2013 Latest 70-640 Braindumps Free Tests 431-440

Ensurepass

 

QUESTION 431

Your network contains an Active Directory domain. The domain contains two Active Directory sites named Site1 and Site2. Site1 contains two domain controllers named DC1 and DC2. Site2 contains two domain controller named DC3 and DC4. The functional level of the domain is Windows Server 2008 R2. The functional level of the forest is Windows Server 2003. Active Directory replication between Site1 and Site2 occurs from 20:00 to 01:00 every day. At 07:00, an administrator deletes a user account while he is logged on to DC1. You need to restore the deleted user account. You want to achieve this goal by using the minimum amount of administrative effort. What should you do?

 

A.       On DC3, stop Active Directory Domain Services, perform an authoritative restore, and then start Active Directory Domain Services.

B.       On DC3, run the Restore-ADObject cmdlet.

C.       On DC1, run the Restore-ADObject cmdlet.

D.       On DC1, stop Active Directory Domain Services, restore the SystemState, and then start Active Directory Domain Services.

 

Correct Answer: A

 

 

QUESTION 432

You create a standard primary zone for contoso.com. You need to specify a user named Admin1 as the person responsible for managing the zone. What should you do? (Each correct answer presents a complete solution. Choose two.)

 

A.       Open the %SystemrootSystem32DNSContoso.com.dns file by using Notepad and change all instances of "hostmaster.contoso.com" to "admin1.contoso.com".

B.       From DNS Manager, open the properties of the Start of Authority (SOA) record ofcontoso.com, Specify admin1.contoso.com as the responsible person.

C.       Open the %SystemrootSystem32DNSContoso.com.dns file by using Notepad and change all instances of "hostmaster@contoso.com" to "adminl@contoso.com".

D.       From DNS Manager, open the properties of the Start of Authority (SOA) record ofcontoso.com. Specify admin1@contoso.com as the responsible person.

 

Correct Answer: AB

 

 

QUESTION 433

Your network contains an Active Directory forest named contoso.com. The functional level of the forest is Windows Server 2008 R2. The DNS zone for contoso.com is Active Directory-integrated. You deploy a read-only domain controller (RODC) named RODC1. You install the DNS Server role on RODC1. You discover that RODC1 does not have any DNS application directory partitions. You need to ensure that RODC1 has a copy of the DNS application directory partition of contoso.com. What should you do? (Each correct answer presents a complete solution. Choose two.)

 

A.        From DNS Manager, right-click RODC1 and click Create Default Application Directory Partitions.

B.        Run ntdsutil.exe. From the Partition Management context, run the create nc command.

C.        Run dnscmd.exe and specify the /createbuiltindirectorypartitions parameter.

D.        Run ntdsutil.exe. From the Partition Management context, run the add nc replica command.

E.         Run dnscmd.exe and specify the /enlistdirectorypartition parameter.

 

Correct Answer: DE

 

 

QUESTION 434

A corporate network includes an Active Directory-integrated zone. All DNS servers that host the zone are domain controllers. You add multiple DNS records to the zone. You need to ensure that the new records are available on all DNS servers as soon as possible. Which tool should you use?

 

A.       Ntdsutil

B.       Dnscmd

C.       Repadmin

D.      Nslookup

 

Correct Answer: C

 

 

QUESTION 435

Your network contains three servers named ADFS1, ADFS2, and ADFS3 that run Windows Server 2008 R2. ADFS1 has the Active Directory Federation Services (AD FS) Federation Service role service installed. You plan to deploy AD FS 2.0 on ADFS2 and ADFS3. You need to export the token-signing certificate from ADFS1, and then import the certificate to ADFS2 and ADFS3.

 

A.       Personal Information Exchange PKCS #12 (.pfx)

B.       DER encoded binary X.509 (.cer)

C.       Cryptographic Message Syntax Standard PKCS #7 (.p7b)

D.      Base-64 encoded X.S09 (.cer)

 

Correct Answer: A

 

 

QUESTION 436

You create a user account template for the marketing department. When you copy the user account template, you discover that the Web page attribute is not copied. You need to preserve the Web page attribute when you copy the user account template. What should you do?

 

A.       From Active Directory Administrative Center, modify the value of the wWWHomePage attribute for the user account template.

B.       From the Active Directory Schema snap-in, modify the properties of the user class.

C.       From Active Directory Users and Computers, modify the value of the wWWHomePage attribute for the user account template.

D.       From ADSI Edit, modify the properties of the wWWHomePage attribute.

 

Correct Answer: B

 

 

QUESTION 437

Your network contains an Active Directory domain named contoso.com. The functional level of the forest is Windows Server 2008 R2. The Default Domain Controller Policy Group Policy object (GPO) contains audit policy settings. On a domain controller named DC1, an administrator configures the Advanced Audit Policy Configuration settings by using a local GPO. You need to identify what will be audited on DC1. Which tool should you use?

 

A.       Get-ADObject

B.       Secedit

C.       Security Configuration and Analysis

D.      Auditpol

 

Correct Answer: D

 

 

QUESTION 438

A network contains an Active Directory forest. The forest schema contains a custom attribute for user objects. You need to view the custom attribute value of 500 user accounts in a Microsoft Excel table. Which tool should you use?

 

A.       Dsmod

B.       Csvde

C.       Ldifde

D.      Dsrm

 

Correct Answer: B

 

 

QUESTION 439

Your network contains an Active Directory forest named contoso.com. The forest contains two domains named contoso.com and child.contoso.com. All domain controllers run Windows Server 2008. All forest- wide operations master roles are in child.contoso.com. An administrator successfully runs adprep.exe /forestprep from the Windows Server 2008 R2 Service Pack 1 (SP1) installation media. You plan to run adprep.exe /domainprep in each domain. You need to ensure that you have the required user rights to run the command successfully in each domain. Of which groups should you be a member? (Each correct answer presents part of the solution. Choose two.)

 

A.       Administrators in child.contoso.com

B.       Enterprise Admins in contoso.com

C.       Domain Admins in child.contoso.com

D.      Domain Admins in contoso.com

E.       Administrators in contoso.com

F.        Schema Admins in contoso.com

 

Correct Answer: CD

 

 

QUESTION 440

Your network contains an Active Directory forest named contoso.com. The forest contains a single domain and 10 domain controllers. All of the domain controllers run Windows Server 2008 R2 Service Pack 1 (SP1). The forest contains an application directory partition named dc=app1, dc=contoso,dc=com. A domain controller named DC1 has a copy of the application directory partition. You need to configure a domain controller named DC2 to receive a copy of dc=app1, dc=contoso,dc=corn. Which tool should you use?

 

A.       Active Directory Sites and Services

B.       Dsmod

C.       Dcpromo

D.      Dsmgmt

 

Correct Answer: C

 

Download Ensurepass Latest 2013 70-640 Braindumps Free Tests , help you to pass exam 100%.