Tag: Latest 70-640

EnsurepassQUESTION 401 Your network contains an Active Directory domain. You need to activate the Active Directory Recycle Bin in the domain. Which tool should you use?   Dsamain Set-ADDomain Add-WindowsFeature Ldp   Correct Answer: D     QUESTION 402 Your network contains an Active Directory domain named contoso.com. You need to create a script that runs the Best Practices Analyzer (BPA) each week for all of the server roles that BPA supports on each domain controller. You Read more [...]

EnsurepassQUESTION 391 Your network contains an Active Directory domain named contoso.com. Contoso.com contains two domain controllers named DC1 and DC2. DC1 and DC2 are configured as DNS servers and host the Active Directory-integrated zone for contoso.com. From DNS Manager on DC1, you enable scavenging for the contoso.com zone. You discover stale DNS records in the zone. You need to ensure that the stale DNS records are deleted from contoso.com. What should you do?   From DNS Manager, enable Read more [...]

EnsurepassQUESTION 371 All vendors belong to a global group named vendors. You place three file servers in a new organizational unit (OU) named ConfidentialFileServers. The three file servers contain confidential data located in shared folders. You need to record any failed attempts made by the vendors to access the confidential data. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)   Create a new Group Policy Object (GPO) and link it to Read more [...]

EnsurepassQUESTION 381 Your network contains an Active Directory forest. The forest contains one domain named contoso.com. You discover the following event in the Event log of client computers: "The time provider NtpClient was unable to find a domain controller to use as a time source. NtpClient will try again in %1 minutes." You need to ensure that the client computers can synchronize their clocks properly. What should you do?   Move the domain naming master role. Restart Active Directory Read more [...]

EnsurepassQUESTION 361 Your network contains an Active Directory domain named contoso.com. You need to ensure that IP addresses can be resolved to fully qualified domain names (FQDNs). Under which node in the DNS snap-in should you add a zone?   To answer, select the appropriate node in the answer area.   Point and Shoot:   Correct Answer:   QUESTION 362 Your company has two domain controllers named DC1 and DC2. DC1 hosts all domain and forest operations master roles. DC1 fails. You need to Read more [...]

EnsurepassQUESTION 351 Your network contains an Active Directory forest. The DNS infrastructure fails. You rebuild the DNS infrastructure. You need to force the registration of the Active Directory Service Locator (SRV) records in DNS. Which service should you restart on the domain controllers?   To answer, select the appropriate service in the answer area.   Point and Shoot:   Correct Answer:     QUESTION 352 Your network contains an Active Directory forest named contoso.com. The password Read more [...]

EnsurepassQUESTION 341 Your network contains an Active Directory forest. The forest contains domain controllers that run Windows Server 2008 R2. The functional level of the forest is Windows Server 2003. The functional level of the domain is Windows Server 2008. From a domain controller, you need to perform an authoritative restore of an organizational unit (OU). What should you do first?   Raise the functional level of the forest Modify the tombstone lifetime of the forest. Restore the Read more [...]

EnsurepassQUESTION 331 Your network contains an enterprise certification authority (CA) that runs Windows Server 2008 R2 Enterprise. You enable key archival on the CA. The CA is configured to use custom certificate templates for Encrypted File System (EFS) certificates. You need to archive the private key for all new EFS certificates. Which snap-in should you use?   Active Directory Users and Computers Authorization Manager Group Policy Management Enterprise PKI Security Templates TPM Read more [...]

EnsurepassQUESTION 321 You install an Active Directory domain in a test environment. You need to reset the passwords of all the user accounts in the domain from a domain controller. Which two Windows PowerShell commands should you run? (Each correct answer presents part of the solution, choose two.)   $ newPassword = * Import-Module ActiveDirectory Import-Module WebAdministration Get- AdUser -filter * | Set- ADAccountPossword - NewPassword $ newPassword - Reset Set- ADAccountPossword - Read more [...]

EnsurepassQUESTION 311 Your network contains a domain controller that runs Windows Server 2008 R2. You run the following command on the domain controller:   dsamain.exe C dbpath c:$SNAP_201006170326_VOLUMEC$WindowsNTDSntds.dit C ldapport 389 - allowNonAdminAccess   The command fails. You need to ensure that the command completes successfully. How should you modify the command?   Change the value of the -dbpath parameter. Include the path to Dsamain. Change the value of the -ldapport Read more [...]

EnsurepassQUESTION 301 Your network contains an Active Directory domain named contoso.com. Contoso.com contains a writable domain controller named DC1 and a read-only domain controller (RODC) named DC2. All domain controllers run Windows Server 2008 R2. You need to install a new writable domain controller named DC3 in a remote site. The solution must minimize the amount of replication traffic that occurs during the installation of Active Directory Domain Services (AD DS) on DC3. What should you do Read more [...]

EnsurepassQUESTION 291 You need to purge the list of user accounts that were authenticated on a read-only domain controller (RODC). What should you do?   Run the repadmin.exe command and specify the /prp parameter. From Active Directory Sites and Services, modify the properties of the RODC computer object. From Active Directory Users and Computers, modify the properties of the RODC computer object. Run the dsrm.exe command and specify the -u parameter.   Correct Answer: A     Read more [...]