Vendor: Microsoft
Exam Code: 70-640
Exam Name: TS: Windows Server 2008 Active Directory, Configuring
Version: 14.91
QUESTION 161
The default domain GPO in your company is configured by using the following account policy settings:
– Minimum password length: 8 characters
– Maximum password age: 30 days
– Enforce password history: 12 passwords remembered
– Account lockout threshold: 3 invalid logon attempts
– Account lockout duration: 30 minutes
You install Microsoft SQL Server on a computer named Server1 that runs Windows Server 2008 R2. The SQL Server application uses a service account named SQLSrv. The SQLSrv account has domain user rights.
The SQL Server computer fails after running successfully for several weeks. The SQLSrv user account is not locked out.
You need to resolve the server failure and prevent recurrence of the failure. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
A. Reset the password of the SQLSrv user account.
B. Configure the local security policy on Serverl to grant the Logon as a service right on the SQLSrv
user account.
C. Configure the properties of the SQLSrv account to Password never expires.
D. Configure the properties of the SQLSrv account to User cannot change password.
E. Configure the local security policy on Serverl to explicitly grant the SQLSrv user account the Allow
logon locally user right.
Answer: AC
QUESTION 162
Your company has two Active Directory forests named Forest1 and Forest2, The forest functional level and the domain functional level of Forest1 are set to Windows Server 2008.
The forest functional level of Forest2 is set to Windows 2000, and the domain functional levels in Forest2 are set to Windows Server 2003.
You need to set up a transitive forest trust between Forestl and Forest2,
What should you do first?
A. Raise the forest functional level of Forest2 to Windows Server 2003 Interim mode.
B. Raise the forest functional level of Forest2 to Windows Server 2003.
C. Upgrade the domain controllers in Forest2 to Windows Server 2008.
D. Upgrade the domain controllers in Forest2 to Windows Server 2003.
Answer: B
QUESTION 163
Your company has an Active Directory forest that contains two domains, The forest has universal groups that contain members from each domain. A branch office has a domain controller named DC1, Users at the branch office report that the logon process takes too long,
You need to decrease the amount of time it takes for the branch office users to logon.
What should you do?
A. Configure DC1 as a Global Catalog server.
B. Configure DC1 as a bridgehead server for the branch office site.
C. Decrease the replication interval on the site link that connects the branch office to the corporate network.
D. Increase the replication interval on the site link that connects the branch office to the corporate network.
Answer: A
QUESTION 164
Your company has an Active Directory domain. The main office has a DNS server named DNS1 that is configured with Active Directory-integrated DNS. The branch office has a DNS server named DNS2 that contains a secondary copy of the zone from DNS1. The two offices are connected with an unreliable WAN link.
You add a new server to the main office. Five minutes after adding the server, a user from the branch office reports that he is unable to connect to the new server. You need to ensure that the user is able to connect to the new server.
What should you do?
A. Clear the cache on DNS2.
B. Reload the zone on DNS1.
C. Refresh the zone on DNS2.
D. Export the zone from DNS1 and import the zone to DNS2.
Answer: C
QUESTION 165
You need to validate whether Active Directory successfully replicated between two domain controllers.
What should you do?
A. Run the DSget command.
B. Run the Dsquery command.
C. Run the RepAdmin command.
D. Run the Windows System Resource Manager.
Answer: C
QUESTION 166
You have a domain controller that runs Windows Server 2008 R2. The Windows Server Backup feature is installed on the domain controller.
You need to perform a non-authoritative restore of the domain controller by using an existing backup file.
What should you do?
A. Restart the domain controller in Directory Services Restore Mode. Use the WBADMIN command to
perform a critical volume restore.
B. Restart the domain controller in Directory Services Restore Mode. Use the Windows Server Backup
snap-in to perform a critical volume restore.
C. Restart the domain controller in safe mode. Use the Windows Server Backup snap-in to perform a critical
volume restore.
D. Restart the domain controller in safe mode. Use the WBADMIN command to perform a critical volume restore.
Answer: A
QUESTION 167
Your company has an Active Directory forest. Not all domain controllers in the forest are configured as Global Catalog Servers. Your domain structure contains one root domain and one child domain. You modify the folder permissions on a file server that is in the child domain. You discover that some Access Control entries start with S-1-5-21 and that no account name is listed. You need to list the account names. What should you do?
A. Move the RID master role in the child domain to a domain controller that holds the Global Catalog.
B. Modify the schema to enable replication of the friendlynames attribute to the Global Catalog.
C. Move the RID master role in the child domain to a domain controller that does not hold the Global Catalog.
D. Move the infrastructure master role in the child domain to a domain controller that does not hold the
Global Catalog.
Answer: D
QUESTION 168
Your company security policy requires complex passwords.
You have a comma delimited file named import.csv that contains user account information.
You need to create user account in the domain by using the import.csv file. You also need to ensure that the new user accounts are set to use default passwords and are disabled.
What shoulld you do?
A. Modify the userAccountControl attribute to disabled. Run the csvde i k f import.csv command.
Run the DSMOD utility to set default passwords for the user accounts.
B. Modify the userAccountControl attribute to accounts disabled. Run the csvde -f import.csv command.
Run the DSMOD utility to set default passwords for the user accounts.
C. Modify the userAccountControl attribute to disabled. Run the wscript import.csv command.
Run the DSADD utility to set default passwords for the imported user accounts.
D. Modify the userAccountControl attribute to disabled. Run ldifde -i -f import.csv command.
Run the DSADD utility to set passwords for the imported user accounts.
Answer: A
QUESTION 169
You are installing an application on a computer that runs Windows Server 2008 R2. During installation, the application will need to install new attributes and classes to the Active Directory database. You need to ensure that you can install the application. What should you do?
A. Change the functional level of the forest to Windows Server 2008 R2.
B. Log on by using an account that has Server Operator rights.
C. Log on by using an account that has Schema Administrator rights and the appropriate rights to install
the application.
D. Log on by using an account that has the Enterprise Administrator rights and the appropriate rights to
install the application.
Answer: C
QUESTION 170
Your company has an Active Directory forest. The company has servers that run Windows Server 2008 R2 and client computers that run Windows 7. The domain uses a set of GPO administrative templates that have been approved to support regulatory compliance requirements. Your partner company has an Active Directory forest that contains a single domain. The company has servers that run Windows Server 2008 R2 and client computers that run Windows 7. You need to configure your partner company’s domain to use the approved set of administrative templates.
What should you do?
A. Use the Group Policy Management Console (GPMC) utility to back up the GPO to a file. In each site,
import the GPO to the default domain policy.
B. Copy the ADMX files from your company’s PDC emulator to the PolicyDefinitions folder on the partner
company’s PDC emulator.
C. Copy the ADML files from your company’s PDC emulator to the PolicyDefinitions folder on the partner
company’s PDC emulator.
D. Download the conf.adm, system.adm, wuau.adm, and inetres.adm files from the Microsoft Updates
Web site. Copy the ADM files to the PolicyDefinitions folder on thr partner company’s emulator.
Answer: B
If you want to pass Microsoft 70-640 exam successfully, donot missing to read latest lead2pass Microsoft 70-640 dumps.
If you can master all lead2pass questions you will able to pass 100% guaranteed.
http://www.lead2pass.com/70-640.html
