Windows Server 2008 Administrator

Card Set Information

Windows Server 2008 Administrator
2013-03-30 23:12:54
Monitoring Servers

Chapter 11
Show Answers:

  1. Which of the following is not a new enhancement in Windows Eventing 6.0?
    event log sizes now limited only by half of available disk space
  2. The Summary of Administrative Events displays the total number of events recorded in all of the following time increments except for the last __________.
  3. Which of the following logs contains events received from other computers on the network via subscriptions?
    Forwarded Events
  4. Which of the following logs is the primary Windows Server 2008 operational log?
  5. Which type of event is triggered when there is service degradation or an occurrence that can potentially cause service degradation in the near future?
  6. By default, which of the following logs is visible in the Event Viewer console?
  7. Which tool within the Reliability and Performance Monitor console displays hundreds of different statistics?
    Performance Monitor
  8. Which of the following is not an available view in Performance Monitor?
    columnar bar
  9. Which of the following is not a method available for accessing Performance Monitor functions?
    MMC consoles Action menu
  10. In the Add Counters dialog box, which of the following is not a piece of information that you need to specify to add a counter to the display?
    logging server
  11. The number of counters that you can display effectively depends on the __________.
    size of your monitor and resolution of your video display
  12. The optimal value for the Server Work Queues: Queue Length should be less than __________.
  13. What must you create to capture counter statistics in the Reliability and Performance Monitor console for later review?
    data collector set
  14. Which of the following logs contains information about events generated by the operating system components, such as services and device drivers?
  15. Which type of event warns of a problem that is not likely to affect the performance of the component or process where the problem occurred, but could affect the performance of other components or processes on the system?
  16. Which type of log contains events targeted at end-users or administrators that indicate a problem and offer a possible solution?
  17. Which type of log contains events that signify a change in the application or service, such as the addition or removal of a printer?
  18. By default, at what time interval does the Performance Monitor graph update counter values?
    one second
  19. Which of the following graphs displays both current and historical values?
  20. Performance objects, performance counters, and instances that appear in the Add Counters dialog box depend on all of the following except the __________.
    number of servers on the network
  21. Events in component logs are non-administrative, meaning that they are not indicative of problems or errors.
  22. By default, all counters use the percentage as the unit of measurement.
  23. Performance Monitor imposes no limitations on the combinations of counters you can select for a single graph.
  24. The Reliability Monitor snap-in doesn’t actually do anything except present event log information in a new way.
  25. The bandwidth of network connections limits the amount of traffic reaching the server through its network interfaces.
  26. The primary function of the Windows Eventing engine is to record information about system activities as they occur and package that information in individual units called __________.
  27. When you expand the Microsoft and Windows folders in the Applications and Services Logs folder, you see a long list of Windows components. Each of these components has a pathway, called a(n) __________, to its own separate log.
  28. A(n) __________ is a component that is not providing an acceptable level of performance compared with other components in the system.
  29. A(n) __________ is simply a set of readings, captured under normal operating conditions, that you can save and compare with readings taken at a later time.
  30. __________ is the process by which administrators can track specific security-related events on a Windows Server 2008 computer.
  31. If your computer is otherwise idle, you will probably notice that the line in the default graph is hovering near the __________ of the scale, making it difficult to see its exact value.
  32. The Server: Bytes Total/Sec counter specifies the total number of bytes sent and received by the server over all of its network interfaces. This value should be no more than __________ percent of the total bandwidth capacity of the network interfaces in the server.
  33. Auditing is a(n) __________ process that administrators can configure to their own needs.
  34. An inadequate amount of __________ in a server can prevent the computer from caching frequently used data aggressively enough, causing processes to rely on disk reads more than memory reads and slowing down the entire system.
  35. Enabling the global category causes the system to enable all four subcategories, but you can use the __________ command prompt tool to disable any of the four.
  36. What is the operating system component that generates Windows logs?
    Windows Eventing
  37. Which log contains events received from other computers on the network via subscriptions?
    Forwarded Events
  38. Which type of log enables you to examine the events for a particular operating system component or application?
  39. Which snap-in enables you to view system information on a continuous, real-time basis?
    Reliability and Performance snap-in
  40. Which screen contains four real-time line graphs that display information about four of the server’s main hardware components?
    Resource Overview
  41. What new addition to Windows Server 2008 automatically tracks events that can have a negative effect on system stability and uses them to calculate a stability index?
    Reliability Monitor
  42. Which agent collects data from event logs every hour and updates the Reliability Monitor display every 24 hours?
    Reliability Access Component Agent, RACAgent
  43. What is the result of a program allocating memory for use but not freeing up that memory when it is finished using it?
    memory leak
  44. What can administrators do by examining the logs?
    They can track the activity of the software, document errors, and extract analytical information.
  45. What is the primary intended purpose of component logs?
    Component logs are intended for use in troubleshooting long-term problems and for software developers seeking debugging information.
  46. Why is it important to examine the resources utilized by specific applications and processes over time?
    It can help you to determine ways to improve the performance of a computer.
  47. What might cause a bottleneck to occur?
    A bottleneck could occur from an increased server load, hardware failure, or changed server roles.
  48. What is the importance of a baseline?
    By comparing the baseline readings to the server’s current readings at regular intervals, you can discern trends that might eventually affect the computer’s performance
  49. To monitor basic memory performance, which counters should you use?
    Memory: You should use Page Faults/Sec, Memory: Pages/Sec, Memory: Available Mbytes, Memory: Committed Bytes, and Memory: Pool Non-paged Bytes.
  50. In what ways does Windows Server 2008 enhance the auditing capabilities of previous Windows versions?
    When auditing Active Directory changes, the system can now log both the old and the new values so that you have a record of the previous values before changes were made. Windows Server 2008 also adds subcategories to the global categories.