.png&w=3840&q=75)
Question bank
Windows Server Hybrid Admin (Advanced)
43 Windows Server Hybrid Admin (Advanced) questions with the correct answer and a written explanation, organised across 5 exam domains.
- 43 questions
- 5 domains
- Foundation level
certilumQuestion index
Jump straight to any question. Answers and explanations are inline.
Implement and manage Windows Server high availability
6 questions in this domain
- Question 1Single Choice
What is the primary purpose of implementing Failover Clustering in a Windows Server environment for production workloads?
- ARestarts failing services on another cluster nodeCorrect answer
- BBalances web traffic across multiple web servers
- CReplicates virtual machines to a secondary site
- DCentralizes DNS management for the cluster
Why this is the answer
Failover Clustering keeps services and applications available by automatically moving them to another cluster node when a node fails.
- Question 2Multiple Select
Which of the following is required before configuring a traditional two-node Windows Server failover cluster? (Select all that apply.)
- AAt least two Windows Server cluster nodesCorrect answer
- BShared storage available to all nodesCorrect answer
- CActive Directory domain membership for all nodesCorrect answer
- DAzure subscription linked to the cluster
Why this is the answer
A traditional failover cluster requires multiple servers, shared storage, and Active Directory domain membership. An Azure subscription is not required for an on-premises failover cluster.
- Question 3Interactive
You execute the following PowerShell command on a Windows Server failover cluster. Which quorum configuration does it apply?
- ANo majority: disk onlyCorrect answer
- BNode majority
- CNode and disk majority
- DNode and file share majority
Why this is the answer
The `-DiskOnly` parameter configures the No Majority: Disk Only quorum model, which uses a designated cluster disk as the quorum witness.
- Question 4Single Choice
What is the primary purpose of Storage Spaces Direct when it is used in Windows Server high availability deployments?
- ACreates software-defined storage from local cluster disksCorrect answer
- BBalances network traffic among web servers
- CReplicates virtual machines to Azure
- DProvides DNS services for failover clusters
Why this is the answer
Storage Spaces Direct pools local disks across failover cluster nodes to provide highly available, software-defined storage without a traditional SAN.
- Question 5Multiple Select
Which of the following workloads can be made highly available by using a Windows Server failover cluster? (Select all that apply.)
- AFile ServerCorrect answer
- BHyper-V virtual machinesCorrect answer
- CSQL Server database serviceCorrect answer
- DIIS Web Farm
Why this is the answer
File Server, Hyper-V Virtual Machine, and SQL Server are common cluster-aware workloads supported by failover clustering. IIS web farms are typically made highly available with Network Load Balancing rather than Failover Clustering.
- Question 6Interactive
You run the command shown to inspect node states in a failover cluster. Which two states indicate that a node is not actively participating?
- ADownCorrect answer
- BPausedCorrect answer
- CUp
- DRunning
Why this is the answer
Down and Paused are node states in failover clustering indicating that a node is unavailable or suspended. Up is the normal active state, and Running is not a cluster node state.
Implement disaster recovery
5 questions in this domain
- Question 7Single Choice
What is the main purpose of Azure Site Recovery in a hybrid Windows Server environment?
- ABusiness continuity and disaster recovery by replicating virtual machines to AzureCorrect answer
- BLong-term archival backup with versioning
- CReal-time server performance monitoring
- DCentralized DNS and Active Directory management
Why this is the answer
Azure Site Recovery supports disaster recovery by replicating workloads and enabling failover and failback in hybrid environments.
- Question 8Multiple Select
Which two components are required to configure Hyper-V Replica between two Windows Server hosts?
- AA primary Hyper-V hostCorrect answer
- BA replica Hyper-V hostCorrect answer
- CAn Azure Active Directory tenant
- DAn Azure Site Recovery vault
Why this is the answer
Hyper-V Replica is built into Windows Server and copies VMs from a primary host to a replica host; it does not require Azure AD or a Site Recovery vault.
- Question 9Interactive
Examine the PowerShell script in the code block. What action does the last cmdlet perform in the disaster recovery workflow?
- AIt starts an unplanned failover to the recovery locationCorrect answer
- BIt deletes the current recovery point
- CIt pauses replication to the primary site
- DIt creates a new Recovery Services vault
Why this is the answer
Start-AzRecoveryServicesAsrUnplannedFailoverJob begins an unplanned failover for a protected item to the configured recovery location.
- Question 10Single Choice
What is the Azure Backup MARS agent used for on a Windows Server?
- AIt backs up files, folders, and system state to an Azure Recovery Services vaultCorrect answer
- BIt replicates entire virtual machines to Azure Site Recovery
- CIt migrates Windows Server roles to Azure
- DIt applies security patches to Windows Server
Why this is the answer
The Microsoft Azure Recovery Services agent performs file-level and system-state backup to an Azure Recovery Services vault.
- Question 11Multiple Select
Which of the following are available failover options in Hyper-V Replica?
- ATest failoverCorrect answer
- BPlanned failoverCorrect answer
- CUnplanned failoverCorrect answer
- DIncremental failover
Why this is the answer
Hyper-V Replica supports test, planned, and unplanned failovers, but incremental failover is not a valid option.
Migrate servers and workloads
10 questions in this domain
- Question 12Single Choice
What is the primary purpose of Azure Migrate when preparing Windows Server workloads for cloud migration?
- ACreate and manage Azure Active Directory users
- BDiscover, assess, and migrate on-premises servers and workloadsCorrect answer
- CConfigure network security between Azure virtual networks
- DMonitor the performance of cloud-native applications
Why this is the answer
Azure Migrate is a centralized hub for discovering, assessing, and migrating on-premises servers and workloads to Azure. It provides readiness assessment, sizing, and migration tools for Windows Server workloads.
- Question 13Multiple Select
Which two tools are built into the Azure Migrate hub for assessing and migrating Windows Server workloads?
- AAzure Migrate: Discovery and AssessmentCorrect answer
- BAzure Migrate: Server MigrationCorrect answer
- CAzure Backup Center
- DAzure Cost Management
Why this is the answer
Azure Migrate includes Discovery and Assessment for readiness and sizing, and Server Migration for orchestrating the migration of VMs and workloads to Azure.
- Question 14Interactive
An administrator runs the script in the code block. What action does the script perform in a migration project?
- AConnects to Azure and creates a new Azure Migrate projectCorrect answer
- BStarts replication of a Windows Server VM
- CInstalls the Azure Migrate appliance on-premises
- DUploads a VHD to a storage account
Why this is the answer
Connect-AzAccount authenticates to Azure and New-AzMigrateProject creates an Azure Migrate project in the specified resource group and region.
- Question 15Single Choice
Which service provides continuous replication and failover for Windows Server VMs being migrated from on-premises to Azure?
- AAzure Backup
- BAzure Site RecoveryCorrect answer
- CAzure Policy
- DAzure Resource Manager
Why this is the answer
Azure Site Recovery replicates on-premises workloads to Azure and supports failover and test failover, which is commonly used for Windows Server migration.
- Question 16Multiple Select
Which two source environments are supported by Azure Migrate: Server Migration tool when migrating Windows Server VMs to Azure?
- AVMware VMsCorrect answer
- BHyper-V VMsCorrect answer
- CAzure virtual machine scale sets
- DAzure Container Instances
Why this is the answer
Azure Migrate Server Migration supports migrating VMware VMs and Hyper-V VMs to Azure, as well as physical and other virtualized servers.
- Question 17Interactive
An administrator executes the PowerShell commands in the code block as part of an Azure Site Recovery migration. What action is being performed?
- AA test failover of a replicated Windows Server VMCorrect answer
- BA full production failover and final migration
- CCreation of a Recovery Services vault
- DRemoval of a replication policy
Why this is the answer
Start-AzRecoveryServicesAsrTestFailoverJob starts a test failover to validate the migration and disaster recovery configuration without impacting production.
- Question 18Single Choice
Before uploading an on-premises Windows Server disk to Azure, which VHD format must be used?
- ADynamically expanding VHD
- BFixed-size VHDCorrect answer
- CVHDX with differential snapshots
- DFixed-size VHDX
Why this is the answer
Azure requires a fixed-size VHD file when uploading an on-premises virtual disk for VM migration. VHDX and dynamic disks are not supported for direct upload.
- Question 19Multiple Select
Which two prerequisites are required when deploying the Azure Migrate appliance for server discovery and assessment?
- AA Windows Server machine to host the applianceCorrect answer
- BAn Azure subscription with permission to create Azure Migrate resourcesCorrect answer
- CAn existing ExpressRoute connection
- DAzure Arc-enabled local servers
Why this is the answer
The Azure Migrate appliance runs on a supported Windows Server host and requires an Azure subscription with permissions to register the project and create Microsoft.OffAzure resources.
- Question 20Interactive
An administrator runs the PowerShell script in the code block. What is the effect of the script on the migration process?
- AUploads an on-premises VHD to Azure storageCorrect answer
- BCreates a new Azure virtual machine
- CInstalls the Azure Migrate appliance
- DConfigures Site Recovery replication
Why this is the answer
Add-AzVhd uploads a local VHD to an Azure storage account so it can later be used to create a managed disk and virtual machine.
- Question 21Single Choice
Which cloud migration strategy is commonly called 'lift and shift' when moving Windows Server workloads to Azure?
- ARehostCorrect answer
- BRefactor
- CRearchitect
- DRetire
Why this is the answer
Rehost, also known as lift and shift, moves Windows Server workloads to Azure as IaaS VMs without significant code or architecture changes.
Monitor and troubleshoot Windows Server environments
10 questions in this domain
- Question 22Single Choice
Which Windows Server tool captures performance counters in real time or from saved logs?
- APerformance MonitorCorrect answer
- BTask Manager
- CDevice Manager
- DServices console
Why this is the answer
Performance Monitor is the built-in Windows Server tool for viewing and logging performance counters, both live and from saved Data Collector Sets.
- Question 23Multiple Select
Which of the following are standard Event Viewer logs in Windows Server? (Select all that apply.)
- AApplicationCorrect answer
- BSecurityCorrect answer
- CSystemCorrect answer
- DNetwork
Why this is the answer
The default Windows Server Event Viewer logs are Application, Security, Setup, System, and Forwarded Events; no Network log exists by default.
- Question 24Interactive
Review the PowerShell command in the code block. What is its purpose?
- AShow the most recent Error events from the Application logCorrect answer
- BDelete the most recent Application log Error events
- CExport all Application Error events to a CSV file
- DList the newest 20 applications installed on the server
Why this is the answer
The command gets up to 20 newest events from the Application log and filters them for events classified as Error.
- Question 25Single Choice
Which Windows Server tool shows detailed real-time CPU, memory, disk, and network activity per process?
- AResource MonitorCorrect answer
- BPerformance Monitor
- CTask Manager
- DServer Manager
Why this is the answer
Resource Monitor (resmon.exe) offers detailed real-time data for CPU, memory, disk, and network, including per-process information.
- Question 26Multiple Select
Which of the following are built-in tools for monitoring Windows Server performance? (Select all that apply.)
- ATask ManagerCorrect answer
- BResource MonitorCorrect answer
- CPerformance MonitorCorrect answer
- DDevice Manager
Why this is the answer
Task Manager, Resource Monitor, and Performance Monitor are all native monitoring tools; Device Manager is used for hardware device management.
- Question 27Interactive
Review the PowerShell code in the code block. What does it return?
- ARunning services sorted by display nameCorrect answer
- BStopped services with errors
- CAll installed services in order
- DOnly services with a manual startup type
Why this is the answer
Get-Service retrieves all services, Where-Object selects running services, and Sort-Object orders them by DisplayName.
- Question 28Single Choice
Which Event Viewer severity level indicates a possible problem that is not yet critical?
- AWarningCorrect answer
- BError
- CCritical
- DInformation
Why this is the answer
Warning events indicate that an issue may occur or has occurred but has not yet caused a critical system failure.
- Question 29Multiple Select
Which of the following are Performance Monitor view types? (Select all that apply.)
- AGraphCorrect answer
- BHistogramCorrect answer
- CReportCorrect answer
- DTopology
Why this is the answer
Performance Monitor provides three main views: Graph, Histogram, and Report; topology is not one of them.
- Question 30Interactive
What is the command in the code block used to show?
- ALatest 100 security audit failuresCorrect answer
- BLatest 100 successful security audits
- C100 failed service events from Application log
- DAll logs containing audit failures
Why this is the answer
This command gets the 100 newest entries from the Security log and filters them to display only FailureAudit events.
- Question 31Single Choice
Which Windows Server tool shows a historical stability index and application failures?
- AReliability MonitorCorrect answer
- BEvent Viewer
- CPerformance Monitor
- DResource Monitor
Why this is the answer
Reliability Monitor tracks system stability over time, including application failures, and displays a stability index.
Secure Windows Server on-premises and hybrid infrastructures
12 questions in this domain
- Question 32Single Choice
Which technology isolates Windows Server domain credentials in a virtualized security environment to help prevent credential theft?
- AWindows Defender Credential GuardCorrect answer
- BBitLocker Drive Encryption
- CLocal Administrator Password Solution
- DWindows Defender Firewall
Why this is the answer
Windows Defender Credential Guard uses Virtualization-Based Security to isolate domain credentials so malware cannot access them.
- Question 33Multiple Select
Which of the following are Windows Server features that help protect credential data? (Select all that apply.)
- AWindows Defender Credential GuardCorrect answer
- BLocal Administrator Password SolutionCorrect answer
- CRemote Desktop Services
- DDNS Admin Service
Why this is the answer
Credential Guard isolates secrets in VBS, while LAPS randomizes local administrator passwords. Remote Desktop Services and DNS Admin do not protect credential data.
- Question 34Interactive
An administrator runs the following PowerShell command on a Windows Server. What type of domain controller is being deployed?
- ARead-only domain controller (RODC)Correct answer
- BWritable domain controller
- CChild domain
- DGlobal catalog server
Why this is the answer
The -ReadOnlyReplica parameter creates a read-only domain controller, while -NoGlobalCatalog prevents the RODC from hosting the global catalog.
- Question 35Single Choice
Where does Windows Local Administrator Password Solution store the local administrator password for member servers?
- AIn a confidential attribute on the computer objectCorrect answer
- BIn the registry of the domain controller
- CIn a Group Policy preferences file
- DIn the SYSVOL folder
Why this is the answer
LAPS stores the password in an AD computer object attribute, ms-Mcs-AdmPwd, and only authorized users can retrieve it.
- Question 36Multiple Select
Which of the following are recommended practices for securing Active Directory identity infrastructure? (Select all that apply.)
- ARequire LDAP signing or LDAPSCorrect answer
- BDeploy read-only domain controllers at unsecured sitesCorrect answer
- CAllow LAN Manager authentication
- DDisable SMB signing
Why this is the answer
LDAP signing/channel binding stops tampering, and RODCs limit exposure at untrusted sites. LM authentication and disabling SMB signing weaken security.
- Question 37Interactive
An administrator runs the following PowerShell command. What type of service account is being created?
- AGroup Managed Service Account (gMSA)Correct answer
- BManaged Service Account (MSA)
- CVirtual account
- DUser account
Why this is the answer
The -GroupManagedServiceAccount parameter creates a gMSA, which automatically manages passwords and can be used across multiple servers.
- Question 38Single Choice
What does Just Enough Administration (JEA) in Windows Server allow administrators to do?
- AGrant least-privilege administrative access through constrained PowerShell endpointsCorrect answer
- BEncrypt volumes on domain controllers
- CReplace Active Directory domain controllers
- DAutomate Windows Server installation
Why this is the answer
JEA limits administrators to specific cmdlets and tasks through constrained PowerShell session configurations, applying least-privilege.
- Question 39Multiple Select
Which of the following are components of Microsoft Defender for Identity? (Select all that apply.)
- ASensors installed on domain controllersCorrect answer
- BMicrosoft 365 Defender portalCorrect answer
- CAzure Arc agent
- DAzure AD Connect sync engine
Why this is the answer
Defender for Identity uses domain controller sensors and delivers alerts in the Microsoft 365 Defender portal. Azure Arc and Azure AD Connect are not core components.
- Question 40Interactive
An administrator assigns a policy to an Azure Arc-enabled Windows Server using the JSON below. What is the administrator assigning?
- AAn Azure Policy assignmentCorrect answer
- BAn Azure RBAC role assignment
- CAn Azure AD conditional access policy
- DAn Azure Blueprint artifact
Why this is the answer
The JSON assigns a policy definition to a machine scope, which is how Azure Policy applies a security baseline to Azure Arc-enabled servers.
- Question 41Single Choice
Which Windows Server feature prevents unauthorized executables by enforcing code integrity policies?
- AWindows Defender Application ControlCorrect answer
- BWindows Defender Firewall
- CBitLocker
- DSMB Encryption
Why this is the answer
Windows Defender Application Control uses code integrity policies to allow only approved applications and executables to run.
- Question 42Multiple Select
Which two practices are recommended for securing hybrid identity environments? (Select all that apply.)
- AEnable Azure AD Privileged Identity Management (PIM)Correct answer
- BEnforce multi-factor authentication (MFA)Correct answer
- CStore user passwords in plain text
- DUse shared global administrator accounts
Why this is the answer
PIM provides just-in-time privileged access and MFA reduces identity compromise. Plain-text passwords and shared admin accounts are insecure.
- Question 43Interactive
An administrator creates the following Windows Defender Firewall rule. What effect does this rule have?
- ABlocks inbound SMB traffic on TCP port 445Correct answer
- BBlocks outbound SMB traffic on TCP port 445
- CAllows inbound SMB traffic on TCP port 445
- DBlocks all inbound TCP traffic
Why this is the answer
The rule blocks inbound traffic to TCP port 445, which SMB uses, while not affecting outbound traffic or other ports.
Frequently asked questions
Everything about the Windows Server Hybrid Admin (Advanced) question bank and how to use it.