Daily Archives: Wednesday, November 5, 2014

Vendor: Microsoft
Exam Code: 70-640
Exam Name: TS: Windows Server 2008 Active Directory, Configuring
Version: 14.91

QUESTION 61
Your company has two Active Directory forests as shown in the following table.

Forest name    Forest functional level    Domain(s)
contoso.com    Windows Server 2008    contoso.com
fabrikam.com    Windows Server 2008    fabrikam.com    eng.fabrikam.com

The forests are connected by using a two-way forest trust. Each trust direction is configured with forest-wide authentication. The new security policy of the company prohibits users from the eng.fabrikam.com domain to access resources in the contoso.com domain. You need to configure the forest trust to meet the new security policy requirement.
What should you do?

A.    Delete the outgoing forest trust in the contoso.com domain.
B.    Delete the incoming forest trust in the contoso.com domain.
C.    Change the properties of the existing incoming forest trust in the contoso.com domain from Forest-wide
authentication to Selective authentication.
D.    Change the properties of the existing outgoing forest trust in the contoso.com domain to exclude *.eng.
fabrikam.com from the Name Suffix Routing trust properties.

Answer: D

(more…)

Vendor: Microsoft
Exam Code: 70-640
Exam Name: TS: Windows Server 2008 Active Directory, Configuring
Version: 14.91

QUESTION 51
Your network contains an Active Directory domain.
You have a server named Server1 that runs Windows Server 2008 R2. Server1 is an enterprise root certification authority (CA).
You have a client computer named Computer1 that runs Windows 7. You enable automatic certificate enrollment for all client computers that run Windows 7. You need to verify that the Windows 7 client computers can automatically enroll for certificates.
Which command should you run on Computer1?

A.    certreq.exe retrieve
B.    certreq.exe submit
C.    certutil.exe getkey
D.    certutil.exe pulse

Answer: D

(more…)