Tag: Latest Microsoft 70-640 Real Exam

EnsurepassQUESTION 321 Your network contains three servers named ADFS1, ADFS2, and ADFS3 that run Windows Server 2008 R2. ADFS1 has the Active Directory Federation Services (AD FS) Federation Service role service installed.   You plan to deploy AD FS 2.0 on ADFS2 and ADFS3.   You need to export the token-signing certificate from ADFS1, and then import the certificate to ADFS2 and ADFS3.   In which format should you export the certificate?   A. Personal Information Exchange Read more [...]

EnsurepassQUESTION 331 Your network contains an Active Directory domain named adatum.com. The functional level of the domain is Windows Server 2008. All domain controllers run Windows Server 2008 R2. All client computers run Windows 7 Enterprise.   You need to receive a notification when more than 50 Active Directory objects are deleted per second.   What should you do?   A. Run the Get-ADDomain cmdlet. B. Run the dsget.exe command. C. Run the ntdsutil.exe command. D. Read more [...]

EnsurepassQUESTION 301 Your network contains an Active Directory domain. All domain controllers run Windows Server 2008 R2.   You mount an Active Directory snapshot.   You need to ensure that you can query the snapshot by using LDAP.   What should you do?   A. Run the dsamain.exe command. B. Create custom views from Event Viewer. C. Run the ntdsutil.exe command. D. Configure subscriptions from Event Viewer. E. Run the Get-ADForest cmdlet. F. Create a Data Collector Read more [...]

EnsurepassQUESTION 291 Your network contains an Active Directory domain. The domain contains five domain controllers. A domain controller named DC1 has the DHCP role and the file server role installed.   You need to move the Active Directory database on DC1 to an alternate location.The solution must minimize impact on the network during the database move.   What should you do first?   A. Restart DC1 in Safe Mode. B. Restart DC1 in Directory Services Restore Mode. C. Start Read more [...]

EnsurepassQUESTION 271 Your network contains an Active Directory domain. The domain contains two sites named Site1 and Site2. Site1 contains four domain controllers. Site2 contains a read-only domain controller (RODC).   You add a user named User1 to the Allowed RODC Password Replication Group.   The WAN link between Site1 and Site2 fails. User1 restarts his computer and reports that he is unable to log on to the domain.   The WAN link is restored and User1 reports that he is able Read more [...]

EnsurepassQUESTION 281 Your network contains an Active Directory forest. The forest schema contains a custom attribute for user objects.   You need to modify the custom attribute value of 500 user accounts.   Which tool should you use?   A. Csvde B. Dsmod C. Dsrm D. Ldifde   Correct Answer: D Explanation: We cannot use Dsmod here, because it supports only a subset of commonly used object class attributes. Csvde can only import and export data. Dsrm is used to delete Read more [...]

EnsurepassQUESTION 261 You create a new Active Directory domain. The functional level of the domain is Windows Server 2003. The domain contains five domain controllers that run Windows Server 2008 R2.   You need to monitor the replication of the group policy template files.   Which tool should you use?   A. Dfsrdiag B. Fsutil C. Ntdsutil D. Ntfrsutl   Correct Answer: D Explanation: With domain functional level 2008 you have available dfs-r sysvol replication. So Read more [...]

EnsurepassQUESTION 251 Your network contains an Active Directory forest. The forest contains one domain. The domain contains two domain controllers named DC1 and DC2 that run Windows Server 2008 R2.   DC1 was installed before DC2.   DC1 fails.   You need to ensure that you can add 1,000 new user accounts to the domain.   What should you do?   A. Modify the permissions of the DC2 computer account. B. Seize the schema master FSMO role. C. Configure DC2 as a global Read more [...]

EnsurepassQUESTION 231 You create a new Active Directory domain. The functional level of the domain is Windows Server 2008 R2. The domain contains five domain controllers.   You need to monitor the replication of the group policy template files.   Which tool should you use?   A. Dfsrdiag B. Fsutil C. Ntdsutil D. Ntfrsutl Correct Answer: A Explanation: With domain functional level 2008 you have available dfs-r sysvol replication. So with DFL2008 you can use the DFSRDIAG Read more [...]

EnsurepassQUESTION 241 Your network contains an Active Directory forest.   You need to add a new user principal name (UPN) suffix to the forest.   Which tool should you use?   A. Active Directory Administrative Center B. Active Directory Domains and Trusts C. Active Directory Sites and Services D. Active Directory Users and Computers   Correct Answer: B Explanation: http://www.kassapoglou.com/windows-server-2008-lesson-23-video-creating-a-user/   Demonstration Read more [...]

EnsurepassQUESTION 221 Your network contains an Active Directory forest. The forest schema contains a custom attribute for user objects.   You need to give the human resources department a file that contains the last logon time and the custom attribute values for each user in the forest.   What should you use?   A. the Dsquery tool B. the Export-CSV cmdlet C. the Get-ADUser cmdlet D. the Net.exe user command   Correct Answer: C Explanation: References: https://devcentral.f5.com/weblogs/Joe/archive/2009/01/09/powershell-abcs-o-is-for-output.aspx Read more [...]

EnsurepassQUESTION 201 Your network contains an Active Directory domain. All servers run Windows Server 2008 R2.   You need to audit the deletion of registry keys on each server.   What should you do?   A. From Audit Policy, modify the Object Access settings and the Process Tracking settings. B. From Audit Policy, modify the System Events settings and the Privilege Use settings. C. From Advanced Audit Policy Configuration, modify the System settings and the Detailed Tracking Read more [...]