Monthly Archives: November 2014

Vendor: Microsoft
Exam Code: 70-640
Exam Name: TS: Windows Server 2008 Active Directory, Configuring
Version: 14.91

QUESTION 101
Your company has a main office and a branch office.
The network contains an Active Directory domain.
The main office contains a writable domain controller named DC1. The branch office contains a read- only domain controller (RODC) named DC2.
You discover that the password of an administrator named Admin1 is cached on DC2. You need to prevent Admin1’s password from being cached on DC2.
What should you do?

A.    Modify the NTDS Site Settings.
B.    Modify the properties of the domain.
C.    Create a Password Setting object (PSO).
D.    Modify the properties of DC2’s computer account.

Answer: D

(more…)

Vendor: Microsoft
Exam Code: 70-640
Exam Name: TS: Windows Server 2008 Active Directory, Configuring
Version: 14.91

QUESTION 91
Your network contains an Active Directory domain. The domain is configured as shown in the following table.

Users in Branch2 sometimes authenticate to a domain controller in Branch1. You need to ensure that users in Branch2 only authenticate to the domain controllers in Main.
What should you do?

A.    On DC3, set the AutoSiteCoverage value to 0.
B.    On DC3, set the AutoSiteCoverage value to 1.
C.    On DC1 and DC2, set the AutoSiteCoverage value to 0.
D.    On DC1 and DC2, set the AutoSiteCoverage value to 1.

Answer: A

(more…)

Vendor: Microsoft
Exam Code: 70-640
Exam Name: TS: Windows Server 2008 Active Directory, Configuring
Version: 14.91

QUESTION 81
Your network contains a single Active Directory forest. The forest contains two domains named contoso.com and sales.contoso.com. The domain controllers are configured as shown in the following table.

All domain controllers run Windows Server 2008 R2. All zones are configured as Active Directory- integrated zones.
You need to ensure that contoso.com records are available on DC3.
Which command should you run?

A.    dnscmd.exe DC1.contoso.com /ZoneChangeDirectoryPartition contoso.com /domain
B.    dnscmd.exe DC1.contoso.com /ZoneChangeDirectoryPartition contoso.com /forest
C.    dnscmd.exe DC3.contoso.com /ZoneChangeDirectoryPartition contoso.com /domain
D.    dnscmd.exe DC3.contoso.com /ZoneChangeDirectoryPartition contoso.com /forest

Answer: B

(more…)

Vendor: Microsoft
Exam Code: 70-640
Exam Name: TS: Windows Server 2008 Active Directory, Configuring
Version: 14.91

QUESTION 71
Your network contains an Active Directory domain named contoso.com. The domain contains the servers shown in the following table.

The functional level of the forest is Windows Server 2003. The functional level of the domain is Windows Server 2003.
DNS1 and DNS2 host the contoso.com zone.
All client computers run Windows 7 Enterprise.
You need to ensure that all of the names in the contoso.com zone are secured by using DNSSEC.
What should you do first?

A.    Change the functional level of the forest.
B.    Change the functional level of the domain.
C.    Upgrade DC1 to Windows Server 2008 R2.
D.    Upgrade DNS1 to Windows Server 2008 R2.

Answer: D

(more…)

Vendor: Microsoft
Exam Code: 70-640
Exam Name: TS: Windows Server 2008 Active Directory, Configuring
Version: 14.91

QUESTION 61
Your company has two Active Directory forests as shown in the following table.

Forest name    Forest functional level    Domain(s)
contoso.com    Windows Server 2008    contoso.com
fabrikam.com    Windows Server 2008    fabrikam.com    eng.fabrikam.com

The forests are connected by using a two-way forest trust. Each trust direction is configured with forest-wide authentication. The new security policy of the company prohibits users from the eng.fabrikam.com domain to access resources in the contoso.com domain. You need to configure the forest trust to meet the new security policy requirement.
What should you do?

A.    Delete the outgoing forest trust in the contoso.com domain.
B.    Delete the incoming forest trust in the contoso.com domain.
C.    Change the properties of the existing incoming forest trust in the contoso.com domain from Forest-wide
authentication to Selective authentication.
D.    Change the properties of the existing outgoing forest trust in the contoso.com domain to exclude *.eng.
fabrikam.com from the Name Suffix Routing trust properties.

Answer: D

(more…)

Vendor: Microsoft
Exam Code: 70-640
Exam Name: TS: Windows Server 2008 Active Directory, Configuring
Version: 14.91

QUESTION 51
Your network contains an Active Directory domain.
You have a server named Server1 that runs Windows Server 2008 R2. Server1 is an enterprise root certification authority (CA).
You have a client computer named Computer1 that runs Windows 7. You enable automatic certificate enrollment for all client computers that run Windows 7. You need to verify that the Windows 7 client computers can automatically enroll for certificates.
Which command should you run on Computer1?

A.    certreq.exe retrieve
B.    certreq.exe submit
C.    certutil.exe getkey
D.    certutil.exe pulse

Answer: D

(more…)

Vendor: Microsoft
Exam Code: 70-640
Exam Name: TS: Windows Server 2008 Active Directory, Configuring
Version: 14.91

QUESTION 41
You are an administrator at ABC.com. Company has a network of 5 member servers acting as file servers. It has an Active Directory domain. You have installed a software application on the servers. As soon as the application is installed, one of the member servers shuts down itself. To trace and rectify the problem, you create a Group Policy Object (GPO). You need to change the domain security settings to trace the shutdowns and identify the cause of it.
What should you do to perform this task?

A.    Link the GPO to the domain and enable System Events option
B.    Link the GPO to the domain and enable Audit Object Access option
C.    Link the GPO to the Domain Controllers and enable Audit Object Access option
D.    Link the GPO to the Domain Controllers and enable Audit Process tracking option
E.    Perform all of the above actions

Answer: A

(more…)

Vendor: Microsoft
Exam Code: 70-640
Exam Name: TS: Windows Server 2008 Active Directory, Configuring
Version: 14.91

QUESTION 31
ABC.com has a main office and a branch office. ABC.com’s network consists of a single Active Directory forest. Some of the servers in the network run Windows Server 2008 and the rest run Windows server 2003.
You are the administrator at ABC.com. You have installed Active Directory Domain Services (AD DS) on a computer that runs Windows Server 2008. The branch office is located in a physically insecure place. It has no IT personnel onsite and there are no administrators over there. You need to setup a Read-Only Domain Controller (RODC) on the Server Core installation computer in the branch office.
What should you do to setup RODC on the computer in branch office?

A.    Execute an attended installation of AD DS
B.    Execute an unattended installation of AD DS
C.    Execute RODC through AD DS
D.    Execute AD DS by using deploying the image of AD DS
E.    none of the above

Answer: B

(more…)

Vendor: Microsoft
Exam Code: 70-640
Exam Name: TS: Windows Server 2008 Active Directory, Configuring
Version: 14.91

QUESTION 21
You need to remove the Active Directory Domain Services role from a domain controller named DC1. What should you do?

A.    Run the netdom remove DC1 command.
B.    Run the Dcpromo utility. Remove the Active Directory Domain Services role.
C.    Run the nltest /remove_server: DC1 command.
D.    Reset the Domain Controller computer account by using the Active Directory Users and Computers utility.

Answer: B

(more…)

Vendor: Microsoft
Exam Code: 70-640
Exam Name: TS: Windows Server 2008 Active Directory, Configuring
Version: 14.91

QUESTION 11
Your company has a main office and a branch office. The company has a single-domain Active Directory forest. The main office has two domain controllers named DC1 and DC2 that run Windows Server 2008 R2. The branch office has a Windows Server 2008 R2 read-only domain controller (RODC) named DC3. All domain controllers hold the DNS Server role and are configured as Active Directory-integrated zones. The DNS zones only allow secure updates. You need to enable dynamic DNS updates on DC3. What should you do?

A.    Run the Dnscmd.exe /ZoneResetType command on DC3.
B.    Reinstall Active Directory Domain Services on DC3 as a writable domain controller.
C.    Create a custom application directory partition on DC1. Configure the partition to store Active
Directory-integrated zones.
D.    Run the Ntdsutil.exe > DS Behavior commands on DC3.

Answer: B

(more…)