New Updated Microsoft MCITP 70-640 Real Exam Questions and Answers Download 521-530

EnsurepassQUESTION 521 Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1. You have a member server named Server1. Both DC1 and Server1 have the DNS Server role installed. On DC1, you create an Active Directory-integrated zone named adatum.com. You need to ensure that Server1 receives a copy of the zone. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)   Create a secondary Read more [...]

New Updated Microsoft MCITP 70-640 Real Exam Questions and Answers Download 511-520

EnsurepassQUESTION 511 Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1. You install Active Directory Lightweight Directory Services (AD LDS) on a member server named Server2. On Server2, you create a directory partition named fabrikam.com. You need to configure the MS-AdamSyncConfig.xml file to synchronize data from contoso.com to fabrikam.com. What should you do?   To answer, select the appropriate options in the answer area. Read more [...]

New Updated Microsoft MCITP 70-640 Real Exam Questions and Answers Download 501-510

EnsurepassQUESTION 501 Your network contains an Active Directory forest. The forest contains two domains. The forest contains four domain controllers. The domain controllers are configured as shown in the following table.     All user accounts are located in the child.contoso.com domain. Users in the child.contoso.com domain are members of several security groups in the contoso.com domain. Your company decides to change the naming standard of user accounts. You rename all of the user accounts Read more [...]

New Updated Microsoft MCITP 70-640 Real Exam Questions and Answers Download 491-500

EnsurepassQUESTION 491 Your network contains an Active Directory forest named contoso.com. The functional level of the forest is Windows Server 2008 R2. You have four Active Directory sites. Each site has multiple Active Directory subnets. You need to identify all of the authentication requests that originate from client computers that are not associated to an Active Directory subnet. What should you use?   The %Systemroot%System32Network_llu.log log file The %Systemroot%DebugNetsetup.log Read more [...]

New Updated Microsoft MCITP 70-640 Real Exam Questions and Answers Download 461-470

EnsurepassQUESTION 461 Your network contains an Active Directory domain. The domain is configured as shown in the exhibit.     You need to ensure that when users log on to client computers, they are added automatically to the local Administrators group. The users must be removed from the group when they log off of the client computers. What should you do?   Modify the Group Policy permissions. Enable block inheritance. Configure the link order. Enable loopback processing in merge Read more [...]

New Updated Microsoft MCITP 70-640 Real Exam Questions and Answers Download 481-490

EnsurepassQUESTION 481 You are the administrator of an organization with a single Active Directory domain. A user who left the company returns after 16 weeks. The user tries to log onto their old computer and receives an error stating that authentication has failed. The user`s account has been enabled. You need to ensure that the user is able to log onto the domain using that computer. What do you do?   Reset the computer account in Active Directory. Disjoin the computer from the domain and Read more [...]

New Updated Microsoft MCITP 70-640 Real Exam Questions and Answers Download 471-480

EnsurepassQUESTION 471 You are the network administrator for the Contoso Company. Your network consists of two DNS servers named DNS1 and DNS2. The users who are configured to use DNS2 complain because they are unable to connect to Internet websites. The following table shows the configuration of both servers:     The users connected to DNS2 need to be able to access the Internet. What needs to be done?   Build a new Active Directory Integrated zone on DNS2. Delete the .(root) Read more [...]

New Updated Microsoft MCITP 70-640 Real Exam Questions and Answers Download 451-460

EnsurepassQUESTION 451 Your network contains an Active Directory domain named contoso.com. The Active Directory sites are configured as shown in the Sites exhibit.     You need to ensure that DC1 and DC4 are the only servers that replicate Active Directory changes between the sites. What should you do?   Configure DC1 as a preferred bridgehead server for IP transport. Configure DC4 as a preferred bridgehead server for IP transport. From the DC4 server object, create a Connection Read more [...]

New Updated Microsoft MCITP 70-640 Real Exam Questions and Answers Download 441-450

EnsurepassQUESTION 441 A corporate environment includes a Windows Server 2008 R2 Active Directory Domain Services (AD DS) domain. You need to enable Universal Group Membership Caching on several domain controllers in the domain. Which tool should you use?   Dsmod Dscmd Ntdsutil Active Directory Sites and Services console   Correct Answer: D     QUESTION 442 Your network contains an Active Directory forest. The forest contains three domains. All domain controllers have the Read more [...]

New Updated Microsoft MCITP 70-640 Real Exam Questions and Answers Download 431-440

EnsurepassQUESTION 431 Your network contains an Active Directory domain. The domain contains two Active Directory sites named Site1 and Site2. Site1 contains two domain controllers named DC1 and DC2. Site2 contains two domain controller named DC3 and DC4. The functional level of the domain is Windows Server 2008 R2. The functional level of the forest is Windows Server 2003. Active Directory replication between Site1 and Site2 occurs from 20:00 to 01:00 every day. At 07:00, an administrator deletes Read more [...]

New Updated Microsoft MCITP 70-640 Real Exam Questions and Answers Download 421-430

EnsurepassQUESTION 421 Your network contains an Active Directory forest named fabrikam.com. The forest contains the following domains:   Fabrikam.com Eu.fabrikam.com Na.fabrikam.com Eu.contoso.com Na.contoso.com   You need to configure the forest to ensure that the administrators of any of the domains can specify a user principal name (UPN) suffix of contoso.com when they create user accounts from Active Directory Users and Computers. Which tool should you use?   Active Directory Read more [...]

New Updated Microsoft MCITP 70-640 Real Exam Questions and Answers Download 411-420

EnsurepassQUESTION 411 A corporate network includes an Active Directory-integrated zone. All DNS servers that host the zone are domain controllers. You add multiple DNS records to the zone. You need to ensure that the new records are available on all DNS servers as soon as possible. Which tool should you use?   Repadmin Active Directory Domains and Trusts console Ldp Ntdsutil   Correct Answer: A     QUESTION 412 Your network contains an Active Directory forest named contoso.com. Read more [...]

New Updated Microsoft MCITP 70-640 Real Exam Questions and Answers Download 401-410

EnsurepassQUESTION 401 Your network contains an Active Directory domain. You need to activate the Active Directory Recycle Bin in the domain. Which tool should you use?   Dsamain Set-ADDomain Add-WindowsFeature Ldp   Correct Answer: D     QUESTION 402 Your network contains an Active Directory domain named contoso.com. You need to create a script that runs the Best Practices Analyzer (BPA) each week for all of the server roles that BPA supports on each domain controller. You Read more [...]

New Updated Microsoft MCITP 70-640 Real Exam Questions and Answers Download 391-400

EnsurepassQUESTION 391 Your network contains an Active Directory domain named contoso.com. Contoso.com contains two domain controllers named DC1 and DC2. DC1 and DC2 are configured as DNS servers and host the Active Directory-integrated zone for contoso.com. From DNS Manager on DC1, you enable scavenging for the contoso.com zone. You discover stale DNS records in the zone. You need to ensure that the stale DNS records are deleted from contoso.com. What should you do?   From DNS Manager, enable Read more [...]

New Updated Microsoft MCITP 70-640 Real Exam Questions and Answers Download 371-380

EnsurepassQUESTION 371 All vendors belong to a global group named vendors. You place three file servers in a new organizational unit (OU) named ConfidentialFileServers. The three file servers contain confidential data located in shared folders. You need to record any failed attempts made by the vendors to access the confidential data. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)   Create a new Group Policy Object (GPO) and link it to Read more [...]

New Updated Microsoft MCITP 70-640 Real Exam Questions and Answers Download 381-390

EnsurepassQUESTION 381 Your network contains an Active Directory forest. The forest contains one domain named contoso.com. You discover the following event in the Event log of client computers: "The time provider NtpClient was unable to find a domain controller to use as a time source. NtpClient will try again in %1 minutes." You need to ensure that the client computers can synchronize their clocks properly. What should you do?   Move the domain naming master role. Restart Active Directory Read more [...]

New Updated Microsoft MCITP 70-640 Real Exam Questions and Answers Download 361-370

EnsurepassQUESTION 361 Your network contains an Active Directory domain named contoso.com. You need to ensure that IP addresses can be resolved to fully qualified domain names (FQDNs). Under which node in the DNS snap-in should you add a zone?   To answer, select the appropriate node in the answer area.   Point and Shoot:   Correct Answer:   QUESTION 362 Your company has two domain controllers named DC1 and DC2. DC1 hosts all domain and forest operations master roles. DC1 fails. You need to Read more [...]

New Updated Microsoft MCITP 70-640 Real Exam Questions and Answers Download 351-360

EnsurepassQUESTION 351 Your network contains an Active Directory forest. The DNS infrastructure fails. You rebuild the DNS infrastructure. You need to force the registration of the Active Directory Service Locator (SRV) records in DNS. Which service should you restart on the domain controllers?   To answer, select the appropriate service in the answer area.   Point and Shoot:   Correct Answer:     QUESTION 352 Your network contains an Active Directory forest named contoso.com. The password Read more [...]

New Updated Microsoft MCITP 70-640 Real Exam Questions and Answers Download 341-350

EnsurepassQUESTION 341 Your network contains an Active Directory forest. The forest contains domain controllers that run Windows Server 2008 R2. The functional level of the forest is Windows Server 2003. The functional level of the domain is Windows Server 2008. From a domain controller, you need to perform an authoritative restore of an organizational unit (OU). What should you do first?   Raise the functional level of the forest Modify the tombstone lifetime of the forest. Restore the Read more [...]

New Updated Microsoft MCITP 70-640 Real Exam Questions and Answers Download 331-340

EnsurepassQUESTION 331 Your network contains an enterprise certification authority (CA) that runs Windows Server 2008 R2 Enterprise. You enable key archival on the CA. The CA is configured to use custom certificate templates for Encrypted File System (EFS) certificates. You need to archive the private key for all new EFS certificates. Which snap-in should you use?   Active Directory Users and Computers Authorization Manager Group Policy Management Enterprise PKI Security Templates TPM Read more [...]

New Updated Microsoft MCITP 70-640 Real Exam Questions and Answers Download 321-330

EnsurepassQUESTION 321 You install an Active Directory domain in a test environment. You need to reset the passwords of all the user accounts in the domain from a domain controller. Which two Windows PowerShell commands should you run? (Each correct answer presents part of the solution, choose two.)   $ newPassword = * Import-Module ActiveDirectory Import-Module WebAdministration Get- AdUser -filter * | Set- ADAccountPossword - NewPassword $ newPassword - Reset Set- ADAccountPossword - Read more [...]

New Updated Microsoft MCITP 70-640 Real Exam Questions and Answers Download 311-320

EnsurepassQUESTION 311 Your network contains a domain controller that runs Windows Server 2008 R2. You run the following command on the domain controller:   dsamain.exe C dbpath c:$SNAP_201006170326_VOLUMEC$WindowsNTDSntds.dit C ldapport 389 - allowNonAdminAccess   The command fails. You need to ensure that the command completes successfully. How should you modify the command?   Change the value of the -dbpath parameter. Include the path to Dsamain. Change the value of the -ldapport Read more [...]

New Updated Microsoft MCITP 70-640 Real Exam Questions and Answers Download 301-310

EnsurepassQUESTION 301 Your network contains an Active Directory domain named contoso.com. Contoso.com contains a writable domain controller named DC1 and a read-only domain controller (RODC) named DC2. All domain controllers run Windows Server 2008 R2. You need to install a new writable domain controller named DC3 in a remote site. The solution must minimize the amount of replication traffic that occurs during the installation of Active Directory Domain Services (AD DS) on DC3. What should you do Read more [...]

New Updated Microsoft MCITP 70-640 Real Exam Questions and Answers Download 291-300

EnsurepassQUESTION 291 You need to purge the list of user accounts that were authenticated on a read-only domain controller (RODC). What should you do?   Run the repadmin.exe command and specify the /prp parameter. From Active Directory Sites and Services, modify the properties of the RODC computer object. From Active Directory Users and Computers, modify the properties of the RODC computer object. Run the dsrm.exe command and specify the -u parameter.   Correct Answer: A     Read more [...]

New Updated Microsoft MCITP 70-640 Real Exam Questions and Answers Download 271-280

EnsurepassQUESTION 271 Your network contains an Active Directory domain controller named DC1. DC1 runs Windows Server 2008 R2. You need to defragment the Active Directory database on DC1. The solution must minimize downtime on DC1. What should you do first? At the command prompt, run net stop ntds. At the command prompt, run net stop netlogon. Restart DC1 in Safe Mode. Restart DC1 in Directory Services Restore Mode (DSRM).   Correct Answer: A     QUESTION 272 Your network contains Read more [...]

New Updated Microsoft MCITP 70-640 Real Exam Questions and Answers Download 261-270

EnsurepassQUESTION 261 Your network contains two Active Directory forests named contoso.com and nwtraders.com. A two-way forest trust exists between contoso.com and nwtraders.com. The forest trust is configured to use selective authentication. Contoso.com contains a server named Server1. Server1 contains a shared folder named Marketing. Nwtraders.com contains a global group named G_Marketing. The Change share permission and the Modify NTFS permission for the Marketing folder are assigned to the G_Marketing Read more [...]

New Updated Microsoft MCITP 70-640 Real Exam Questions and Answers Download 251-260

EnsurepassQUESTION 251 You install a standalone root certification authority (CA) on a server named Server1. You need to ensure that every computer in the forest has a copy of the root CA certificate installed in the local computer's Trusted Root Certification Authorities store. Which command should you run on Server1?   certreq.exe and specify the -accept parameter certreq.exe and specify the -retrieve parameter certutil.exe and specify the -dspublish parameter certutil.exe and specify Read more [...]

New Updated Microsoft MCITP 70-640 Real Exam Questions and Answers Download 241-250

EnsurepassQUESTION 241 Your network contains an Active Directory domain. The domain contains four domain controllers. You modify the Active Directory schema. You need to verify that all the domain controllers received the schema modification. Which command should you run?   dcdiag.exe /a netdom.exe query fsmo repadmin.exe /showrepl * sc.exe query ntds   Correct Answer: C     QUESTION 242 You remotely monitor several domain controllers. You run winrm.exe quickconfig on each Read more [...]

New Updated Microsoft MCITP 70-640 Real Exam Questions and Answers Download 231-240

EnsurepassQUESTION 231 You need to back up all of the group policies in a domain. The solution must minimize the size of the backup. What should you use?   the Add-WBSystemState cmdlet the Group Policy Management console the Wbadmin tool the Windows Server Backup feature   Correct Answer: B     QUESTION 232 You have an enterprise root certification authority (CA) that runs Windows Server 2008 R2. You need to ensure that you can recover the private key of a certificate issued Read more [...]

New Updated Microsoft MCITP 70-640 Real Exam Questions and Answers Download 221-230

EnsurepassQUESTION 221 You need to create a Password Settings object (PSO). Which tool should you use?   Active Directory Users and Computers ADSI Edit Group Policy Management Console Ntdsutil   Correct Answer: B     QUESTION 222 Your network contains an Active Directory domain. All servers run Windows Server 2008 R2. You need to audit the deletion of registry keys on each server. What should you do?   From Audit Policy, modify the Object Access settings and the Process Read more [...]

New Updated Microsoft MCITP 70-640 Real Exam Questions and Answers Download 211-220

EnsurepassQUESTION 211 Your network contains an Active Directory forest. The forest schema contains a custom attribute for user objects. You need to give the human resources department a file that contains the last logon time and the custom attribute values for each user in the forest. What should you use?   the Dsquery tool the Export-CSV cmdlet the Get-ADUser cmdlet the Net.exe user command   Correct Answer: C       QUESTION 212 You have a Windows PowerShell script Read more [...]

New Updated Microsoft MCITP 70-640 Real Exam Questions and Answers Download 191-200

EnsurepassQUESTION 201 Your company has a main office and a branch office. The branch office has an Active Directory site that contains a read-only domain controller (RODC). A user from the branch office reports that his account is locked out. From a writable domain controller in the main office, you discover that the user's account is not locked out. You need to ensure that the user can log on to the domain. What should you do?   Modify the Password Replication Policy. Reset the password Read more [...]

New Updated Microsoft MCITP 70-640 Real Exam Questions and Answers Download 191-200

EnsurepassQUESTION 191 Your network contains two Active Directory forests named contoso.com and adatum.com. Active Directory Rights Management Services (AD RMS) is deployed in contoso.com. An AD RMS trusted user domain (TUD) exists between contoso.com and adatum.com. From the AD RMS logs, you discover that some clients that have IP addresses in the adatum.com forest are authenticating as users from contoso.com. You need to prevent users from impersonating contoso.com users. What should you do?   Read more [...]
1 2 3 5