNS zone has been secured with DNSSEC, what additional data will be returned to a client as a result of a query?
- Information about the organization administering the zone
- Information about the server providing the DNS zone
- Digital signatures of the administrators of the zone
- Digital signatures for the returned records
A: Digital signatures for the returned records
If right: The process for securing a zone using DNSSEC is called signing the zone. Once signed, any queries on the signed zone will return digital signatures along with the normal DNS resource records. The digital signatures will be for the returned records.
If wrong: The process for securing a zone using DNSSEC is called signing the zone. Once signed, any queries on the signed zone will return digital signatures along with the normal DNS resource records. The digital signatures will be for the returned records.

Q: On which of the following DNS zone types can DNSSEC be enabled? (Choose all that apply)
- A standard primary forward lookup zone
- An Active Directory integrated reverse lookup zone
- An Active Directory integrated forward lookup stub zone
- A standard secondary reverse lookup zone
A: A standard primary forward lookup zone; An Active Directory integrated reverse lookup zone
If right: DNSSEC can be enabled on an Active-Directory Integrated zone (ADI) or on a primary zone.
If wrong: DNSSEC can be enabled on an Active-Directory Integrated zone (ADI) or on a primary zone.

Q: What is the function of the RRSIG record?
- Used to sign the records
- Returned to positively deny that the requested A record exists in the zone
- Returned to the client in response to a successful query along with the A record
- Used to sign the zone
A: Returned to the client in response to a successful query along with the A record
If right: The RRSIG record is returned to the client in response to a successful query along with the A record.
If wrong: The RRSIG record is returned to the client in response to a successful query along with the A record.

Q: What is the function of the NSEC record?
- Used to sign the records
- Returned to positively deny that the requested A record exists in the zone
- Returned to the client in response to a successful query along with the A record
- Used to sign the zone
A: Returned to positively deny that the requested A record exists in the zone
If right: The NSEC record is returned to positively deny that the requested A record exists in the zone.
If wrong: The NSEC record is returned to positively deny that the requested A record exists in the zone.

Q: What DNS security feature in Windows Server 2012 can be configured to allow source port randomization for DNS queries?
- Randomization factor
- Initialization vector
- Socket pool
- Name Resolution Policy Table
A: Socket pool
If right: The DNS socket pool is a tool used to allow source port randomization for DNS queries, which reduces the chances of an attacker guessing which IP address and port (socket) the DNS traffic uses.
If wrong: The DNS socket pool is a tool used to allow source port randomization for DNS queries, which reduces the chances of an attacker guessing which IP address and port (socket) the DNS traffic uses.

Q: What is the purpose of DNS Cache Locking?
- It prevents zone transfers of records in the resolver cache while the Time to Live (TTL) is still in force.
- It prevents an attacker from replacing records in the resolver cache while the Time to Live (TTL) is still in force.
- It prevents an attacker from inserting records into the resolver cache while the Time to Live (TTL) is still in force.
- It prevents clients from performing dynamic DNS updates into the resolver cache while the Time to Live (TTL) is still in force.
A: It prevents an attacker from replacing records in the resolver cache while the Time to Live (TTL) is still in force.
If right: DNS Cache Locking prevents an attacker from replacing records in the resolver cache while the Time to Live (TTL) is still in force. When cache locking is enabled, records cannot be overwritten.
If wrong: DNS Cache Locking prevents an attacker from replacing records in the resolver cache while the Time to Live (TTL) is still in force. When cache locking is enabled, records cannot be overwritten.

Q: How are values for DNS Cache Locking expressed?
- As a percentage of the TTL
- As a percentage of the TTL remaining
- As a fixed period of time in hours
- As a fixed period of time in days
A: As a percentage of the TTL
If right: DNS Cache Locking uses a percentage of the TTL to set the lock. For example, if the cache locking value is set to 75, the record would not be available to be overwritten until at least 75% of the TTL expires.
If wrong: DNS Cache Locking uses a percentage of the TTL to set the lock. For example, if the cache locking value is set to 75, the record would not be available to be overwritten until at least 75% of the TTL expires.