2013 Latest 70-640 Braindumps Free Tests 41-50

Ensurepass

 

QUESTION 41

You have a Windows Server 2008 R2 Enterprise Root CA . Security policy prevents port 443 and port 80 from being opened on domain controllers and on the issuing CA . You need to allow users to request certificates from a Web interface. You install the Active Directory Certificate Services (AD CS) server role. What should you do next?

 

A.       Configure the Online Responder Role Service on a member server.

B.       Configure the Online Responder Role Service on a domain controller.

C.       Configure the Certificate Enrollment Web Service role service on a member server.

D.      Configure the Certificate Enrollment Web Service role service on a domain controller.

 

Correct Answer: C

 

 

QUESTION 42

You need to relocate the existing user and computer objects in your company to different organizational units. What are two possible ways to achieve this goal? (Each correct answer presents a complete solution. Choose two.)

 

A.       Run the move-item command in the Microsoft Windows PowerShell utility.

B.       Run the Active Directory Users and Computers utility.

C.       Run the Dsmove utility.

D.      Run the Active Directory Migration Tool (ADMT).

 

Correct Answer: BC

 

 

QUESTION 43

Your network consists of an Active Directory forest named contoso.com. All servers run Windows Server 2008 R2. All domain controllers are configured as DNS servers. The contoso.com DNS zone is stored in the ForestDnsZones Active Directory application partition. You have a member server that contains a standard primary DNS zone for dev.contoso.com. You need to ensure that all domain controllers can resolve names for dev.contoso.com. What should you do?

 

A.       Modify the properties of the SOA record in the contoso.com zone.

B.       Create a NS record in the contoso.com zone.

C.       Create a delegation in the contoso.com zone.

D.      Create a standard secondary zone on a Global Catalog server.

 

Correct Answer: C

 

 

QUESTION 44

Your company has a single Active Directory domain. All domain controllers run Windows Server 2003. You install Windows Server 2008 R2 on a server. You need to add the new server as a domain controller in your domain. What should you do first?

 

A.       On a domain controller run adprep /rodcprep.

B.       On the new server, run dcpromo /adv.

C.       On the new server, run dcpromo /createdcaccount.

D.      On a domain controller, run adprep /forestprep.

 

Correct Answer: D

 

 

QUESTION 45

Your company has a main office and three branch offices. Each office is configured as a separate Active Directory site that has its own domain controller. You disable an account that has administrative rights. You need to immediately replicate the disabled account information to all sites. What are two possible ways to achieve this goal? (Each correct answer presents a complete solution. Choose two.)

 

A.       From the Active Directory Sites and Services console, configure all domain controllers as global catalog servers.

B.       From the Active Directory Sites and Services console, select the existing connection objects and force replication.

C.       Use Repadmin.exe to force replication between the site connection objects.

D.       Use Dsmod.exe to configure all domain controllers as global catalog servers.

 

Correct Answer: BC

 

 

 

QUESTION 46

Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2. You need to capture all replication errors from all domain controllers to a central location. What should you do?

 

A.       Start the Active Directory Diagnostics data collector set.

B.       Start the System Performance data collector set.

C.       Install Network Monitor and create a new a new capture.

D.      Configure event log subscriptions.

 

Correct Answer: D

 

 

QUESTION 47

Your company has an Active Directory forest that contains client computers that run Windows Vista and Microsoft Windows XP. You need to ensure that users are able to install approved application updates on their computers. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

 

A.       Set up Automatic Updates through Control Panel on the client computers.

B.       Create a GPO and link it to the Domain Controllers organizational unit. Configure the GPO to automatically search for updates on the Microsoft Update site.

C.       Create a GPO and link it to the domain. Configure the GPO to direct the client computers to the Windows Server Update Services (WSUS) server for approved updates.

D.      Install the Windows Server Update Services (WSUS). Configure the server to search for new updates on the Internet. Approve all required updates.

 

Correct Answer: CD

 

 

QUESTION 48

Your company has an Active Directory domain that has an organizational unit named Sales. The Sales organizational unit contains two global security groups named sales managers and sales executives. You need to apply desktop restrictions to the sales executives group. You must not apply these desktop restrictions to the sales managers group. You create a GPO named DesktopLockdown and link it to the Sales organizational unit. What should you do next?

 

A.         Configure the Deny Apply Group Policy permission for Authenticated Users on the DesktopLockdown GPO.

B.         Configure the Deny Apply Group Policy permission for the sales executives on the DesktopLockdown GPO.

C.         Configure the Allow Apply Group Policy permission for Authenticated Users on the DesktopLockdown GPO.

D.         Configure the Deny Apply Group Policy permission for the sales managers on the DesktopLockdown GPO.

 

Correct Answer: D

 

 

QUESTION 49

Your company network has an Active Directory forest that has one parent domain and one child domain. The child domain has two domain controllers that run Windows Server 2008. All user accounts from the child domain are migrated to the parent domain. The child domain is scheduled to be decommissioned. You need to remove the child domain from the Active Directory forest. What are two possible ways to achieve this goal? (Each correct answer presents a complete solution. Choose two.)

 

A.       Run the Computer Management console to stop the Domain Controller service on both domain controllers in the child domain.

B.       Delete the computer accounts for each domain controller in the child domain. Remove the trust relationship between the parent domain and the child domain.

C.       Use Server Manager on both domain controllers in the child domain to uninstall the Active Directory domain services role.

D.       Run the Dcpromo tool that has individual answer files on each domain controller in the child domain.

 

Correct Answer: CD

 

 

QUESTION 50

Your network consists of a single Active Directory domain. The domain contains 10 domain controllers. The domain controllers run Windows Server 2008 R2 and are configured as DNS servers. You plan to create a new Active Directory-integrated zone. You need to ensure that the new zone is only replicated to four of your domain controllers. What should you do first?

 

A.         From the command prompt, run dnscmd and specify the /createdirectorypartition parameter.

B.         Create a new delegation in the ForestDnsZones application directory partition.

C.         From the command prompt, run dnscmd and specify the /enlistdirectorypartition parameter.

D.         Create a new delegation in the DomainDnsZones application directory partition.

 

Correct Answer: A

Download Ensurepass Latest 2013 70-640 Braindumps Free Tests , help you to pass exam 100%.