Microsoft

Vendor: Microsoft
Exam Code: 70-640
Exam Name: TS: Windows Server 2008 Active Directory, Configuring
Version: 14.91

QUESTION 61
Your company has two Active Directory forests as shown in the following table.

Forest name    Forest functional level    Domain(s)
contoso.com    Windows Server 2008    contoso.com
fabrikam.com    Windows Server 2008    fabrikam.com    eng.fabrikam.com

The forests are connected by using a two-way forest trust. Each trust direction is configured with forest-wide authentication. The new security policy of the company prohibits users from the eng.fabrikam.com domain to access resources in the contoso.com domain. You need to configure the forest trust to meet the new security policy requirement.
What should you do?

A.    Delete the outgoing forest trust in the contoso.com domain.
B.    Delete the incoming forest trust in the contoso.com domain.
C.    Change the properties of the existing incoming forest trust in the contoso.com domain from Forest-wide
authentication to Selective authentication.
D.    Change the properties of the existing outgoing forest trust in the contoso.com domain to exclude *.eng.
fabrikam.com from the Name Suffix Routing trust properties.

Answer: D

(more…)

Vendor: Microsoft
Exam Code: 70-640
Exam Name: TS: Windows Server 2008 Active Directory, Configuring
Version: 14.91

QUESTION 51
Your network contains an Active Directory domain.
You have a server named Server1 that runs Windows Server 2008 R2. Server1 is an enterprise root certification authority (CA).
You have a client computer named Computer1 that runs Windows 7. You enable automatic certificate enrollment for all client computers that run Windows 7. You need to verify that the Windows 7 client computers can automatically enroll for certificates.
Which command should you run on Computer1?

A.    certreq.exe retrieve
B.    certreq.exe submit
C.    certutil.exe getkey
D.    certutil.exe pulse

Answer: D

(more…)

Vendor: Microsoft
Exam Code: 70-640
Exam Name: TS: Windows Server 2008 Active Directory, Configuring
Version: 14.91

QUESTION 41
You are an administrator at ABC.com. Company has a network of 5 member servers acting as file servers. It has an Active Directory domain. You have installed a software application on the servers. As soon as the application is installed, one of the member servers shuts down itself. To trace and rectify the problem, you create a Group Policy Object (GPO). You need to change the domain security settings to trace the shutdowns and identify the cause of it.
What should you do to perform this task?

A.    Link the GPO to the domain and enable System Events option
B.    Link the GPO to the domain and enable Audit Object Access option
C.    Link the GPO to the Domain Controllers and enable Audit Object Access option
D.    Link the GPO to the Domain Controllers and enable Audit Process tracking option
E.    Perform all of the above actions

Answer: A

(more…)

Vendor: Microsoft
Exam Code: 70-640
Exam Name: TS: Windows Server 2008 Active Directory, Configuring
Version: 14.91

QUESTION 31
ABC.com has a main office and a branch office. ABC.com’s network consists of a single Active Directory forest. Some of the servers in the network run Windows Server 2008 and the rest run Windows server 2003.
You are the administrator at ABC.com. You have installed Active Directory Domain Services (AD DS) on a computer that runs Windows Server 2008. The branch office is located in a physically insecure place. It has no IT personnel onsite and there are no administrators over there. You need to setup a Read-Only Domain Controller (RODC) on the Server Core installation computer in the branch office.
What should you do to setup RODC on the computer in branch office?

A.    Execute an attended installation of AD DS
B.    Execute an unattended installation of AD DS
C.    Execute RODC through AD DS
D.    Execute AD DS by using deploying the image of AD DS
E.    none of the above

Answer: B

(more…)

Vendor: Microsoft
Exam Code: 70-640
Exam Name: TS: Windows Server 2008 Active Directory, Configuring
Version: 14.91

QUESTION 21
You need to remove the Active Directory Domain Services role from a domain controller named DC1. What should you do?

A.    Run the netdom remove DC1 command.
B.    Run the Dcpromo utility. Remove the Active Directory Domain Services role.
C.    Run the nltest /remove_server: DC1 command.
D.    Reset the Domain Controller computer account by using the Active Directory Users and Computers utility.

Answer: B

(more…)

Vendor: Microsoft
Exam Code: 70-640
Exam Name: TS: Windows Server 2008 Active Directory, Configuring
Version: 14.91

QUESTION 11
Your company has a main office and a branch office. The company has a single-domain Active Directory forest. The main office has two domain controllers named DC1 and DC2 that run Windows Server 2008 R2. The branch office has a Windows Server 2008 R2 read-only domain controller (RODC) named DC3. All domain controllers hold the DNS Server role and are configured as Active Directory-integrated zones. The DNS zones only allow secure updates. You need to enable dynamic DNS updates on DC3. What should you do?

A.    Run the Dnscmd.exe /ZoneResetType command on DC3.
B.    Reinstall Active Directory Domain Services on DC3 as a writable domain controller.
C.    Create a custom application directory partition on DC1. Configure the partition to store Active
Directory-integrated zones.
D.    Run the Ntdsutil.exe > DS Behavior commands on DC3.

Answer: B

(more…)

Vendor: Microsoft
Exam Code: 70-640
Exam Name: TS: Windows Server 2008 Active Directory, Configuring
Version: 14.91

QUESTION 1
Your company has a single Active Directory domain named intranet.adatum.com. The domain controllers run Windows Server 2008 and the DNS server role. All computers, including non-domain members, dynamically register their DNS records. You need to configure the intranet.adatum.com zone to allow only domain members to dynamically register DNS records.
What should you do?

A.    Set dynamic updates to Secure Only.
B.    Remove the Authenticated Users group.
C.    Enable zone transfers to Name Servers.
D.    Deny the Everyone group the Create All Child Objects permission.

Answer: A

(more…)

Vendor: Microsoft
Exam Code: 70-470
Exam Name: Recertification for MCSE: Business Intelligence

QUESTION 1
You are designing a strategy for an enterprise reporting solution that uses SQL Server Reporting Services (SSRS).
Many of the SSRS reports will use common utilities and functions, including the following:

– Report utility functions and business logic in code
– Standardized report formatting properties such as fonts and colors for report branding
– Formatting may change and new functions may be added as the reporting solution evolves.

You need to create a strategy for deploying the formatting and code across the entire enterprise reporting solution.
You must also ensure that reports can be easily updated to reflect formatting and function changes.
What should you do? (More than one answer choice may achieve the goal. Select the BEST answer.)

A.    Create a report as a template. Apply standardized formatting to the template.
Store code in the Code section of the template.
B.    Build a web service that retrieves formatting properties and runs code.
Call the web service through a report dataset.
C.    Store the formatting properties and code in database objects.
Use stored procedures to populate a default value for report parameters and map each parameter
to a corresponding formatting property.
D.    Create an assembly that contains formatting properties and code.
Deploy the assembly on the Reporting Server and reference the assembly from each report.

Answer: D

(more…)