Microsoft 83-640TS:WindowsServer2008ActiveDirectory,

10 Q&A

Version 3.0

http://www.examways.com/83-640.htm

Leading the way in IT testing and certification tools, www.ExamWays.com

- 2 -

Important Note, Please Read Carefully

Other 83-640 productsA) Offline Testing engineUse the offline Testing engine product topractice the questions in an exam environment.

Build a foundation of knowledge which will be useful also after passing the exam.

Latest VersionWe are constantly reviewing our products. New material is added and old material isrevised. Free updates are available for 90 days after the purchase. You should check yourmember zone at 83-640 and update 3-4 days before the scheduled exam date.

Here is the procedure to get the latest version:

1.Go towww.83-640.com2.Click on Log in3.The latest versions of all purchased products are downloadable from here. Just click thelinks.For most updates,it is enough just to print the new questions at the end of the newversion, not the whole document.

FeedbackIf you spot a possible improvement then please let us know. We always interested inimproving product quality.Feedback should be send to feedback@83-640.com. You should include the following:Exam number, version, page number, question number, and your login Email.

Our experts will answer your mail promptly.

CopyrightEach iPAD file is a green exe file. if we find out that a particular iPAD Viewer file isbeing distributed by you, 83-640 reserves the right to take legal action against youaccording to the International Copyright Laws.

ExplanationsThis product does not include explanations at the moment. If you are interested inproviding explanations for this exam, please contact feedback@83-640.com.

Leading the way in IT testing and certification tools, www.ExamWays.com

- 3 -

www.83-640.com Q: 1 Your company, Contoso, Ltd , has offices in North Americaand Europe. Contoso has an Active Directory forest that has three domains. Youneed to reduce the time required to authenticate users from the labs.eu. contoso.comdomain when they access resources in the eng.na.contoso.com domain. What shouldyou do?

A. Decrease the replication interval for all Connection objects.

B. Decrease the replication interval for the DEFAULTIPSITELINK site link.

C. Set up a one-way shortcut trust from eng.na.contoso.com to labs.eu.contoso.com.

D. Set up a one-way shortcut trust from labs.eu.contoso.com to eng.na.contoso.com.

Answer: C

www.83-640.com Q: 2 Your company has an Active Directory domain. You log onto the domain controller. The Active Directory Schema snap-in is not available inthe Microsoft Management Console (MMC). You need to access the ActrveDirectory Schema snap-in. What should you do?

A. Register Schmmgml.dll.

B. Log off and log on again by using an account that is a member of the SchemaAdministrators group.

C. Use the Ntdsutil.exe command to connect to the Schema Master operations masterand open the schema for writing.

D. Add the Active Directory Lightweight Directory Services (AD LDS) role to thedomain controller by using Server Manager.

Leading the way in IT testing and certification tools, www.ExamWays.com

- 4 -

Answer: A

www.83-640.com Q: 3 You have a Windows Server 2008 Enterprise Root CA.Security policy prevents port 443 and port 80 from being opened on domaincontrollers and on the issuing CA. You need to allow users to request certificatesfrom a Web interface. You install the AD CS role. What should you do next?

A. Configure the Online Responder Role Service on a member server.

B. Configure the Online Responder Role Service on a domain controller.

C. Configure the Certification Authority Web Enrollment Role Service on a memberserver.

D. Configure the Certification Authority Web Enrollment Role Service on a domaincontroller.

Answer: C

www.83-640.com Q: 4 Your company uses a Windows 2008 Enterprise certificateauthority (CA) to issue certificates. You need to implement key archival. Whatshould you do?

A. Archive the private key on the server.

B. Apply the Hisecdc security template to the domain controllers.

C. Configure the certificate for automatic enrollment for the computers that storeencrypted files.

D. Install an Enterprise Subordinate CA and issue a user certificate to users of theencrypted files.

Answer: A

Leading the way in IT testing and certification tools, www.ExamWays.com

- 5 -

www.83-640.com Q: 5 Your company has an Active Directory forest that containsmultiple domain controllers. The domain controllers run Windows Server 2008.You need to perform an an authoritative restore of a deleted orgainzational unit andits child objects. Which four actions should you perform in sequence? (To answer,move the appropriate four actions from the list of actions to the answer area, andarrange them in the correct order.)Answer & ExplanationCorrect AnswerExplanationsNo more information availableExplanation/Reference:

Answer: Check 83-640 eEngine, Download from Member Center

www.83-640.com Q: 6 Your network consists of a single Active Directory domainAll domain controllers run WIndows Server 2008. You need to capture allreplication errors from all domain controllers to a central localion What should youdo?

A. configure event log subscriptions.

B. Start the System Performance data collector set.

C. start the Active Directory Diagnostics data collector set.

D. Install Network Monitor and create a new a new capture.

Leading the way in IT testing and certification tools, www.ExamWays.com

- 6 -

Answer: A

www.83-640.com Q: 7 You need to remove the Active Directory Domain Servicesrole from a domain controller named DC1. What should you do?

A. Run the netdom remove DC1 command

B. Run the nltest /remove_server: DC1 command

C. Run the Dcpromo utility. Remove the Active Directory Domain Services role.

D. Reset the Domain Controller computer account by using the Active Directory Usersand Computers utility.

Answer: C

www.83-640.com Q: 8 Your company has an Active Directory domain that runsWindows Server 2008 The Sales OU contains an OU for Computers, an OU forGroups, and an OU for Users You perform nightly backups. An administratordeletes the Groups OU You need to restore the Groups OU without affecting usersand computers in the Sales OU What should you do?

A. Perform an authoritative restore of the Sales OU.

B. Perform an authoritative restore of the Groups OU.

C. Perform a non-authoritative restore of the Groups OU.

D. Perform a non-authoritative restore of the Sales OU.

Answer: B

Leading the way in IT testing and certification tools, www.ExamWays.com

- 7 -

www.83-640.com Q: 9 You need to identify all failed logon attempts on the domaincontrollers. What should you do?

A. Run Event Viewer.

B. View the Netlogon.log file.

C. Run the Security and Configuration Wizard.

D. View the Security tab on the domain controller computer object.

Answer: A

www.83-640.com Q: 10 Your company has a domain controller that runs WindowsServer 2008. The server is a backup server. The server has a single 500-GB harddisk that has three partitions for the operating system, applications, and data. Youperform daily backups of the server. The hard disk fails. You replace the hard diskwith a new hard disk of the same capacity. You restart the computer on theinstallation media. You select the Repair your computer option. You need to restorethe operating system and all files. What should you do?

A. Select the Startup repair option.

B. Select the System restore option.

C. Run the Rollback utility at the command prompt.

D. Run the Wbadmin utility at the command prompt.

Answer: D