Microsoft 70-640

TS: Windows Server 2008 Active Directory, Configuring

Version: Demo 32.4

Microsoft 70-640 Exam Topic 1, Exam Set 3

QUESTION NO: 1 You have an enterprise subordinate certification authority (CA). You have a custom certificate template that has a key length of 1,024 bits. The template is enabled for autoenrollment. You increase the template key length to 2,048 bits. You need to ensure that all current certificate holders automatically enroll for a certificate that uses the new template. Which console should you use? A. Active Directory Administrative Center B. Certification Authority C. Certificate Templates D. Group Policy Management Answer: C Explanation:

QUESTION NO: 2 Your network contains an Active Directory domain named contoso.com. All domain controllers were upgraded from Windows Server 2003 to Windows Server 2008 R2 Service Pack 1 (SP1). The functional level of the domain is Windows Server 2003. You need to configure SYSVOL to use DFS Replication. Which tools should you use? (Each correct answer presents part of the solution. Choose two.) A. Dfsrmig B. Frsdiag C. Ntdsutil D. Set- ADForest E. Repadmin F. Set- ADDomainMode G. DFS Management

"Ensure Success with Money back Guarantee" - Testinsides.com

Microsoft 70-640 Exam Answer: A,F Explanation: Explanation/Reference: First raise the Funcional level of the domain to 2008 to use DFS using: Set-ADDomainMode Second configure sysvol to use dfs replication: Dfsrmig (Use dfsrmig with Windows2008 R2, not repadamin.)

Topic 2, Exam Set 2

QUESTION NO: 3 Your network contains a single Active Directory domain that has two sites named Site1 and Site2. Site1 has two domain controllers named DC1 and DC2. Site2 has two domain controllers named DC3 and DC4. DC3 fails. You discover that replication no longer occurs between the sites. You verify the connectivity between DC4 and the domain controllers in Site1. On DC4, you run repadmin.exe /kcc. Replication between the sites continues to fail. You need to ensure that Active Directory data replicates between the sites. What should you do? A. From Active Directory Sites and Services, modify the properties of DC3. B. From Active Directory Sites and Services, modify the NTDS Site Settings of Site2. C. From Active Directory Users and Computers, modify the location settings of DC4. D. From Active Directory Users and Computers, modify the delegation settings of DC4. Answer: A Explanation:

Topic 1, Exam Set 3

"Ensure Success with Money back Guarantee" - Testinsides.com

Microsoft 70-640 Exam QUESTION NO: 4 Your network contains an Active Directory domain named contoso.com. You need to audit changes to a service account. The solution must ensure that the audit logs contain the before and after values of all the changes. Which security policy setting should you configure? A. Audit Sensitive Privilege Use B. Audit User Account Management C. Audit Directory Service Changes D. Audit Other Account Management Events Answer: C Explanation:

QUESTION NO: 5 Your network contains an Active Directory forest. The forest contains multiple domains. You need to ensure that users in the human resources department can search for employees by using the employeeNumber attribute. What should you do? A. From Active Directory Sites and Services, modify the properties of each global catalog server. B. From the Active Directory Schema snap-in, modify the properties of the user object class. C. From Active Directory Sites and Services, modify the NTDS Settings object of each global catalog server. D. From the Active Directory Schema snap-in, modify the properties of the employeeNumber attribute. Answer: D Explanation:

Topic 2, Exam Set 2

QUESTION NO: 6

"Ensure Success with Money back Guarantee" - Testinsides.com

Microsoft 70-640 Exam Your network contains an Active Directory domain. All domain controllers run Windows Server 2008 R2. Client computers run either Windows 7 or Windows Vista Service Pack 2 (SP2). You need to audit user access to the administrative shares on the client computers. What should you do? A. Deploy a logon script that runs Icacls.exe. B. Deploy a logon script that runs Auditpol.exe. C. From the Default Domain Policy, modify the Advanced Audit Policy Configuration. D. From the Default Domain Controllers Policy, modify the Advanced Audit Policy Configuration. Answer: B Explanation:

Topic 1, Exam Set 3

QUESTION NO: 7 Your company has a main office and four branch offices. An Active Directory site exists for each office. Each site contains one domain controller. Each branch office site has a site link to the main office site. You discover that the domain controllers in the branch offices sometimes replicate directly to each other. You need to ensure that the domain controllers in the branch offices only replicate to the domain controller in the main office. What should you do? A. Modify the firewall settings for the main office site. B. Disable the Knowledge Consistency Checker (KCC) for each branch office site. C. Disable site link bridging. D. Modify the security settings for the main office site. Answer: C Explanation:

QUESTION NO: 8 "Ensure Success with Money back Guarantee" - Testinsides.com 5

Microsoft 70-640 Exam Your network contains an Active Directory forest. The forest contains two domains named contoso.com and woodgrovebank.com. You have a custom attribute named Attribute 1 in Active Directory. Attribute 1 is associated to User objects. You need to ensure that Attribute1 is included in the global catalog. What should you do? A. From the Active Directory Schema snap-in, modify the properties of the Attribute 1 attributeSchema object. B. In Active Directory Users and Computers, configure the permissions on the Attribute 1 attribute for User objects. C. From the Active Directory Schema snap-in, modify the properties of the User classSchema object. D. In Active Directory Sites and Services, configure the Global Catalog settings for all domain controllers in the forest. Answer: A Explanation:

QUESTION NO: 9 Your network contains an Active Directory domain named contoso.com. You have a management computer named Computer1 that runs Windows 7. You need to forward the logon events of all the domain controllers in contoso.com to Computer1. All new domain controllers must be dynamically added to the subscription. What should you do? A. From Computer1, configure source-initiated event subscriptions. From a Group Policy object (GPO) linked to the Domain Controllers organizational unit (OU), configure the Event Forwarding node. B. From Computer1, configure collector-initiated event subscriptions. From a Group Policy object (GPO) linked to the Domain Controllers organizational unit (OU), configure the Event Forwarding node. C. From Computer1, configure source-initiated event subscriptions. Install a server authentication "Ensure Success with Money back Guarantee" - Testinsides.com 6

Microsoft 70-640 Exam certificate on Computer1. Implement autoenrollment for the Domain Controllers organizational unit (OU). D. From Computer1, configure collector-initiated event subscriptions. Install a server authentication certificate on Computer1. Implement autoenrollment for the Domain Controllers organizational unit (OU). Answer: A Explanation:

QUESTION NO: 10 Your network contains an Active Directory domain named contoso.com. All domain controllers and member servers run Windows Server 2008. All client computers run Windows 7. From a client computer, you create an audit policy by using the Advanced Audit Policy Configuration settings in the Default Domain Policy Group Policy object (GPO). You discover that the audit policy is not applied to the member servers. The audit policy is applied to the client computers. You need to ensure that the audit policy is applied to all member servers and all client computers. What should you do? A. Add a WMI filter to the Default Domain Policy GPO. B. Modify the security settings of the Default Domain Policy GPO. C. Configure a startup script that runs auditpol.exe on the member servers. D. Configure a startup script that runs auditpol.exe on the domain controllers. Answer: B Explanation:

"Ensure Success with Money back Guarantee" - Testinsides.com