MCSA Networking with Windows Server 2016 Free Practice Test — 30 Questions

Question 1

Anya, a network administrator for a multinational corporation, is tasked with updating the company\'s remote access security protocols to comply with the newly enacted \"Global Data Privacy Act of 2025\" (GDPA \'25). The act mandates enhanced data protection, including strong authentication for all remote connections and robust audit logging. Currently, the company\'s Virtual Private Network (VPN) solution utilizes Pre-Shared Keys (PSK) for tunnel establishment, and internal server access relies solely on username/password credentials. Anya must implement a solution that shifts VPN authentication to a certificate-based model and incorporates Multi-Factor Authentication (MFA) for internal server access, while ensuring comprehensive audit trails. Which of the following approaches best addresses Anya\'s immediate technical and compliance requirements for this transition?

Accepted Answer

Deploying a Public Key Infrastructure (PKI) to issue certificates for VPN clients and servers, and integrating a RADIUS server with an MFA provider for internal server authentication.

Question 2

Anya, a network administrator for a large enterprise, is tasked with integrating a newly acquired subsidiary into the existing corporate network. The subsidiary operates with its own distinct internal DNS namespace, "subsidiary.local," while the main corporation uses "corp.global." To facilitate seamless communication and resource discovery between the two entities, Anya needs to configure the corporate DNS infrastructure to correctly resolve hostnames within the subsidiary\'s domain. She wants to implement a solution that allows her corporate DNS servers to efficiently query and obtain IP addresses for resources located within the "subsidiary.local" namespace without requiring a full replication of the subsidiary\'s DNS zone data into the corporate DNS servers.

Which DNS configuration approach is most appropriate for Anya to achieve this specific goal of enabling cross-namespace resolution while maintaining distinct DNS zones?

Accepted Answer

Configure conditional forwarders on the corporate DNS servers to forward queries for "subsidiary.local" to the subsidiary's authoritative DNS servers.

Question 3

Given a critical security vulnerability requiring immediate network-wide remediation on a Windows Server 2016 infrastructure, and a team with mixed technical proficiencies, which leadership approach best balances rapid deployment, team development, and operational continuity?

Accepted Answer

Implement a phased rollout of the security updates, assigning specific remediation tasks to team members based on their current skill sets, coupled with targeted training sessions and regular check-ins to foster collaborative problem-solving and provide immediate feedback.

Question 4

Anya, a network administrator for a mid-sized enterprise utilizing Windows Server 2016, is tasked with implementing a new security initiative. This initiative requires that users accessing specific internal application servers must not only be authenticated but also must originate from a designated secure subnet and demonstrate a minimum level of system health, as defined by the security team. Failure to meet these criteria should result in restricted access to the application servers. Anya needs to select the most effective Windows Server 2016 native technology that can dynamically enforce these granular access controls based on both network location and client compliance. Which technology combination is best suited for this requirement?

Accepted Answer

Network Access Protection (NAP) integrated with IPsec policies

Question 5

A distributed application suite hosted on Windows Server 2016 is experiencing sporadic failures in locating and establishing connections with its backend services, manifesting as timeouts and incomplete data retrieval. Initial investigations confirm that IP addressing, DNS resolution, and basic network reachability are functioning correctly. The development team suspects that the underlying inter-process communication (IPC) or network service discovery mechanisms might be encountering subtle issues. Which of the following diagnostic approaches, focusing on behavioral competencies and technical problem-solving, would be most effective in identifying the root cause of these intermittent service discovery and connection failures?

Accepted Answer

Conduct a deep packet inspection of network traffic between client applications and backend services, specifically analyzing the sequence and timing of NetBIOS Name Service (NBNS) queries and responses, as well as SMB session establishment packets, to identify any anomalies or protocol violations that disrupt service discovery or connection initiation.

Question 6

A company\'s critical customer relationship management (CRM) application, hosted on a Windows Server 2016 machine, is experiencing sporadic periods of severe sluggishness, significantly impacting user interaction. During these episodes, users report that data entry takes an unusually long time to commit, and screen refreshes are delayed. The network infrastructure includes multiple client workstations connected via Gigabit Ethernet switches to the server, which also utilizes a NIC teaming configuration for redundancy. The IT administrator has observed that these slowdowns coincide with periods of high user activity accessing shared CRM data files stored on the server. Which of the following diagnostic approaches would be the most effective initial step to pinpoint the root cause of this application performance degradation?

Accepted Answer

Analyze the server's processor and memory utilization metrics during the reported slowdown periods.

Question 7

Anya, a network administrator for a financial services firm, is under pressure to comply with a newly enacted data privacy regulation that mandates robust encryption for all client-server communications by the end of the quarter. Her Windows Server 2016 network, however, comprises a significant number of legacy client workstations running older operating systems that do not natively support the required advanced encryption standards. Anya needs to devise a strategy that ensures immediate compliance without disrupting business operations or requiring a complete, costly overhaul of the client hardware within the given timeframe. Which of the following technical and strategic approaches would best address Anya\'s immediate compliance needs while demonstrating strong problem-solving and adaptability?

Accepted Answer

Deploy a network gateway or proxy service on the Windows Server 2016 infrastructure that can translate or encapsulate traffic from the legacy clients to meet the new encryption protocol requirements, thereby enabling compliance while a long-term client upgrade plan is developed.

Question 8

During a critical operational period, the network administrator for Veridian Dynamics observes a widespread outage affecting client connectivity and data access across several key subnets. Users report an inability to reach file servers and critical internal applications. Initial checks indicate that basic network services like DHCP and DNS appear to be intermittently available for some clients, while others are completely offline. The problem is not confined to a single physical location or server. What is the most appropriate initial action to undertake to address this widespread network disruption?

Accepted Answer

Systematically identify the root cause of the widespread network disruption by analyzing logs and device statuses.

Question 9

Anya, a network administrator responsible for a Windows Server 2016 infrastructure, is tasked with implementing new government-mandated data security and auditing protocols. These protocols require granular logging of all file access operations on specific servers and the enforcement of more restrictive access control lists (ACLs) for sensitive data directories. Anya anticipates that these changes, if not carefully managed, could impact the performance of existing applications and potentially disrupt user access. Considering Anya\'s need to adapt to these new requirements while maintaining operational stability, which of the following approaches best reflects a proactive and effective strategy for managing this transition?

Accepted Answer

Thoroughly research the specific compliance mandates and their technical implications for Windows Server 2016, develop a detailed implementation plan including testing, rollback procedures, and communication strategies, and then phase the deployment of new security policies and audit configurations.

Question 10

Anya, a network administrator for a mid-sized enterprise utilizing Windows Server 2016, has created a new Group Policy Object (GPO) intended to enforce specific security configurations on a collection of servers residing within a dedicated Organizational Unit (OU) named \"Production_Servers.\" Upon linking this GPO to the \"Production_Servers\" OU, Anya observes that while a majority of the servers are correctly applying the new security settings, a distinct subset of these servers remains unaffected by the policy. She has verified that the GPO itself is not disabled and that inheritance is not blocked at the OU level. What is the most probable underlying cause for this selective application of the GPO?

Accepted Answer

The GPO has been configured with security filtering, limiting its application to specific security groups to which the unaffected servers do not belong.

Question 11

Anya, a network administrator for a mid-sized enterprise, is responsible for deploying a new cybersecurity mandate that dictates all internal client devices must exclusively use designated, hardened DNS servers for all name resolution activities. The organization currently utilizes DHCP for dynamic IP address assignment across its Windows Server 2016 network. Anya needs to implement a solution that ensures seamless and automatic distribution of these new DNS server addresses to all DHCP-enabled clients, minimizing manual intervention and potential misconfigurations. Which of the following actions is the most effective and direct method to achieve this objective?

Accepted Answer

Configure the DHCP server to offer the designated DNS server IP addresses via DHCP Option 6.

Question 12

A seasoned network administrator, deeply familiar with on-premises Active Directory and Windows Server environments, is assigned to lead a critical project migrating the organization\'s entire identity infrastructure to Azure Active Directory (Azure AD). This initiative necessitates a fundamental shift in operational paradigms, including the adoption of cloud-native management tools, hybrid identity configurations, and the implementation of modern security protocols like multi-factor authentication (MFA) and conditional access policies. During the initial phase, several legacy applications exhibit unexpected authentication failures when integrated with Azure AD, requiring the administrator to rapidly research and implement alternative integration methods, potentially involving application proxies or identity federation. Furthermore, unforeseen network latency issues arise between on-premises resources and Azure AD, impacting user experience and necessitating a re-evaluation of network segmentation and VPN configurations.

Which behavioral competency is most critical for the administrator to effectively navigate these evolving technical challenges and ensure the successful completion of the migration project?

Accepted Answer

Adaptability and Flexibility

Question 13

Anya, a network administrator for a growing technology firm, is tasked with re-architecting the IP addressing scheme for a bustling branch office. The current network utilizes a single /24 subnet, but rapid expansion necessitates a more granular and scalable structure. Anya\'s directive is to implement a new IP addressing scheme that allows for the creation of at least 10 distinct subnets, with each of these newly created subnets being capable of supporting a minimum of 20 active hosts. Considering the efficient allocation of IP addresses and the need to avoid fragmentation or excessive waste, which subnetting strategy would best align with these requirements for a Windows Server 2016 environment?

Accepted Answer

Implement a /27 subnet mask for all new subnets.

Question 14

Anya, a network administrator for a mid-sized enterprise, is tasked with improving the reliability of internal DNS resolution. Clients are reporting sporadic failures when attempting to resolve internal hostnames, although external name resolution appears to function correctly. Anya has already confirmed the health of her DNS servers, verified the integrity of her zone files, and ensured that both forward and reverse lookup zones are properly configured. She is now considering implementing DNS Security Extensions (DNSSEC) to enhance the security and integrity of her DNS infrastructure. Which of the following actions, if taken as a primary strategy to address the described intermittent internal resolution failures, would be the least effective in resolving the immediate problem?

Accepted Answer

Implementing DNS Security Extensions (DNSSEC) to validate DNS data integrity and authenticity.

Question 15

Anya, a network administrator for a mid-sized enterprise, is implementing a new network security policy that requires isolating the financial department\'s servers into a dedicated VLAN (VLAN 10) to protect sensitive data. The rest of the company\'s servers reside in VLAN 20. After configuring the VLANs on the core switch and assigning the appropriate ports, Anya discovers that financial servers can no longer access critical internal applications hosted on servers in VLAN 20, which they previously could. The core switch is a managed Layer 2 switch. What is the most likely reason for this loss of inter-VLAN communication and what fundamental networking concept needs to be addressed to restore it?

Accepted Answer

The Layer 2 switch cannot route traffic between different VLANs, necessitating the implementation of Inter-VLAN routing via a Layer 3 device.

Question 16

Observing network traffic originating from a client workstation within a corporate network, it\'s noted that attempts to resolve `intranet.company.biz` consistently fail, returning a \"host not found\" error. However, the same client can successfully resolve external hostnames such as `www.example.com` by querying the company\'s internal DNS server. The internal DNS server is configured to forward requests for external domains to public DNS servers. What is the most probable underlying cause for the inability to resolve the internal `intranet.company.biz` hostname?

Accepted Answer

The internal DNS server is not correctly configured to resolve the `company.biz` domain.

Question 17

Anya, a network administrator for a medium-sized enterprise, is investigating a recurring connectivity problem reported by Vikram, a developer working remotely. Vikram can access internal file shares on a Windows Server 2016 instance most of the time, but intermittently loses access, experiencing delays and dropped connections. Anya has verified Vikram\'s workstation has no local issues, his VPN connection is stable, and other remote users are not reporting similar problems. The server\'s basic firewall rules are permissive for SMB traffic from known IP ranges, and the server\'s own network interface card (NIC) drivers are up-to-date. Analysis of network traffic logs on the server shows that during the reported incidents, packets destined for Vikram\'s SMB session are sometimes being silently dropped or rejected by a security policy that is dynamically evaluating connection parameters.

Which of the following advanced Windows Server networking features, if improperly configured, is most likely to cause such intermittent, user-specific connection failures for file share access?

Accepted Answer

Internet Protocol Security (IPsec) policies enforcing dynamic security associations for SMB traffic.

Question 18

Anya, a network administrator overseeing a Windows Server 2016 environment, is tasked with resolving intermittent connectivity issues impacting a critical business application. While the application server itself appears healthy and other client machines can access the application without incident, a specific group of users reports sporadic inability to connect. Anya has already confirmed the application is running locally on the server and has verified the server\'s IP configuration. To effectively diagnose this targeted, intermittent problem, what analytical approach would be most beneficial for Anya to employ next?

Accepted Answer

Systematically trace the network path and verify DNS resolution for the affected client workstations.

Question 19

Consider a corporate network where a Cisco Catalyst 3850 Series switch is configured as a Layer 3 switch, performing inter-VLAN routing for separate departments (e.g., VLAN 10 for Sales, VLAN 20 for Engineering). A FortiGate firewall is deployed to enforce security policies between these VLANs. The network administrator has successfully configured the switch to route traffic between VLAN 10 and VLAN 20. The administrator now wants to ensure that only Sales users can access the Engineering department\'s internal web server (IP address 192.168.20.50) on port 443, while Engineering users cannot initiate connections to Sales servers. Which of the following firewall configurations accurately reflects the necessary policy to achieve this specific security objective, assuming the firewall is positioned to inspect traffic after the Layer 3 switch performs routing?

Accepted Answer

Create a firewall policy with a source zone/interface associated with VLAN 10 (e.g., 192.168.10.0/24), a destination zone/interface associated with VLAN 20 (e.g., 192.168.20.0/24), specifying the destination IP 192.168.20.50 and destination port 443 (TCP), and set the action to ACCEPT. Create a separate, implicit or explicit deny policy for traffic originating from VLAN 20 to VLAN 10.

Question 20

Anya, a network administrator for a growing enterprise, is spearheading a critical migration project for Windows Server 2016 infrastructure. Despite her technical expertise in planning the deployment of new server roles and services, she faces significant team reluctance. Her team members express concerns about job security and the learning curve associated with the new technologies, but Anya\'s project updates primarily focus on technical specifications and deployment timelines, with minimal emphasis on the broader strategic implications or individual team benefits. Which core competency gap is most significantly hindering Anya\'s ability to lead this project to successful adoption?

Accepted Answer

Insufficient strategic vision communication and inadequate conflict resolution skills

Question 21

Anya, a network administrator for a mid-sized enterprise, is implementing a new SaaS solution that necessitates secure communication with external cloud servers. The existing Windows Server 2016 network infrastructure has a robust firewall policy that is currently too restrictive for this new application\'s requirements. Anya needs to adjust the firewall settings to permit the application\'s necessary inbound and outbound traffic while adhering to the principle of least privilege and ensuring the overall security of the internal network. Which of the following actions would be the most appropriate and secure approach for Anya to implement these changes?

Accepted Answer

Create specific inbound and outbound rules in Windows Firewall with Advanced Security, defining the required protocols (e.g., TCP), port numbers (e.g., 443 for HTTPS), and specifying the application executable or service, while also defining the allowed remote IP address ranges for inbound traffic and the FQDNs or IP ranges of the cloud service for outbound traffic.

Question 22

A small business operating with a Windows Server 2016 network infrastructure suddenly experiences a complete loss of connectivity for a significant portion of its client workstations. Users report being unable to access critical internal applications and are also unable to resolve internal hostnames or obtain network configuration details. Initial checks confirm that all physical network cables are securely connected and the network switches appear to be functioning correctly. The server hosting the core applications is powered on and accessible via its console, but its network services are also reported as unresponsive from the client perspective. Considering the immediate impact and the described symptoms, what is the most probable underlying cause within the Windows Server 2016 networking configuration that would lead to this widespread service degradation?

Accepted Answer

A critical failure or misconfiguration of the Dynamic Host Configuration Protocol (DHCP) service on the Windows Server 2016, preventing clients from acquiring valid IP addresses.

Question 23

Anya, a network administrator overseeing a Windows Server 2016 infrastructure, is troubleshooting a perplexing network issue. Newly provisioned client machines are consistently failing to acquire IP addresses from the DHCP server, and even established workstations are experiencing intermittent failures when attempting to resolve internal hostnames. This disruption is impacting the team\'s ability to access shared resources and collaborate effectively. Anya has verified that the DHCP server is operational and that the DHCP scope is not exhausted. Which of the following misconfigurations is the most probable root cause for these observed symptoms?

Accepted Answer

The DHCP server's dynamic DNS registration is disabled or improperly configured for the affected scope.

Question 24

Anya, a network administrator, is planning a critical upgrade of a Windows Server 2016 domain controller. The current server handles all DNS and DHCP services for a small business network. The upgrade involves introducing a new server with a more recent Windows Server version, promoting it to a domain controller, transferring all Flexible Single Master Operations (FSMO) roles, and then decommissioning the old server. Anya\'s primary concern is to prevent any interruption in network connectivity for client workstations during this transition, specifically regarding their ability to obtain IP addresses and resolve hostnames. Which of the following actions, if overlooked, would most critically jeopardize the seamless continuation of DHCP and DNS services for client machines?

Accepted Answer

Failing to authorize the new domain controller for DHCP services on the network before decommissioning the old server.

Question 25

A cybersecurity compliance audit for a financial institution mandates the logging of detailed network access session start times, session end times, and the originating client IP address for all VPN connections authenticated via RADIUS. The Network Policy Server (NPS) administrator has confirmed that RADIUS accounting is enabled, and logs are being generated. However, the audit report indicates that the current logs lack the required granularity for session timing and client identification. Which configuration change on the NPS server would most effectively address this audit finding and ensure compliance with the specified logging requirements?

Accepted Answer

Configure the NPS accounting log format to "NPS".

Question 26

Anya, a network administrator for a medium-sized enterprise, is tasked with enforcing stricter password policies for the Sales department. She creates a new Group Policy Object (GPO) and links it to the \"Sales_Team\" Organizational Unit (OU). This OU contains both user accounts and computer accounts belonging to the sales team. Anya configures the GPO to enforce a minimum password length of 12 characters, a requirement for password history, and a password age requirement. Upon testing, Anya observes that these password policy settings are being applied to all computers within the \"Sales_Team\" OU, including those used by non-sales personnel who occasionally access the network through shared workstations within that OU, and is causing unexpected issues with workstation availability for temporary staff. What fundamental principle of Group Policy application is most likely causing this behavior?

Accepted Answer

Password complexity and related security settings are applied as computer configurations, meaning the GPO's influence is on the machines within the OU, not solely on the user objects.

Question 27

When a company\'s primary web server\'s IP address must be updated frequently due to planned maintenance, and its DNS A record on a Windows Server 2016 DNS server has a Time To Live (TTL) of 3600 seconds, while a CNAME record pointing to this A record has a TTL of 1800 seconds, what is the maximum duration a client\'s DNS resolver cache might retain the old IP address for the website, given that the client\'s local DNS resolver has a cache TTL of 7200 seconds for the A record?

Accepted Answer

7200 seconds

Question 28

When confronted with a scenario where a critical business application hosted on Windows Server 2016 exhibits intermittent performance degradation and increased user-reported issues, with initial diagnostics indicating elevated network latency and packet retransmissions during peak usage, which of the following diagnostic and resolution strategies best exemplifies a structured and adaptable approach to identifying and mitigating the root cause?

Accepted Answer

Implement a phased diagnostic approach beginning with broad network traffic analysis using packet capture tools and performance counter monitoring for network interfaces, followed by targeted testing of network infrastructure components, and escalating to application-level diagnostics only after network-related causes are systematically ruled out.

Question 29

A network administrator is implementing a phased migration to IPv6 within a large enterprise environment that currently relies heavily on Windows Server 2016. The chosen strategy involves enabling dual-stack on all network devices and servers. During the initial rollout, users in a specific subnet report intermittent connectivity issues, particularly when accessing resources that have both IPv4 and IPv6 addresses configured. Network monitoring reveals that these disruptions are not consistently related to DNS resolution failures or general network congestion. Instead, the logs frequently show ICMPv6 error messages indicating \"Destination Unreachable\" or \"Parameter Problem\" originating from client machines attempting to communicate with servers on this subnet. What is the most likely underlying technical challenge contributing to these observed intermittent connectivity issues in this dual-stack migration scenario?

Accepted Answer

Potential conflicts or misinterpretations between IPv6 Neighbor Discovery Protocol (NDP) operations and legacy IPv4 Address Resolution Protocol (ARP) interactions on dual-stack hosts, leading to incorrect next-hop resolution for IPv6 packets.

Question 30

Anya, a network administrator for a rapidly growing tech startup, is tasked with enhancing the security posture of their network infrastructure. The company\'s internal servers house proprietary code and customer data, necessitating strict control over external access. Concurrently, the company is embracing remote work, requiring secure and reliable access for employees working from various locations. Anya needs to implement a solution that effectively isolates sensitive internal servers from the public internet while enabling authenticated remote employees to connect to specific internal resources. Which of the following network security configurations would best address Anya\'s requirements for both segmentation and controlled remote access?

Accepted Answer

Deploy a perimeter firewall with granular inbound and outbound access control lists (ACLs) configured to permit only established VPN tunnel traffic to specific internal server subnets, while denying all other unsolicited inbound traffic from the internet.

MCSA Networking with Windows Server 2016 Free Practice Test — 30 Questions

A lot more is already mapped out

About the MCSA Networking with Windows Server 2016 Certification