2013 Latest 70-640 Braindumps Free Tests 421-430

Ensurepass

 

QUESTION 421

Your network contains an Active Directory forest named fabrikam.com. The forest contains the following domains:

 

Ÿ   Fabrikam.com

Ÿ   Eu.fabrikam.com

Ÿ   Na.fabrikam.com

Ÿ   Eu.contoso.com

Ÿ   Na.contoso.com

 

You need to configure the forest to ensure that the administrators of any of the domains can specify a user principal name (UPN) suffix of contoso.com when they create user accounts from Active Directory Users and Computers. Which tool should you use?

 

A.       Active Directory Sites and Services

B.       Set-ADDomain

C.       Set-ADForest

D.      Active Directory Administrative Center

 

Correct Answer: C

 

 

QUESTION 422

A corporate network includes a single Active Directory Domain Services (AD DS) domain and two AD DS sites. The AD DS sites are named Toronto and Montreal. Each site has multiple domain controllers. You need to determine which domain controller holds the Inter-Site Topology Generator role for the Toronto site. What should you do?

 

A.       Use the Active Directory Sites and Services console to view the NTDS Site Settings for the Toronto site.

B.       Use the Ntdsutil tool with the roles parameter.

C.       Use the Ntdsutil tool with the LDAP policies parameter.

D.       Use the Active Directory Sites and Services console to view the properties of each domain controller in the Toronto site.

 

Correct Answer: A

 

 

QUESTION 423

Your network contains an Active Directory domain. The domain contains five sites. One of the sites contains a read-only domain controller (RODC) named RODC1. You need to identify which user accounts can have their password cached on RODC1. Which tool should you use?

 

A.       Repadmin

B.       Dcdiag

C.       Get-ADDomainControllerPasswordReplicationPolicyUsage

D.      Adtest

 

Correct Answer: A

 

 

QUESTION 424

A network contains an Active Directory forest. The forest contains three domains and two sites. You remove the global catalog from a domain controller named DC2. DC2 is located in Site1. You need to reduce the size of the Active Directory database on DC2. The solution must minimize the impact on all users in Site1. What should you do first?

 

A.       On DC2, start the Protected Storage service.

B.       On DC2, stop the Active Directory Domain Services service.

C.       Start DC2 in Safe Mode.

D.      Start DC2 in Directory Services Restore Mode.

 

Correct Answer: B

 

 

QUESTION 425

Your network contains an Active Directory domain named adatum.com. The functional level of the domain is Windows Server 2008. All domain controllers run Windows Server 2008 R2. All client computers run Windows 7 Enterprise. You need to receive a notification when more than 50 Active Directory objects are deleted per second. What should you do?

 

A.       Run the Get-ADDomain cmdlet.

B.       Run the dsget.exe command.

C.       Run the ntdsutil.exe command.

D.      Run the ocsetup.exe command.

E.       Run the dsamain.exe command.

F.        Run the eventcreate.exe command.

G.      Create a Data Collector Set (DCS).

H.      Create custom views from Event Viewer.

I.         Configure subscriptions from Event Viewer.

J.        Import the Active Directory module for Windows PowerShell.

 

Correct Answer: G

 

 

QUESTION 426

You have an enterprise subordinate certification authority (CA). You have a custom certificate template that has a key length of 1,024 bits. The template is enabled for autoenrollment. You increase the template key length to 2,048 bits. You need to ensure that all current certificate holders automatically enroll for a certificate that uses the new template. Which console should you use?

 

A.       Group Policy Management MMC Snap-In

B.       Certificates MMC Snap-In on the Certificate Authority

C.       Certificate Templates MMC Snap-In

D.      Certification Authority MMC Snap-In

 

Correct Answer: C

 

 

QUESTION 427

Your network contains an Active Directory forest. The forest contains one domain named contoso.com. You attempt to create a new child domain and you receive the following error message: "An LDAP read of operational attributes failed." You need to ensure that you can add a new child domain to the forest. What should you do?

 

A.       Move the PDC emulator role.

B.       Move the RID master role.

C.       Move the infrastructure master role.

D.      Move the schema master role.

E.       Move the domain naming master role.

F.        Move the global catalog server.

G.      Move the bridgehead server.

H.      Install a read-only domain controller (RODC).

I.         Deploy an additional global catalog server.

J.        Restart the Active Directory Domain Services (AD DS) service.

 

Correct Answer: E

 

 

QUESTION 428

Your network contains an Active Directory domain named adatum.com. The functional level of the domain is Windows Server 2003. All domain controllers run Windows Server 2008 R2. You mount an Active Directory snapshot. You need to ensure that you can connect to the snapshot by using LDAP. What should you do?

 

A.       Run the Get-ADDomain cmdlet.

B.       Run the dsget.exe command.

C.       Run the ntdsutil.exe command.

D.      Run the ocsetup.exe command.

E.       Run the dsamain.exe command.

F.        Run the eventcreate.exe command.

G.      Create a Data Collector Set (DCS).

H.      Create custom views from Event Viewer.

I.         Configure subscriptions from Event Viewer.

J.        Import the Active Directory module for Windows PowerShell.

 

Correct Answer: E

 

 

QUESTION 429

Your network contains an Active Directory domain named contoso.com. You have an organizational unit (OU) named Sales and an OU named Engineering. You need to ensure that when users log on to client computers, they are added automatically to the local Administrators group. The users must be removed from the group when they log off of the client computers. What should you do?

 

A.       Modify the Group Policy permissions.

B.       Enable block inheritance.

C.       Configure the link order.

D.      Enable loopback processing in merge mode.

E.       Enable loopback processing in replace mode.

F.        Configure WMI filtering.

G.      Configure Restricted Groups.

H.      Configure Group Policy Preferences.

I.         Link the Group Policy object (GPO) to the Sales OU.

J.        Link the Group Policy object (GPO) to the Engineering OU.

 

Correct Answer: H

 

 

QUESTION 430

Your network contains an Active Directory forest named contoso.com. The forest contains two member servers named Server1 and Server2. Server1 and Server2 have the DNS Server server role installed. Server1 hosts a standard primary zone for contoso.com. Server2 is configured as a secondary name server for contoso.com. You experience issues with the copy of the zone on Server2. You verify that both copies of the zone have the same serial number. You need to transfer a complete copy of the zone from Server1 to Server2. What should you do on Server2?

 

A.       From DNS Manager, right-click contoso.com and click Transfer from Master.

B.       From Services, right-click DNS Server and click Refresh.

C.       From Services, right-click DNS Server and click Restart.

D.      From DNS Manager, right-click contoso.com and click Reload.

E.       From DNS Manager, right-click contoso.com and click Transfer a new copy of zone from Master.

 

Correct Answer: E

 

Download Ensurepass Latest 2013 70-640 Braindumps Free Tests , help you to pass exam 100%.