Embed Size (px)
DESCRIPTION
Examways offers Microsoft 70-640 questions and answers for your Windows Server 2008 Active Directory. Configuring exam preparation. Download 70-640 free sample to check the quality.
Citation preview
Microsoft 70-640Windows Server 2008 Active Directory. Configuring
10 Q&A
Version 3.0
http://www.examways.com/70-640.htm
Leading the way in IT testing and certification tools, www.ExamWays.com
- 2 -
Important Note, Please Read Carefully
Other 70-640 productsA) Offline Testing engineUse the offline Testing engine product topractice the questions in an exam environment.
Build a foundation of knowledge which will be useful also after passing the exam.
Latest VersionWe are constantly reviewing our products. New material is added and old material isrevised. Free updates are available for 90 days after the purchase. You should check yourmember zone at 70-640 and update 3-4 days before the scheduled exam date.
Here is the procedure to get the latest version:
1.Go towww.70-640.com2.Click on Log in3.The latest versions of all purchased products are downloadable from here. Just click thelinks.For most updates,it is enough just to print the new questions at the end of the newversion, not the whole document.
FeedbackIf you spot a possible improvement then please let us know. We always interested inimproving product quality.Feedback should be send to [email protected]. You should include the following:Exam number, version, page number, question number, and your login Email.
Our experts will answer your mail promptly.
CopyrightEach iPAD file is a green exe file. if we find out that a particular iPAD Viewer file isbeing distributed by you, 70-640 reserves the right to take legal action against youaccording to the International Copyright Laws.
ExplanationsThis product does not include explanations at the moment. If you are interested inproviding explanations for this exam, please contact [email protected].
Leading the way in IT testing and certification tools, www.ExamWays.com
- 3 -
www.70-640.com Q: 1 QUESTION 1Your company has an Active Directory domain. The company has two domaincontrollers named DC1 and DC2. DC1 holds the schema master role. DC1 fails. Youlog on to Active Directory by using theadministrator account. You are not able to transfer the schema master role. Youneed to ensure that DC2 holds the schema master role. What should you do?
A. Register the Schmmgmt.dll. Start the Active Directory Schema snap-in.
B. Configure DC2 as a bridgehead server.
C. On DC2, seize the schema master role.
D. Log off and log on again to Active Directory by using an account that is a member ofthe Schema Admins group. Start the Active Directory Schema snap-in.
Answer: C
www.70-640.com Q: 2 QUESTION 2Your company has a single Active Directory domain. All domain controllers runWindows Server 2003.You install Windows Server 2008 on a server. You need to add the new server as adomain controller in your domain. What should you do first?
A. On the new server, run dcpromo /adv.
B. On the new server, run dcpromo /createdcaccount.
C. On a domain controller run adprep /rodcprep.
D. On a domain controller, run adprep /forestprep.
Leading the way in IT testing and certification tools, www.ExamWays.com
- 4 -
Answer: D
www.70-640.com Q: 3 QUESTION 3Your company has an Active Directory forest that contains only Windows Server2003 domain controllers. You need to prepare the Active Directory domain to installWindows Server 2008 domain controllers. Which two tasks should you perform?(Each correct answer presents part of the solution.(Choose two.)
A. Run the adprep /forestprep command.
B. Run the adprep /domainprep command.
C. Raise the forest functional level to Windows Server 2008.
D. Raise the domain functional level to Windows Server 2008.
Answer: A, B
www.70-640.com Q: 4 QUESTION 4You have an existing Active Directory site named Site1. You create a new ActiveDirectory site and name it Site2. You need to configure Active Directory replicationbetween Site1 and Site2. You install a new domain controller. You create the sitelink between Site1 and Site2. What should you do next?
A. Use the Active Directory Sites and Services console to configure a new site linkbridge object.
B. Use the Active Directory Sites and Services console to decrease the site link costbetween Site1 and Site2.
C. Use the Active Directory Sites and Services console to assign a new IP subnet toSite2. Move the new domain controller object to Site2.
D. Use the Active Directory Sites and Services console to configure the new domaincontroller as a preferred bridgehead server for Site1.
Leading the way in IT testing and certification tools, www.ExamWays.com
- 5 -
Answer: C
www.70-640.com Q: 5 QUESTION 5You are decommissioning domain controllers that hold all forest-wide operationsmaster roles. You need to transfer all forest-wide operations master roles to anotherdomain controller. Which two rolesshould you transfer? (Each correct answer presents part of the solution. Choosetwo.)
A. RID master
B. PDC emulator
C. Schema master
D. Infrastructure master
E. Domain naming master
Answer: C, E
www.70-640.com Q: 6 QUESTION 6Your company, Contoso, Ltd., has offices in North America and Europe. Contosohas an Active Directory forest that has three domains. You need to reduce the timerequired to authenticate users fromthe labs.eu.contoso.com domain when they access resources in theeng.na.contoso.com domain. What should you do?
A. Decrease the replication interval for all Connection objects.
B. Decrease the replication interval for the DEFAULTIPSITELINK site link.
C. Set up a one-way shortcut trust from eng.na.contoso.com to labs.eu.contoso.com.
D. Set up a one-way shortcut trust from labs.eu.contoso.com to eng.na.contoso.com.
Leading the way in IT testing and certification tools, www.ExamWays.com
- 6 -
Answer: C
www.70-640.com Q: 7 QUESTION 7Your company has an Active Directory forest. Not all domain controllers in theforest are configured as Global Catalog Servers. Your domain structure containsone root domain and one child domain. You modify the folder permissions on a fileserver that is in the child domain. You discover that some Access Control entriesstart with S-1-5-21 and that no account name is listed. You need to list the accountnames.What should you do?
A. Move the RID master role in the child domain to a domain controller that holds theGlobal Catalog.
B. Modify the schema to enable replication of the friendlynames attribute to the GlobalCatalog.
C. Move the RID master role in the child domain to a domain controller that does nothold the Global Catalog.
D. Move the infrastructure master role in the child domain to a domain controller thatdoes not hold the Global Catalog.
Answer: D
www.70-640.com Q: 8 QUESTION 10Your company has an Active Directory domain named contoso.com. The companynetwork has two DNS servers named DNS1 and DNS2.The DNS servers are configured as shown in the following table.Domain users, who are configured to use DNS2 as the preferred DNS server, areunable to connect to Internet Web sites.You need to enable Internet name resolution for all client computers.What should you do?
Leading the way in IT testing and certification tools, www.ExamWays.com
- 7 -
A. Create a copy of the .(root) zone on DNS1.
B. Update the list of root hints servers on DNS2.
C. Update the Cache.dns file on DNS2. Configure conditional forwarding on DNS1.
D. Delete the .(root) zone from DNS2. Configure conditional forwarding on DNS2.
Answer: D
www.70-640.com Q: 9 QUESTION 11Your company has an organizational unit named Production. The Productionorganizational unit has a child organizational unit named R&D. You create a GPOnamed Software Deployment and link it to the Production organizational unit. Youcreate a shadow group for the R&D organizational unit. You need to deploy anapplication to users in the Production organizational unit. You also need to ensurethat the application is not deployed to users in the R&D organizational unit. Whatare two possible ways to achieve this goal? (Each correct answer presents acomplete solution. Choose two.)
A. Configure the Enforce setting on the software deployment GPO.
B. Configure the Block Inheritance setting on the R&D organizational unit.
C. Configure the Block Inheritance setting on the Production organizational unit.
D. Configure security filtering on the Software Deployment GPO to Deny Apply grouppolicy for the R&D security group.
Answer: B, D
Leading the way in IT testing and certification tools, www.ExamWays.com
- 8 -
www.70-640.com Q: 10 QUESTION 12Your companys security policy requires complex passwords. You have a commadelimited file named import.csv that contains user account information. You need tocreate user accounts in the domain byusing the import.csv file. You also need to ensure that the new user accounts are setto use default passwords and are disabled. What should you do?
A. Modify the userAccountControl attribute to disabled. Run the csvde i k f import.csvcommand. Run the DSMOD utility to set default passwords for the user accounts.
B. Modify the userAccountControl attribute to accounts disabled. Run the csvde fimport.csv command.¡¡Run the DSMOD utility to set default passwords for the user accounts.
C. Modify the userAccountControl attribute to disabled. Run the wscript import.csvcommand. Run the¡¡DSADD utility to set default passwords for the imported user accounts.
D. Modify the userAccountControl attribute to disabled. Run the ldifde i f import.csvcommand. Run the¡¡DSADD utility to set passwords for the imported user accounts.
Answer: A
