2013 Latest 70-640 Braindumps Free Tests 91-100

Ensurepass

 

QUESTION 91

You need to validate whether Active Directory successfully replicated between two domain controllers. What should you do?

 

A.       Run the DSget command.

B.       Run the Dsquery command.

C.       Run the RepAdmin command.

D.      Run the Windows System Resource Manager.

 

Correct Answer: C

 

 

QUESTION 92

You have a domain controller that runs Windows Server 2008 R2. The Windows Server Backup feature is installed on the domain controller. You need to perform a non-authoritative restore of the domain controller by using an existing backup file. What should you do?

 

A.       Restart the domain controller in Directory Services Restore Mode. Use the WBADMIN command to perform a critical volume restore.

B.       Restart the domain controller in Directory Services Restore Mode. Use the Windows Server Backup snap-in to perform a critical volume restore.

C.       Restart the domain controller in safe mode. Use the Windows Server Backup snap-in to perform a critical volume restore.

D.       Restart the domain controller in safe mode. Use the WBADMIN command to perform a critical volume restore.

 

Correct Answer: A

 

 

QUESTION 93

Your company has an Active Directory forest. Not all domain controllers in the forest are configured as Global Catalog Servers. Your domain structure contains one root domain and one child domain. You modify the folder permissions on a file server that is in the child domain. You discover that some Access Control entries start with S-1-5-21 and that no account name is listed. You need to list the account names. What should you do?

 

A.       Move the RID master role in the child domain to a domain controller that holds the Global Catalog.

B.       Modify the schema to enable replication of the friendlynames attribute to the Global Catalog.

C.       Move the RID master role in the child domain to a domain controller that does not hold the Global Catalog.

D.       Move the infrastructure master role in the child domain to a domain controller that does not hold the Global Catalog.

 

Correct Answer: D

 

 

 

QUESTION 94

Your company security policy requires complex passwords. You have a comma delimited file named import.csv that contains user account information. You need to create user account in the domain by using the import.csv file. You also need to ensure that the new user accounts are set to use default passwords and are disabled. What shoulld you do?

 

A.        Modify the userAccountControl attribute to disabled. Run the csvde i k f import.csv command. Run the DSMOD utility to set default passwords for the user accounts.

B.        Modify the userAccountControl attribute to accounts disabled. Run the csvde -f import.csv command. Run the DSMOD utility to set default passwords for the user accounts.

C.        Modify the userAccountControl attribute to disabled. Run the wscript import.csv command. Run the DSADD utility to set default passwords for the imported user accounts.

D.        Modify the userAccountControl attribute to disabled. Run ldifde -i -f import.csv command. Run the DSADD utility to set passwords for the imported user accounts.

 

Correct Answer: A

 

 

QUESTION 95

You are installing an application on a computer that runs Windows Server 2008 R2. During installation, the application will need to install new attributes and classes to the Active Directory database. You need to ensure that you can install the application. What should you do?

 

A.       Change the functional level of the forest to Windows Server 2008 R2.

B.       Log on by using an account that has Server Operator rights.

C.       Log on by using an account that has Schema Administrator rights and the appropriate rights to install the application.

D.      Log on by using an account that has the Enterprise Administrator rights and the appropriate rights to install the application.

 

Correct Answer: C

 

 

QUESTION 96

Your company has an Active Directory forest. The company has servers that run Windows Server 2008 R2 and client computers that run Windows 7. The domain uses a set of GPO administrative templates that have been approved to support regulatory compliance requirements. Your partner company has an Active Directory forest that contains a single domain. The company has servers that run Windows Server 2008 R2 and client computers that run Windows 7. You need to configure your partner company’s domain to use the approved set of administrative templates. What should you do?

 

A.       Use the Group Policy Management Console (GPMC) utility to back up the GPO to a file. In each site, import the GPO to the default domain policy.

B.       Copy the ADMX files from your company’s PDC emulator to the PolicyDefinitions folder on the partner company’s PDC emulator.

C.       Copy the ADML files from your company’s PDC emulator to the PolicyDefinitions folder on the partner company’s PDC emulator.

D.       Download the conf.adm, system.adm, wuau.adm, and inetres.adm files from the Microsoft Updates Web site. Copy the ADM files to the PolicyDefinitions folder on thr partner company’s emulator.

 

Correct Answer: B

 

 

QUESTION 97

You need to ensure that users who enter three successive invalid passwords within 5 minutes are locked out for 5 minutes. Which three actions should you perform? (Each correct answer presents part of the solution. Choose three.)

 

A.       Set the Minimum password age setting to one day.

B.       Set the Maximum password age setting to one day.

C.       Set the Account lockout duration setting to 5 minutes.

D.      Set the Reset account lockout counter after setting to 5 minutes.

E.       Set the Account lockout threshold setting to 3 invalid logon attempts.

F.        Set the Enforce password history setting to 3 passwords remembered.

 

Correct Answer: CDE

 

 

QUESTION 98

Your company has an Active Directory domain and an organizational unit. The organizational unit is named Web. You configure and test new security settings for Internet Information Service (IIS) Servers on a server named IISServerA. You need to deploy the new security settings only on the IIS servers that are members of the Web organizational unit. What should you do?

 

A.       Run secedit /configure /db iis.inf from the command prompt on IISServerA, then run secedit /configure /db webou.inf from the comand prompt.

B.       Export the settings on IISServerA to create a security template. Import the security template into a GPO and link the GPO to the Web organizational unit.

C.       Export the settings on IISServerA to create a security template. Run secedit /configure /db webou.inf from the comand prompt.

D.       Import the hisecws.inf file template into a GPO and link the GPO to the Web organizational unit.

 

Correct Answer: B

 

 

QUESTION 99

Your network consists of an Active Directory forest that contains two domains. All servers run Windows Server 2008 R2. All domain controllers are configured as DNS Servers. You have a standard primary zone for dev.contoso.com that is stored on a member server. You need to ensure that all domain controllers can resolve names from the dev.contoso.com zone. What should you do?

 

A.       On the member server, create a stub zone.

B.       On the member server, create a NS record for each domain controller.

C.       On one domain controller, create a conditional forwarder. Configure the conditional forwarder to replicate to all DNS servers in the forest.

D.      On one domain controller, create a conditional forwarder. Configure the conditional forwarder to replicate to all DNS servers in the domain.

 

Correct Answer: C

 

 

QUESTION 100

Your company has an Active Directory domain. You install a new domain controller in the domain. Twenty users report that they are unable to log on to the domain. You need to register the SRV records. Which command should you run on the new domain controller?

 

A.       Run the netsh interface reset command.

B.       Run the ipconfig /flushdns command.

C.       Run the dnscmd /EnlistDirectoryPartition command.

D.      Run the sc stop netlogon command followed by the sc start netlogon command.

 

Correct Answer: D

Download Ensurepass Latest 2013 70-640 Braindumps Free Tests , help you to pass exam 100%.