Instant Download 70-640 PDF Files! New Updated 651 Exam Questions and Answers help 100% Exam Pass! 70-640 Certification Get Quickly!
Vendor: Microsoft
Exam Code: 70-640
Exam Name: TS: Windows Server 2008 Active Directory, Configuring
Keywords: 70-640 Exam Dumps,70-640 Practice Tests,70-640 Practice Exams,70-640 Exam Questions,70-640 Dumps,70-640 Dumps PDF,70-640 VCE,70-640 Braindump,70-640 TS: Windows Server 2008 Active Directory, Configuring
QUESTION 561
Your company has two offices.
The offices are located in Miami and London.
The network contains an Active Directory forest named contoso.com.
The forest contains two child domains named miami.contoso.com and london.contoso.com.
The domain contains 50 domain controllers that run Windows Server 2008 R2.
Each office is configured as an Active Directory site.
You plan to deploy several read-only domain controllers (RODCs) to the Miami site.
You need to pre-create the computer accounts of the RODCs.
What should you do?
A. Run the dsadd.exe command
B. Run the nltest.exe command.
C. Run the Set-AdDomain cmdlet.
D. Run the dsmove.exe command.
E. Run the dcpromo.exe command.
F. Run the Move-AdDirectoryServer cmdlet.
G. Use the Active Directory Schema snap-in.
H. Use the Active Directory Users and Computers console.
Answer: H
QUESTION 562
Your network contains an Active Directory forest named contoso.com.
The forest contains 10 domains.
Each domain contains 50 domain controllers that run Windows Server 2008 R2.
The domain functional level is Windows Server 2008.
You need to raise the domain functional level of all the domains to Windows Server 2008 R2.
What should you do?
A. Run the dsadd.exe command
B. Run the nltest.exe command.
C. Run the Set-AdDomain cmdlet.
D. Run the dsmove.exe command.
E. Run the dcpromo.exe command.
F. Run the Move-AdDirectoryServer cmdlet.
G. Use the Active Directory Schema snap-in.
H. Use the Active Directory Users and Computers console.
Answer: H
QUESTION 563
Your network contains an Active Directory forest named contoso.com.
The forest contains a single domain.
The domain contains two domain controllers named DC1 and DC2 that run Windows Server 2008 R2.
DC1 is configured as the infrastructure master for contoso.com.
You need to move the infrastructure master role from DC1 to DC2.
What should you do?
A. Run the dsadd.exe command
B. Run the nltest.exe command
C. Run the Set-AdDomain cmdlet.
D. Run the dsmove.exe command.
E. Run the dcpromo.exe command.
F. Run the Move-AdDirectoryServer cmdlet.
G. Use the Active Directory Schema snap-in.
H. Use the Active Directory Users and Computers console.
Answer: H
QUESTION 564
Your network contains an Active Directory forest named contoso.com.
The forest contains two domains.
All domain controllers are configured as global catalog servers.
The forest root domain contains five domain controllers.
The domain controllers are configured as shown in the following table.
You plan to create a custom attribute in Active Directory that will replicate to all of the global catalog servers.
You need to identify which domain controller must be online to perform the planned action.
Which domain controller should you identify?
A. DC1
B. DC2
C. DC3
D. DC4
E. DC5
Answer: B
QUESTION 565
Your network contains an Active Directory domain.
The domain is configured as shown in the following table.
Users in Branch2 sometimes authenticate to a domain controller in Main.
You need to ensure that users in Branch2 only authenticate to the domain controllers in Branch1.
What should you do?
A. On DC1 and DC2, set the AutoSiteCoverage value to 1.
B. On DC1 and DC2, set the AutoSiteCoverage value to 0.
C. On DC3, set the AutoSiteCoverage value to 0.
D. On DC3, set the AutoSiteCoverage value to 1.
Answer: C
Explanation:
http://technet.microsoft.com/en-us/library/cc787491%28v=ws.10%29.aspx
QUESTION 566
Hotspot Question
Your network contains an Active Directory domain that has the password policy shown in the following exhibit. (Click the Exhibit button.)
To answer, complete each statement according to the information presented in the exhibit.
Answer:
QUESTION 567
You have Active Directory Certificate Services (AD CS) deployed.
You have a Version 1 certificate template.
You need to ensure that all of the computers in the domain automatically enroll for a certificate based on the certificate template.
What should you do?
A. On the certificate template, assign the Read, Enroll, and Autoenroll permission to the Domain
Users group.
B. In a Group Policy object (GPO), configure the Automatic Certificate Request Settings.
C. On the certificate template, assign the Read and Autoenroll permission to the Authenticated
Users group.
D. In a Group Policy object (GPO), configure the autoenrollment settings.
Answer: B
QUESTION 568
Your network contains an Active Directory domain named contoso.com.
All domain controllers run a Server Core installation of Windows Server 2008 R2.
You need to identify which domain controller holds the PDC emulator role.
Which tool should you run?
A. Get AdDomain
B. Query.exe
C. Netsh.exe
D. Search-AdAccount
Answer: A
Explanation:
Get-ADDomain
Gets an Active Directory domain.
Example output (see last line):
Get-ADDomain
AllowedDNSSuffixes : {}
ChildDomains : {}
ComputersContainer : CN=Computers,DC=Fabrikam,DC=com
DeletedObjectsContainer : CN=Deleted Objects,DC=Fabrikam,DC=com
DistinguishedName : DC=Fabrikam,DC=com
DNSRoot : Fabrikam.com
DomainControllersContainer : OU=Domain Controllers,DC=Fabrikam,DC=com
DomainMode : Windows2003Domain
DomainSID : S-1-5-21-41432690-3719764436-1984117282
ForeignSecurityPrincipalsContainer :
CN=ForeignSecurityPrincipals,DC=Fabrikam,DC=com
Forest : Fabrikam.com
InfrastructureMaster : Fabrikam-DC1.Fabrikam.com
LastLogonReplicationInterval :
LinkedGroupPolicyObjects : {CN={31B2F340-016D-11D2-945F- 00C04FB984F9},CN=Policies,CN=System,DC=Fabrikam,DC=com}
LostAndFoundContainer : CN=LostAndFound,DC=Fabrikam,DC=com
ManagedBy :
Name : Fabrikam
NetBIOSName : FABRIKAM
ObjectClass : domainDNS
ObjectGUID : b63b4f44-58b9-49cf-8911-b36e8575d5eb
ParentDomain :
PDCEmulator : Fabrikam-DC1.Fabrikam.com
Etc…
QUESTION 569
Your network contains an Active Directory domain.
The domain contains a group named Group1.
The minimum password length for the domain is set to six characters.
You need to ensure that the passwords for all users in Group1 are at least 10 characters long.
All other users must be able to use passwords that are six characters long.
You create an Active Directory Fine Grained Password Policy.
What should you do next?
A. From the Default Domain Policy, modify the password policy.
B. Run the Add-ADFineGrainedPasswordPolicySubject cmdlet.
C. Run the Set-ADDomain cmdlet.
D. From the Default Domain Controller Policy, modify the password policy.
Answer: B
QUESTION 570
Your network contains an Active Directory forest named contoso.com.
The forest contains three domains named contoso.com, childl.contoso.com, and child2.contoso.com.
The childl.contoso.com domain contains five domain controllers.
The domain controllers are configured as shown in the following table.
You plan to decommission the child1.contoso.com domain.
You need to identify which two FSMO roles can be moved from childl.contoso.com to child2.contoso.com.
Which two FSMO roles should you identify? (Each correct answer presents part of the solution. Choose two.)
A. Domain naming master
B. Schema master
C. Infrastructure master
D. PDC emulator
E. RID master
Answer: AB
Explanation:
Forestwide Operations Master Roles
The schema master and domain naming master are forestwide roles, meaning that there is only one schema master and one domain naming master in the entire forest.
Note:
– Operations Master Roles The five operations master roles are assigned automatically when the first domain controller in a given domain is created. Two forest-level roles are assigned to the first domain controller created in a forest and three domain-level roles are assigned to the first domain controller created in a domain. .
– The five FSMO roles [in Windows 2003] are:
Schema master – Forest-wide and one per forest.
Domain naming master – Forest-wide and one per forest.
RID master – Domain-specific and one for each domain.
PDC – PDC Emulator is domain-specific and one for each domain.
Infrastructure master – Domain-specific and one for each domain.
Braindump2go Offers 100% money back guarantee on all products! Our products remain valid for a lifetime! Recently we update our 70-640 Exam Questions since the Microsoft Official Exam Center adds some new questions in 70-640 Exam Dumps. Braindump2go checks all Exam Dumps every day and guarantee all the exam questions are the latest and correct!
