Microsoft

Vendor: Microsoft
Exam Code: 70-640
Exam Name: TS: Windows Server 2008 Active Directory, Configuring
Version: 14.91

QUESTION 551
Your network contains an Active Directory domain named contoso.com. The network contains a public key infrastructure (PKI). You deploy a new certificate revocation list (CRL) distribution point (CDP) to a server named Server1. You discover that users cannot download delta CRLs from Server1. You verify that the users can download the complete CRL successfully. You need to ensure that the users can download delta CRLs from Server1. Which command should you run?

A.    Appcmd set config "Default Web Site"
/section:system.webServer/Security/requestFiltering -allowDoubleEscaping:True
B.    Appcmd set config "Certificates" /section:system.webServer/Security/requestFiltering – allowDoubleEscaping:
False
C.    Certutil -setreg CA\CRLDeltaPeriod "Days"
D.    Certutil -setreg CA\CRLOverlapPeriod "Days"

Answer: A

(more…)

Vendor: Microsoft
Exam Code: 70-640
Exam Name: TS: Windows Server 2008 Active Directory, Configuring
Version: 14.91

QUESTION 541
Your network contains an Active Directory domain named contoso.com.
The Zone Transfers settings of contoso.com are configured as shown in the Zone Transfers exhibit. (Click the Exhibit button.)

(more…)

Vendor: Microsoft
Exam Code: 70-640
Exam Name: TS: Windows Server 2008 Active Directory, Configuring
Version: 14.91

QUESTION 521
Your network contains an Active Directory domain. The domain contains four domain controllers. You create a new application directory partition. You need to ensure that the new application directory partition replicates to only three of the domain controllers. Which tool should you use?

A.    Active Directory Administrative Center
B.    Dsamain
C.    Dsmod
D.    Ntdsutil

Answer: D

(more…)

Vendor: Microsoft
Exam Code: 70-640
Exam Name: TS: Windows Server 2008 Active Directory, Configuring
Version: 14.91

QUESTION 531
Your network consists of an Active Directory forest that contains one domain named contoso.com. All domain controllers run Windows Server 2008 R2 and are configured as DNS servers.
You have two Active Directory-integrated zones: contoso.com and nwtraders.com.
You need to ensure a user is able to modify records in the nwtraders.com zone.
The solution must prevent the user from modifying the SOA record in the contoso.com zone.
What should you do?

A.    From the DNS Manager console, modify the permissions of the nwtraders.com zone.
B.    From the DNS Manager console, modify the permissions of the contoso.com zone.
C.    From the Active Directory Users and Computers console, run the Delegation of Control Wizard.
D.    From the Active Directory Users and Computers console, modify the permissions of the Domain Controllers organizational unit (OU).

Answer: A

(more…)

Vendor: Microsoft
Exam Code: 70-640
Exam Name: TS: Windows Server 2008 Active Directory, Configuring
Version: 14.91

QUESTION 501
Your network contains an Active Directory forest named contoso.com. The functional level of the forest is Windows Server 2008 R2. You have four Active Directory sites. Each site has multiple Active Directory subnets.
You need to identify all of the authentication requests that originate from client computers that are not associated to an Active Directory subnet.
What should you use?

A.    The %Systemroot%\System32\Network_llu.log log file
B.    The %Systemroot%\Debug\Netsetup.log log file
C.    The Authentication User Interface operational log
D.    The %Systemroot%\Debug\Netlogon.log log file

Answer: B

(more…)

Vendor: Microsoft
Exam Code: 70-640
Exam Name: TS: Windows Server 2008 Active Directory, Configuring
Version: 14.91

QUESTION 511
Your network contains an Active Directory domain. The domain contains five sites. One of the sites contains a read-only domain controller (RODC) named RODC1. You need to identify which user accounts can have their password cached on RODC1. Which tool should you use?

A.    Ntdsutil
B.    Dcdiag
C.    Repadmin
D.    Get-ADAccountResultantPasswordReplicationPolicy

Answer: A

(more…)

Vendor: Microsoft
Exam Code: 70-640
Exam Name: TS: Windows Server 2008 Active Directory, Configuring
Version: 14.91

QUESTION 491
Your network contains an Active Directory forest named contoso.com. You need to identify whether a fine-grained password policy is applied to a specific group.
Which tool should you use?

A.    Active Directory Users and Computers
B.    Security Configuration Wizard (SCW)
C.    Group Policy Management Editor
D.    Active Directory Sites and Services

Answer: A

(more…)

Vendor: Microsoft
Exam Code: 70-640
Exam Name: TS: Windows Server 2008 Active Directory, Configuring
Version: 14.91

QUESTION 481
You are the systems administrator for a medium-sized Active Directory domain. Currently, the environment supports many different domain controllers, some of which are running Windows NT 4 and others that are running Windows 2003 and Server 2008 R2. When you are running domain controllers in this type of environment, which of the following types of groups can you not use?
(Choose Two)

A.    Universal security groups
B.    Global groups
C.    Domain local groups
D.    Computer groups

Answer: AD

(more…)

Vendor: Microsoft
Exam Code: 70-640
Exam Name: TS: Windows Server 2008 Active Directory, Configuring
Version: 14.91

QUESTION 471
You are the network administrator for the ABC Company. Your network consists of two DNS servers named DNS1 and DNS2. The users who are configured to use DNS2 complain because they are unable to connect to Internetwebsites.

(more…)