Instant Download 70-640 PDF Files! New Updated 651 Exam Questions and Answers help 100% Exam Pass! 70-640 Certification Get Quickly!
Vendor: Microsoft
Exam Code: 70-640
Exam Name: TS: Windows Server 2008 Active Directory, Configuring
Keywords: 70-640 Exam Dumps,70-640 Practice Tests,70-640 Practice Exams,70-640 Exam Questions,70-640 Dumps,70-640 Dumps PDF,70-640 VCE,70-640 Braindump,70-640 TS: Windows Server 2008 Active Directory, Configuring
QUESTION 501
Your network contains an Active Directory forest named contoso.com.
The functional level of the forest is Windows Server 2008 R2.
You have four Active Directory sites.
Each site has multiple Active Directory subnets.
You need to identify all of the authentication requests that originate from client computers that are not associated to an Active Directory subnet.
What should you use?
A. The %Systemroot%\System32\Network_llu.log log file
B. The %Systemroot%\Debug\Netsetup.log log file
C. The Authentication User Interface operational log
D. The %Systemroot%\Debug\Netlogon.log log file
Answer: B
Explanation:
Identifying Whether
You Have a Problem Authenticating
You can identify whether you have a problem authenticating (or joining) a computer to a domain by verifying that the local workstation is working. Do this by running the Netdiag tool. Read the output from the top, and look for the words “ERROR” or “FATAL.” (Many failures are not relevant to the domain itself; but you should follow up on them because they involve network connectivity issues.) If you don’t find these words in the output, continue as follows:
Run netdiag /v (verbose mode). Do you receive any specific error messages or FATAL errors?
If the answer to the preceding question is “No,” run netdiag /debug. Do you receive any specific error messages or FATAL errors?
If Netdiag displays an error or failure with the domain itself, check the % SystemRoot %\debug\netsetup.log file for join errors.
QUESTION 502
Your network contains an Active Directory domain.
The domain contains five sites.
One of the sites contains a read-only domain controller (RODC) named RODC1.
You need to identify which user accounts can have their password cached on RODC1.
Which tool should you use?
A. Get-ADFineGrainedPasswordPolicy
B. Dcdiag
C. Get-ADDomamControllerPasswordReplicationPolicy
D. Get-ADAccountResultantPasswordReplicationPolicy
Answer: A
QUESTION 503
Your network contains an Active Directory domain.
The domain is configured as shown in the exhibit. (Click the Exhibit button.)
You have a Group Policy object (GPO) linked to the domain.
The GPO is used to deploy a number of software packages.
You need to ensure that the GPO is applied only to client computers that have sufficient free disk space.
What should you do?
A. Modify the Group Policy permissions.
B. Enable block inheritance.
C. Configure the link order.
D. Enable loopback processing in merge mode.
E. Enable loopback processing in replace mode.
F. Modify the Group Policy permissions.
G. Enable block inheritance.
H. Configure the link order.
I. Enable loopback processing in merge mode.
J. Enable loopback processing in replace mode.
Answer: F
QUESTION 504
Hotspot Question
Your network contains an Active Directory domain named contoso.com.
All servers are located in the same Active Directory site.
The domain contains two domain controllers named DC1 and DC2.
Both domain controllers host an Active Directory-integrated zone for contoso.com.
The Start of Authority (SOA) record of the contoso.com zone is shown in the exhibit. (Click the Exhibit button.)
You have a member server named Server1.
Server1 hosts a secondary zone of contoso.com.
On DC1, you add a new record to the contoso.com zone.
In the table below, identify the maximum amount of time required to replicate the record to each server. Make only one selection in each column.
Answer:
QUESTION 505
You have an Active Directory domain named contoso.com.
You need to view the account lockout threshold and duration for the domain.
Which tool should you use?
A. Get-ItemProperty
B. Active Directory Domains and Trusts
C. Net User
D. Gpresult
Answer: C
QUESTION 506
Your network contains an Active Directory domain named litwareinc.com.
The domain contains two sites named Site1 and Site2.
Site2 contains a read-only domain controller (RODC).
You need to identify which user accounts attempted to authenticate to the RODC.
Which tool should you use?
A. Repadmin
B. Dcdiag
C. Get-ADAccountResultantPasswordReplicationPolicy
D. Active Directory Sites and Services
Answer: A
QUESTION 507
Your network contains an Active Directory forest named contoso.com.
The functional level of the forest is Windows Server 2008 R2.
The DNS zone for contoso.com is Active Directory-integrated.
You deploy a read-only domain controller (RODC) named RODC1.
You install the DNS Server server role on RODC1.
You discover that RODC1 does not have any DNS application directory partitions.
You need to ensure that RODC1 has a copy of the DNS application directory partition of contoso.com.
What should you do? (Each correct answer presents a complete solution. Choose two.)
A. From DNS Manager, right-click RODC1 and click Create Default Application Directory
Partitions.
B. From DNS Manager, create primary zones.
C. Run ntdsutil.exe. From the Partition Management context, run the create nc command.
D. Run dnscmd.exe and specify the /enlistdirectorypartition parameter.
Answer: A
QUESTION 508
Hotspot Question
Your network contains an Active Directory domain named contoso.com.
You have a comma separated value (CSV) file named Users.txt.
Users.txt contains the information for 500 users and all of the attributes required to create user accounts.
You plan to automate the creation of user accounts by using the Users.txt file.
You need to identify which two cmdlets you must run.
The solution must pipe the output from the first cmdlet to the second cmdlet.
What should you run from Windows PowerShell? To answer, configure the appropriate PowerShell command in the answer area.
Answer:
QUESTION 509
Your network contains an Active Directory domain named contoso.com.
You have an organizational unit (OU) named Sales and an OU named Engineering.
You have two Group Policy objects (GPOs) named GPO1 and GP02.
GPO1 and GP02 are linked to the Sales OU and contain multiple settings.
You discover that GP02 has a setting that conflicts with a setting in GPO1.
When the policies are applied, the setting in GP02 takes effect.
You need to ensure that the settings in GPO1 supersede the settings in GP02.
The solution must ensure that all non-conflicting settings in both GPOs are applied.
What should you do?
A. Modify the Group Policy permissions.
B. Enable block inheritance.
C. Configure the link order.
D. Enable loopback processing in merge mode.
E. Enable loopback processing in replace mode.
F. Configure WMI filtering.
G. Configure Restricted Groups.
H. Configure Group Policy Preferences.
I. Link the GPO to the Sales OU.
J. Link the GPO to the Engineering OU.
Answer: C
QUESTION 510
Hotspot Question
You have a standard primary zone named contoso.com.
You need to configure how often the zone will be transferred to servers that host a secondary copy of the zone.
Which tab should you use? To answer, select the appropriate tab in the answer area.
Answer: 
Braindump2go Offers 100% money back guarantee on all products! Our products remain valid for a lifetime! Recently we update our 70-640 Exam Questions since the Microsoft Official Exam Center adds some new questions in 70-640 Exam Dumps. Braindump2go checks all Exam Dumps every day and guarantee all the exam questions are the latest and correct!
