Latest Real 70-649 Tests Dumps and VCE Exam Questions 51-60

Ensurepass

QUESTION 51

Active Directory Rights Management Services (AD RMS) is deployed on your network. You need to configure AD RMS to use Kerberos authentication. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

 

A.      Register a service principal name (SPN) for AD RMS.

B.      Register a service connection point (SCP) for AD RMS.

C.      Configure the identity setting of the _DRMSAppPool1 application pool.

D.      Configure the useAppPoolCredentials attribute in the Internet Information Services (IIS) metabase.

 

Correct Answer: AD

 

 

QUESTION 52

Your company has an Active Directory Rights Management Services (AD RMS) server. Users have Windows Vista computers. An Active Directory domain is configured at the Windows Server 2003 functional level. You need to configure AD RMS so that users are able to protect their documents.

What should you do?

 

A.      Install the AD RMS client 2.0 on each client computer.

B.      Add the RMS service account to the local administrators group on the AD RMS server.

C.      Establish an e-mail account in Active Directory Domain Services (AD DS) for each RMS user.

D.      Upgrade the Active Directory domain to the functional level of Windows Server 2008.

 

Correct Answer: C

 

 

QUESTION 53

Your company has a main office and a branch office. The branch office contains a read-only domain controller named RODC1. You need to ensure that a user named Admin1 can install updates on RODC1. The solution must prevent Admin1 from logging on to other domain controllers. What should you do?

 

A.      Run ntdsutil.exe and use the Roles option.

B.      Run dsmgmt.exe and use the Local Roles option.

C.      From Active Directory Sites and Services, modify the NTDS Site Settings.

D.      From Active Directory Users and Computers, add the user to the Server Operators group.

 

Correct Answer: B

 

 

QUESTION 54

Your network contains an Active Directory domain. The domain contains two sites named Site1 and Site2. Site1 contains four domain controllers. Site2 contains a read-only domain controller (RODC). You add a user named User1 to the Allowed RODC Password Replication Group. The WAN link between Site1 and Site2 fails. User1 restarts his computer and reports that he is unable to log on to the domain. The WAN link is restored and User1 reports that he is able to log on to the domain. You need to prevent the problem from reoccurring if the WAN link fails. What should you do?

 

A.      Create a Password Settings object (PSO) and link the PSO to User1’s user account.

B.      Create a Password Settings object (PSO) and link the PSO to the Domain Users group.

C.      Add the computer account of the RODC to the Allowed RODC Password Replication Group.

D.      Add the computer account of User1’s computer to the Allowed RODC Password Replication Group.

 

Correct Answer: D

 

 

QUESTION 55

Your network contains two standalone servers named Server1and Server2 that have Active Directory Lightweight Directory Services (AD LDS) installed. Server1 has an AD LDS instance. You need to ensure that you can replicate the instance from Server1 to Server2. What should you do on both servers?

 

A.      Obtain a server certificate.

B.      Import the MS-User.ldf file.

C.      Create a service user account for AD LDS.

D.      Register the service location (SRV) resource records.

 

Correct Answer: C

 

 

QUESTION 56

Your network contains a server named Server1 that runs Windows Server 2008 R2. Server1 is configured as an Active Directory Federation Services (AD FS) 2.0 standalone server. You plan to add a new token-signing certificate to Server1. You import the certificate to the server as shown in the exhibit.

 

clip_image001

 

When you run the Add Token-Signing Certificate wizard, you discover that the new certificate is unavailable. You need to ensure that you can use the new certificate for AD FS. What should you do?

 

A.      From the properties of the certificate, modify the Certificate purposes setting.

B.      From the properties of the certificate, modify the Certificate Policy OIDs setting.

C.      Import the certificate to the local computer personal certificate store.

D.      Import the certificate to the AD FS 2.0 windows Service personal certificate store.

 

Correct Answer: C

 

 

QUESTION 57

You install a read-only domain controller (RODC) named RODC1. You need to ensure that a user named User1 can administer RODC1. The solution must minimize the number of permissions assigned to User1. Which tool should you use?

 

A.      Active Directory Administrative Center

B.      Active Directory Users and Computers

C.      Dsadd

D.      Dsmgmt

 

Correct Answer: B

 

 

QUESTION 58

Your network contains an Active Directory forest. The forest contains an Active Directory site for a remote office. The remote site contains a read-only domain controller (RODC). You need to configure the RODC to store only the passwords of users in the remote site. What should you do?

 

A.      Create a Password Settings object (PSO).

B.      Modify the Partial-Attribute-Set attribute of the forest.

C.      Add the user accounts of the remote site users to the Allowed RODC Password Replication Group.

D.      Add the user accounts of users who are not in the remote site to the Denied RODC Password Replication Group.

 

Correct Answer: C

 

 

QUESTION 59

Your network contains two servers. The servers are configured as shown in the following table.

 

clip_image002

 

You need to limit the display quality of Remote Desktop connections. What should you do?

 

A.      Create a Remote Desktop resource allocation policy (RD RAP) on Server2.

B.      Create a Windows System Resource Manager (WSRM) resource allocation policy on Server1.

C.      Edit the properties of the RDP-TCP connection on Server1.

D.      Edit the properties of the Remote Desktop connection authorization policy (RD CAP) on Server2.

 

Correct Answer: C

 

 

QUESTION 60

Your network contains a server that has the Remote Desktop Session Host (RD Session Host) role service installed. You need to increase the bandwidth that is allocated for printing and for file transfers between the RD Session Host server and the Remote Desktop clients. What should you do?

 

A.      On the server, modify the RDP-TCP settings.

B.      On the server, modify the FlowControlChannelBandwidth registry setting.

C.      On the clients, modify the FlowControlDisplayBandwidth registry setting.

D.      On the clients, modify the Local Resources settings of the Remote Desktop connections.

Correct Answer: B

 

 

Download Latest 70-649 Real Free Tests ,help you to pass exam 100%.