Latest Real 70-640 Tests Dumps and VCE Exam Questions 511-520

Ensurepass

QUESTION 511

Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1. You install Active Directory Lightweight Directory Services (AD LDS) on a member server named Server2. On Server2, you create a directory partition named fabrikam.com. You need to configure the MS-AdamSyncConfig.xml file to synchronize data from contoso.com to fabrikam.com. What should you do?

 

To answer, select the appropriate options in the answer area.

 

Hot Area:

clip_image021_thumb

clip_image022_thumb

 

Correct Answer:

clip_image023_thumb

 

 

QUESTION 512

Your network contains an Active Directory forest. The forest contains a single domain named contoso.com. The domain contains domain controllers that run either Windows Server 2003 or Windows Server 2008 R2. The functional level of the domain and the forest is Windows Server 2003. You need to add a read-only domain controller (RODC) to the forest. What should you do first?

 

A.      Upgrade the domain controllers that run Windows Server 2003.

B.      Raise the domain functional level.

C.      Run the adprep command.

D.      Raise the forest functional level.

 

Correct Answer: C

 

 

QUESTION 513

Your company has two offices. The offices are located in Miami and London. The network contains an Active Directory forest named contoso.com. The forest contains two child domains named miami.contoso.com and london.contoso.com. Each domain contains 50 domain controllers that run Windows Server 2008 R2. Each office is configured as an Active Directory site. The office in London recently hired several thousand new employees. You need to move 10 domain controllers from miami.contoso.com to london.contoso.com. What should you do?

 

A.      Run the dsadd.exe command

B.      Run the nltest.exe command.

C.      Run the Set-AdDomain cmdlet.

D.      Run the dsmove.exe command.

E.       Run the dcpromo.exe command.

F.       Run the Move-AdDirectoryServer cmdlet.

G.      Use the Active Directory Schema snap-in.

H.      Use the Active Directory Users and Computers console.

 

Correct Answer: E

 

 

QUESTION 514

Your network contains an Active Directory forest named contoso.com. The forest contains a single domain. The domain contains 50 domain controllers that run Windows Server 2008 R2. The domain contains a group named Computer_Location. You plan to create 1,000 computer accounts in the domain in several organizational units (OUs). You need to ensure that the members of the Computer_Location group can modify the description of each computer account as soon as the account is created. The solution must use permissions that are applied explicitly to the new computer accounts. What should you do?

 

A.      Run the dsadd.exe command

B.      Run the nltest.exe command.

C.      Run the Set-AdDomain cmdlet.

D.      Run the dsmove.exe command.

E.       Run the dcpromo.exe command.

F.       Run the Move-AdDirectoryServer cmdlet.

G.      Use the Active Directory Schema snap-in.

H.      Use the Active Directory Users and Computers console.

 

Correct Answer: G

 

 

QUESTION 515

Your company has two offices. The offices are located in Miami and London. The network contains an Active Directory forest named contoso.com. The forest contains two child domains named miami.contoso.com and london.contoso.com. The domain contains 50 domain controllers that run Windows Server 2008 R2. Each office is configured as an Active Directory site. The forest contains a custom attribute named SecurityAccessCode. You recently configured a domain controller named DC22 as a global catalog server. You need to verify that SecurityAccessCode is configured to replicate to DC22. What should you do?

 

A.      Run the dsadd.exe command

B.      Run the nltest.exe command.

C.      Run the Set-AdDomain cmdlet.

D.      Run the dsmove.exe command.

E.       Run the dcpromo.exe command.

F.       Run the Move-AdDirectoryServer cmdlet.

G.      Use the Active Directory Schema snap-in.

H.      Use the Active Directory Users and Computers console.

 

Correct Answer: G

 

 

QUESTION 516

Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1. DC1 hosts an Active Directory-integrated zone for contoso.com. The research department maintains its own DNS servers and hosts a zone named research.contoso.com on a UNIXbased server named Server1. The perimeter network contains a DNS server named Server2. Server2 is a standalone server that runs Windows Server 2008 R2. You need to configure the DNS settings of Server2 to meet the following requirements:

 

Ÿ   Server2 must maintain a copy of all the records in research.contoso.com.

Ÿ   DC1 must query Server2 to resolve the names of Internet hosts.

 

Which two actions should you perform? (Each correct answer presents part of the solution.

Choose two.)

 

A.      Create a secondary zone.

B.      Create a conditional forwarder.

C.      Create a stub zone.

D.      Create a primary zone.

E.       Create a Forwarder.

 

Correct Answer: AE

 

 

QUESTION 517

Your network contains an Active Directory domain named contoso.com.

 

The Zone Transfers settings of contoso.com are configured as shown in the Zone Transfers exhibit.

 

clip_image024_thumb

 

The Name Servers settings of contoso.com are configured as shown in the Name Servers exhibit.

 

clip_image025_thumb

 

To answer, complete each statement according to the information presented in the exhibits.

 

Hot Area:

clip_image026_thumb

clip_image027_thumb

 

Correct Answer:

clip_image028_thumb

 

 

QUESTION 518

Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1 that runs Windows Server 2008 R2. You need to increase the amount of Active Directory diagnostic information logged to the Event Viewer on DC1. What should you do?

 

A.      Modify the properties of the objects in the Active Directory Diagnostics Data Collector Set (DCS).

B.      Modify the properties of the System Log and the Application Log.

C.      Modify the flags attribute of DC1.

D.      Modify the settings in the

HKey_Local_MachineSYSTEMCurrentControlSetservicesNTDSDiagnostics registry key.

 

Correct Answer: D

 

 

QUESTION 519

Your network contains an Active Directory domain named contoso.com. The domain contains an enterprise certification authority (CA). You plan to delegate certificate enrollment for Smartcard Logon certificates to a user named User1. User1 is the member of a group named CONTOSODelegatedAdmins. You need to recommend a solution to provide User1 with the ability to enroll for Smartcard Logon certificates on behalf of other domain users. What should you include in the recommendation?

 

A.      Duplicate the Smartcard Logon certificate template. Modify the Extensions settings and the Request Handling settings of the new template.

B.      Modify the Issuance Requirements settings and the Security settings of the Smartcard Logon certificate template.

C.      Modify the Extensions settings and the Request Handling settings of the Smartcard Logon certificate template.

D.      Duplicate the Smartcard Logon certificate template. Modify the Issuance Requirements settings and the Security settings of the new template.

Correct Answer: D

 

 

QUESTION 520

Your network contains an Active Directory domain named contoso.com. You need to ensure that when computers are joined manually to the domain by using the System Properties, the computer account of the computers is created automatically in an organizational unit (OU) named NewComputers. Which command should you run?

 

A.      dsmgmt.exe

B.      redircmp.exe

C.      csvde.exe

D.      computerdefaults.exe

 

Correct Answer: B

 

Download Latest Microsoft 70-640 Real Free Tests ,help you to pass exam 100%.