2013 Latest 70-640 Braindumps Free Tests 51-60

Ensurepass

 

 

QUESTION 51

You have a domain controller named DC1 that runs Windows Server 2008 R2. DC1 is configured as a DNS Server for contoso.com. You install the DNS Server role on a member server named Server1 and then you create a standard secondary zone for contoso.com. You configure DC1 as the master server for the zone. You need to ensure that Server1 receives zone updates from DC1. What should you do?

 

A.       On DC1, modify the permissions of contoso.com zone.

B.       On Server1, add a conditional forwarder.

C.       On DC1, modify the zone transfer settings for the contoso.com zone.

D.      Add the Server1 computer account to the DNSUpdateProxy group.

 

Correct Answer: C

 

 

QUESTION 52

Your company has an Active Directory domain. All servers run Windows Server 2008 R2. Your company runs an Enterprise Root certification authority (CA). You need to ensure that only administrators can sign code. Which two tasks should you perform? (Each correct answer presents part of the solution. Choose two.)

 

A.       Edit the local computer policy of the Enterprise Root CA to allow only administrators to manage Trusted Publishers.

B.       Modify the security settings on the template to allow only administrators to request code signing certificates.

C.       Edit the local computer policy of the Enterprise Root CA to allow users to trust peer certificates and allow only administrators to apply the policy.

D.       Publish the code signing template.

 

Correct Answer: BD

 

 

QUESTION 53

Your company has an Active Directory forest. You plan to install an Enterprise certification authority (CA) on a dedicated stand-alone server. When you attempt to add the Active Directory Certificate Services (AD CS) role, you find that the Enterprise CA option is not available. You need to install the AD CS role as an Enterprise CA. What should you do first?

 

A.       Add the DNS Server role.

B.       Add the Active Directory Lightweight Directory Service (AD LDS) role.

C.       Add the Web server (IIS) role and the AD CS role.

D.      Join the server to the domain.

 

Correct Answer: D

 

 

 

QUESTION 54

Your company has an Active Directory domain named contoso.com. The company network has two DNS servers named DNS1 and DNS2. The DNS servers are configured as shown in the following table.

 

clip_image001

 

Domain users, who are configured to use DNS2 as the preferred DNS server, are unable to connect to Internet Web sites. You need to enable Internet name resolution for all client computers. What should you do?

 

A.       Update the list of root hints servers on DNS2.

B.       Create a copy of the .(root) zone on DNS1.

C.       Delete the .(root) zone from DNS2. Configure conditional forwarding on DNS2.

D.      Update the Cache.dns file on DNS2. Configure conditional forwarding on DNS1.

 

Correct Answer: C

 

 

QUESTION 55

Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2003. You upgrade all domain controllers to Windows Server 2008. You need to configure the Active Directory environment to support the application of multiple password policies. What should you do?

 

A.       Raise the functional level of the domain to Windows Server 2008.

B.       On one domain controller, run dcpromo /adv.

C.       Create multiple Active Directory sites.

D.      On all domain controllers, run dcpromo /adv.

 

Correct Answer: A

 

 

QUESTION 56

Your company has two Active Directory forests named contoso.com and fabrikam.com. The company network has three DNS servers named DNS1, DNS2, and DNS3. The DNS servers are configured as shown in the following table.

 

clip_image002

All computers that belong to the fabrikam.com domain have DNS3 configured as the preferred DNS server. All other computers use DNS1 as the preferred DNS server. Users from the fabrikam.com domain are unable to connect to the servers that belong to the contoso.com domain. You need to ensure users in the fabrikam.com domain are able to resolve all contoso.com queries. What should you do?

 

A.       Configure conditional forwarding on DNS1 and DNS2 to forward fabrikam.com queries to DNS3.

B.       Create a copy of the _msdcs.contoso.com zone on the DNS3 server.

C.       Create a copy of the fabrikam.com zone on the DNS1 server and the DNS2 server.

D.       Configure conditional forwarding on DNS3 to forward contoso.com queries to DNS1.

 

Correct Answer: D

 

 

QUESTION 57

Your company, Contoso Ltd, has offices in North America and Europe. Contoso has an Active Directory forest that has three domains. You need to reduce the time required to authenticate users from the labs.eu.contoso.com domain when they access resources in the eng.na.contoso.com domain. What should you do?

 

A.       Decrease the replication interval for all Connection objects.

B.       Decrease the replication interval for the DEFAULTIPSITELINK site link.

C.       Set up a one-way shortcut trust from eng.na.contoso.com to labs.eu.contoso.com.

D.      Set up a one-way shortcut trust from labs.eu.contoso.com to eng.na.contoso.com.

 

Correct Answer: C

 

 

QUESTION 58

Your company purchases a new application to deploy on 200 computers. The application requires that you modify the registry on each target computer before you install the application. The registry modifications are in a file that has an .adm extension. You need to prepare the target computers for the application. What should you do?

 

A.       Import the .adm file into a new Group Policy Object (GPO). Edit the GPO and link it to an organizational unit that contains the target computers.

B.       Create a Microsoft Windows PowerShell script to copy the .adm file to each computer. Run the REDIRUsr CONTAINER-DN command on each target computer.

C.       Create a Microsoft Windows PowerShell script to copy the .adm file to the startup folder of each target computer.

D.       Create a Microsoft Windows PowerShell script to copy the .adm file to each computer. Run the REDIRCmp CONTAINER-DN command on each target computer.

 

Correct Answer: A

 

 

QUESTION 59

Your company has an Active Directory forest that contains eight linked Group Policy Objects (GPOs). One of these GPOs publishes applications to user objects. A user reports that the application is not available for installation. You need to identify whether the GPO has been applied. What should you do?

 

A.       Run the Group Policy Results utility for the user.

B.       Run the GPRESULT /S <system name> /Z command at the command prompt.

C.       Run the GPRESULT /SCOPE COMPUTER command at the command prompt.

D.      Run the Group Policy Results utility for the computer.

 

Correct Answer: A

 

 

QUESTION 60

Your company has an Active Directory domain. You plan to install the Active Directory Certificate Services (AD CS) server role on a member server that runs Windows Server 2008 R2. You need to ensure that members of the Account Operators group are able to issue smartcard credentials. They should not be able to revoke certificates. Which three actions should you perform? (Each correct answer presents part of the solution. Choose three.)

 

A.       Create an Enrollment Agent certificate.

B.       Create a Smartcard logon certificate.

C.       Restrict enrollment agents for the Smartcard logon certificate to the Account Operator group.

D.      Install the AD CS role and configure it as an Enterprise Root CA.

E.       Install the AD CS role and configure it as a Standalone CA.

F.        Restrict certificate managers for the Smartcard logon certificate to the Account Operator group.

 

Correct Answer: BCD

Download Ensurepass Latest 2013 70-640 Braindumps Free Tests , help you to pass exam 100%.