2013 Latest 70-640 Braindumps Free Tests 271-280

Ensurepass

 

QUESTION 271

Your network contains an Active Directory domain controller named DC1. DC1 runs Windows Server 2008 R2. You need to defragment the Active Directory database on DC1. The solution must minimize downtime on DC1. What should you do first?

 

A.       At the command prompt, run net stop ntds.

B.       At the command prompt, run net stop netlogon.

C.       Restart DC1 in Safe Mode.

D.      Restart DC1 in Directory Services Restore Mode (DSRM).

 

Correct Answer: A

 

 

QUESTION 272

Your network contains a single Active Directory domain named contoso.com. An administrator accidentally deletes the _msdsc.contoso.com zone. You recreate the _msdsc.contoso. com zone. You need to ensure that the _msdsc.contoso.com zone contains all of the required DNS records. What should you do on each domain controller?

 

A.       Restart the Netlogon service.

B.       Restart the DNS Server service.

C.       Run dcdiag.exe /fix.

D.      Run ipconfig.exe /registerdns.

 

Correct Answer: A

 

 

QUESTION 273

Your network contains an Active Directory-integrated zone. All DNS servers that host the zone are domain controllers. You add multiple DNS records to the zone. You need to ensure that the records are replicated to all DNS servers. Which tool should you use?

 

A.       Dnslint

B.       Ldp

C.       Nslookup

D.      Repadmin

 

Correct Answer: D

 

 

QUESTION 274

Your network contains an Active Directory forest. The forest contains two domains named contoso.com and eu.contoso.com. All domain controllers are DNS servers. The domain controllers in contoso.com host the zone for contoso.com. The domain controllers in eu. contoso.com host the zone for eu.contoso.com. The DNS zone for contoso.com is configured as shown in the exhibit.

 

clip_image001

 

You need to ensure that all domain controllers in the forest host a writable copy of _msdsc.contoso.com. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

 

A.       Create a zone delegation record in the contoso.com zone.

B.       Create a zone delegation record in the eu.contoso.com zone.

C.       Create an Active Directory-integrated zone for _msdsc.contoso.com.

D.      Create a secondary zone named _msdsc.contoso.com in eu.contoso.com.

 

Correct Answer: AC

 

 

QUESTION 275

You need to compact an Active Directory database on a domain controller that runs Windows Server 2008 R2. What should you do?

 

A.       Run defrag.exe /a /c.

B.       Run defrag.exe /c /u.

C.       From Ntdsutil, use the Files option.

D.      From Ntdsutil, use the Metadata cleanup option.

 

Correct Answer: C

 

QUESTION 276

Your network contains an Active Directory domain named contoso.com. Contoso.com contains three servers. The servers are configured as shown in the following table.

 

clip_image002

 

You need to ensure that users can manually enroll and renew their certificates by using the Certificate Enrollment Web Service. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

 

A.       Configure the policy module settings.

B.       Configure the issuance requirements for the certificate templates.

C.       Configure the Certificate Services Client – Certificate Enrollment Policy Group Policy setting.

D.      Configure the delegation settings for the Certificate Enrollment Web Service application pool account.

 

Correct Answer: BD

 

 

QUESTION 277

Your network contains an Active Directory domain named contoso.com. Contoso.com contains a member server that runs Windows Server 2008 Standard. You need to install an enterprise subordinate certification authority (CA) that supports private key archival. You must achieve this goal by using the minimum amount of administrative effort. What should you do first?

 

A.       Initialize the Trusted Platform Module (TPM).

B.       Upgrade the member server to Windows Server 2008 R2 Standard.

C.       Install the Certificate Enrollment Policy Web Service role service on the member server.

D.      Run the Security Configuration Wizard (SCW) and select the Active Directory Certificate Services – Certification Authority server role template check box.

 

Correct Answer: B

 

 

QUESTION 278

You have an enterprise subordinate certification authority (CA). You have a custom Version 3 certificate template. Users can enroll for certificates based on the custom certificate template by using the Certificates console. The certificate template is unavailable for Web enrollment. You need to ensure that the certificate template is available on the Web enrollment pages. What should you do?

A.       Run certutil.exe Cpulse.

B.       Run certutil.exe Cinstallcert.

C.       Change the certificate template to a Version 2 certificate template.

D.      On the certificate template, assign the Autoenroll permission to the users.

 

Correct Answer: C

 

 

QUESTION 279

Your network contains an Active Directory domain. The domain contains a member server named Server1 that runs Windows Server 2008 R2. You need to configure Server1 as a global catalog server. What should you do?

 

A.       Modify the Active Directory schema.

B.       From Ntdsutil, use the Roles option.

C.       Run the Active Directory Domain Services Installation Wizard on Server1.

D.      Move the Server1 computer object to the Domain Controllers organizational unit (OU).

 

Correct Answer: C

 

 

QUESTION 280

Your network contains three Active Directory forests named Forest1, Forest2, and Forest3. Each forest contains three domains. A two-way forest trust exists between Forest1 and Forest2. A two-way forest trust exists between Forest2 and Forest3. You need to configure the forests to meet the following requirements:

 

Ÿ   Users in Forest3 must be able to access resources in Forest1.

Ÿ   Users in Forest1 must be able to access resources in Forest3.

Ÿ   The number of trusts must be minimized.

 

What should you do?

 

A.       In Forest2, modify the name suffix routing settings.

B.       In Forest1 and Forest3, configure selective authentication.

C.       In Forest1 and Forest3, modify the name suffix routing settings.

D.      Create a two-way forest trust between Forest1 and Forest3.

E.       Create a shortcut trust in Forest1 and a shortcut trust in Forest3.

 

Correct Answer: D

 

Download Ensurepass Latest 2013 70-640 Braindumps Free Tests , help you to pass exam 100%.