[Free] Download New Updated (February 2016) Microsoft 70-640 Practice Tests 431-440

EnsurepassQUESTION 431 HOTSPOT Your network contains an Active Directory domain named contoso.com.   All users have laptops that run Windows 7. The laptops are joined to the domain. Windows Firewall is enabled on all the laptops.   You need to ensure that when the users connect to unidentified networks, Windows Firewall uses the Public Profile.   Which node in Group Policy Management Editor should you use?   To answer, select the appropriate node in the answer area.     Read more [...]

[Free] Download New Updated (February 2016) Microsoft 70-640 Practice Tests 421-430

EnsurepassQUESTION 421 HOTSPOT Your network contains an Active Directory domain named contoso.com.   You need to ensure that IP addresses can be resolved to fully qualified domain names (FQDNs).   Under which node in the DNS snap-in should you add a zone?   To answer, select the appropriate node in the answer area.     Correct Answer:     QUESTION 422 A corporate network includes a single Active Directory Domain Services (AD D5) domain. The domain contains 10 Read more [...]

[Free] Download New Updated (February 2016) Microsoft 70-640 Practice Tests 411-420

EnsurepassQUESTION 411 A corporate network includes an Active Directory Domain Services (AD DS) forest that contains two domains. All servers run Windows Server 2008 R2. All domain controllers are configured as DNS servers.   A standard primary zone for dev.contoso.com is stored on a member server.   You need to ensure that all domain controllers can resolve names from the dev.contoso.com zone.   What should you do?   A. On one domain controller, create a secondary zone. Read more [...]

[Free] Download New Updated (February 2016) Microsoft 70-640 Practice Tests 401-410

EnsurepassQUESTION 401 Your network contains an Active Directory domain. The domain contains two domain controllers named DC1 and DC2.   You perform a full backup of the domain controllers every night by using Windows Server Backup.   You update a script in the 5YSVOL folder. The new script fails to run properly.   You need to restore the previous version of the script in the SYSVOL folder. The solution must minimize the amount of time required to restore the script.   What should Read more [...]

[Free] Download New Updated (February 2016) Microsoft 70-640 Practice Tests 391-400

EnsurepassQUESTION 391 Your network contains an Active Directory forest named contoso.com. The functional level of the forest is Windows Server 2008 R2.   The DNS zone for contoso.com is Active Directory-integrated.   You deploy a read-only domain controller (RODC) named RODC1. You install the DNS Server server role on RODC1.   You discover that RODC1 does not have any DNS application directory partitions.   You need to ensure that RODC1 has a copy of the DNS application directory Read more [...]

[Free] Download New Updated (February 2016) Microsoft 70-640 Practice Tests 381-390

EnsurepassQUESTION 381 Your network contains an Active Directory forest. The forest contains three domains. All domain controllers have the DNS Server server role installed.   The forest contains three sites named Site1, Site2, and Site3. Each site contains the users, client computers, and domain controllers of each domain. Site1 contains the first domain controller deployed to the forest.   The sites connect to each other by using unreliable WAN links.   The users in Site2 and Site3 Read more [...]

[Free] Download New Updated (February 2016) Microsoft 70-640 Practice Tests 371-380

EnsurepassQUESTION 371 Your network contains an Active Directory domain. The domain contains several domain controllers.   You need to modify the Password Replication Policy on a read-only domain controller (RODC).   Which tool should you use?   A. Group Policy Management B. Active Directory Domains and Trusts C. Active Directory Users and Computers D. Computer Management E. Security Configuration Wizard   Correct Answer: C Explanation: http://technet.microsoft.com/en-us/library/rodc-guidance-for-administering-the-password-replication-policy.aspx Read more [...]

[Free] Download New Updated (February 2016) Microsoft 70-640 Practice Tests 361-370

EnsurepassQUESTION 361 Your network contains an enterprise certification authority (CA) that runs Windows Server 2008 R2 Enterprise.   You need to approve a pending certificate request.   Which snap-in should you use?   A. Active Directory Users and Computers B. Authorization Manager C. Certification Authority D. Group Policy Management E. Certificate Templates F. TPM Management G. Certificates H. Enterprise PKI I. Security Templates   Correct Answer: Read more [...]

[Free] Download New Updated (February 2016) Microsoft 70-640 Practice Tests 351-360

EnsurepassQUESTION 351 Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1. DC1 has the DNS Server server role installed and hosts an Active Directory-integrated zone for contoso.com. The no-refresh interval and the refresh interval are both set to three days. The Advanced DNS settings of DC1 are shown in the Advanced DNS Settings exhibit. (Click the Exhibit button.)     You open the properties of a static record named Server1 Read more [...]

[Free] Download New Updated (February 2016) Microsoft 70-640 Practice Tests 341-350

EnsurepassQUESTION 341 Your network contains two Active Directory forests named contoso.com and nwtraders.com. The functional level of both forests is Windows Server 2003. Contoso.com contains one domain. Nwtraders.com contains two domains.   You need to ensure that users in contoso.com can access the resources in all domains. The solution must require the minimum number of trusts.   Which type of trust should you create?   A. external B. forest C. realm D. shortcut   Read more [...]

[Free] Download New Updated (February 2016) Microsoft 70-640 Practice Tests 311-320

EnsurepassQUESTION 311 Your network contains a server that has the Active Directory Lightweight Directory Services (AD LDS) role installed.   You need to perform an automated installation of an AD LDS instance.   Which tool should you use?   A. Dism.exe B. Servermanagercmd.exe C. Adaminstall.exe D. Ocsetup.exe   Correct Answer: C Explanation: http://technet.microsoft.com/en-us/library/cc816774.aspx   To perform an unattended install of an AD LDS instance 1. Read more [...]

[Free] Download New Updated (February 2016) Microsoft 70-640 Practice Tests 321-330

EnsurepassQUESTION 321 Your network contains three servers named ADFS1, ADFS2, and ADFS3 that run Windows Server 2008 R2. ADFS1 has the Active Directory Federation Services (AD FS) Federation Service role service installed.   You plan to deploy AD FS 2.0 on ADFS2 and ADFS3.   You need to export the token-signing certificate from ADFS1, and then import the certificate to ADFS2 and ADFS3.   In which format should you export the certificate?   A. Personal Information Exchange Read more [...]

[Free] Download New Updated (February 2016) Microsoft 70-640 Practice Tests 331-340

EnsurepassQUESTION 331 Your network contains an Active Directory domain named adatum.com. The functional level of the domain is Windows Server 2008. All domain controllers run Windows Server 2008 R2. All client computers run Windows 7 Enterprise.   You need to receive a notification when more than 50 Active Directory objects are deleted per second.   What should you do?   A. Run the Get-ADDomain cmdlet. B. Run the dsget.exe command. C. Run the ntdsutil.exe command. D. Read more [...]

[Free] Download New Updated (February 2016) Microsoft 70-640 Practice Tests 301-310

EnsurepassQUESTION 301 Your network contains an Active Directory domain. All domain controllers run Windows Server 2008 R2.   You mount an Active Directory snapshot.   You need to ensure that you can query the snapshot by using LDAP.   What should you do?   A. Run the dsamain.exe command. B. Create custom views from Event Viewer. C. Run the ntdsutil.exe command. D. Configure subscriptions from Event Viewer. E. Run the Get-ADForest cmdlet. F. Create a Data Collector Read more [...]

[Free] Download New Updated (February 2016) Microsoft 70-640 Practice Tests 291-300

EnsurepassQUESTION 291 Your network contains an Active Directory domain. The domain contains five domain controllers. A domain controller named DC1 has the DHCP role and the file server role installed.   You need to move the Active Directory database on DC1 to an alternate location.The solution must minimize impact on the network during the database move.   What should you do first?   A. Restart DC1 in Safe Mode. B. Restart DC1 in Directory Services Restore Mode. C. Start Read more [...]

[Free] Download New Updated (February 2016) Microsoft 70-640 Practice Tests 271-280

EnsurepassQUESTION 271 Your network contains an Active Directory domain. The domain contains two sites named Site1 and Site2. Site1 contains four domain controllers. Site2 contains a read-only domain controller (RODC).   You add a user named User1 to the Allowed RODC Password Replication Group.   The WAN link between Site1 and Site2 fails. User1 restarts his computer and reports that he is unable to log on to the domain.   The WAN link is restored and User1 reports that he is able Read more [...]

[Free] Download New Updated (February 2016) Microsoft 70-640 Practice Tests 281-290

EnsurepassQUESTION 281 Your network contains an Active Directory forest. The forest schema contains a custom attribute for user objects.   You need to modify the custom attribute value of 500 user accounts.   Which tool should you use?   A. Csvde B. Dsmod C. Dsrm D. Ldifde   Correct Answer: D Explanation: We cannot use Dsmod here, because it supports only a subset of commonly used object class attributes. Csvde can only import and export data. Dsrm is used to delete Read more [...]

[Free] Download New Updated (February 2016) Microsoft 70-640 Practice Tests 261-270

EnsurepassQUESTION 261 You create a new Active Directory domain. The functional level of the domain is Windows Server 2003. The domain contains five domain controllers that run Windows Server 2008 R2.   You need to monitor the replication of the group policy template files.   Which tool should you use?   A. Dfsrdiag B. Fsutil C. Ntdsutil D. Ntfrsutl   Correct Answer: D Explanation: With domain functional level 2008 you have available dfs-r sysvol replication. So Read more [...]

[Free] Download New Updated (February 2016) Microsoft 70-640 Practice Tests 251-260

EnsurepassQUESTION 251 Your network contains an Active Directory forest. The forest contains one domain. The domain contains two domain controllers named DC1 and DC2 that run Windows Server 2008 R2.   DC1 was installed before DC2.   DC1 fails.   You need to ensure that you can add 1,000 new user accounts to the domain.   What should you do?   A. Modify the permissions of the DC2 computer account. B. Seize the schema master FSMO role. C. Configure DC2 as a global Read more [...]

[Free] Download New Updated (February 2016) Microsoft 70-640 Practice Tests 231-240

EnsurepassQUESTION 231 You create a new Active Directory domain. The functional level of the domain is Windows Server 2008 R2. The domain contains five domain controllers.   You need to monitor the replication of the group policy template files.   Which tool should you use?   A. Dfsrdiag B. Fsutil C. Ntdsutil D. Ntfrsutl Correct Answer: A Explanation: With domain functional level 2008 you have available dfs-r sysvol replication. So with DFL2008 you can use the DFSRDIAG Read more [...]

[Free] Download New Updated (February 2016) Microsoft 70-640 Practice Tests 241-250

EnsurepassQUESTION 241 Your network contains an Active Directory forest.   You need to add a new user principal name (UPN) suffix to the forest.   Which tool should you use?   A. Active Directory Administrative Center B. Active Directory Domains and Trusts C. Active Directory Sites and Services D. Active Directory Users and Computers   Correct Answer: B Explanation: http://www.kassapoglou.com/windows-server-2008-lesson-23-video-creating-a-user/   Demonstration Read more [...]

[Free] Download New Updated (February 2016) Microsoft 70-640 Practice Tests 221-230

EnsurepassQUESTION 221 Your network contains an Active Directory forest. The forest schema contains a custom attribute for user objects.   You need to give the human resources department a file that contains the last logon time and the custom attribute values for each user in the forest.   What should you use?   A. the Dsquery tool B. the Export-CSV cmdlet C. the Get-ADUser cmdlet D. the Net.exe user command   Correct Answer: C Explanation: References: https://devcentral.f5.com/weblogs/Joe/archive/2009/01/09/powershell-abcs-o-is-for-output.aspx Read more [...]

[Free] Download New Updated (February 2016) Microsoft 70-640 Practice Tests 211-220

EnsurepassQUESTION 211 Your network contains a server named Server1 that runs Windows Server 2008 R2. Server1 is configured as an Active Directory Federation Services (AD FS) 2.0 standalone server.   You plan to add a new token-signing certificate to Server1.   You import the certificate to the server as shown in the exhibit. (Click the Exhibit button.)     When you run the Add Token-Signing Certificate wizard, you discover that the new certificate is unavailable.   You Read more [...]

[Free] Download New Updated (February 2016) Microsoft 70-640 Practice Tests 201-210

EnsurepassQUESTION 201 Your network contains an Active Directory domain. All servers run Windows Server 2008 R2.   You need to audit the deletion of registry keys on each server.   What should you do?   A. From Audit Policy, modify the Object Access settings and the Process Tracking settings. B. From Audit Policy, modify the System Events settings and the Privilege Use settings. C. From Advanced Audit Policy Configuration, modify the System settings and the Detailed Tracking Read more [...]

[Free] Download New Updated (February 2016) Microsoft 70-640 Practice Tests 181-190

EnsurepassQUESTION 181 You had installed an Active Directory Federation Services (AD FS) role on a Windows server 2008 in your organization.   Now you need to test the connectivity of clients in the network to ensure that they can successfully reach the new Federation server and Federation server is operational.   What should you do? (Select all that apply)   A. Go to Services tab, and check if Active Directory Federation Services is running B. In the event viewer, Applications, Read more [...]

[Free] Download New Updated (February 2016) Microsoft 70-640 Practice Tests 191-200

EnsurepassQUESTION 191 HOTSPOT Your network contains an Active Directory forest named contoso.com. The forest contains two Active Directory sites named Seattle and Montreal. The Montreal site is a branch office that contains only a single read-only domain controller (RODC).   You accidentally delete the site link between the two sites.   You recreate the site link while you are connected to a domain controller in Seattle.   You need to replicate the change to the RODC in Montreal. Read more [...]

[Free] Download New Updated (February 2016) Microsoft 70-640 Practice Tests 171-180

EnsurepassQUESTION 171 You are decommissioning one of the domain controllers in a child domain.   You need to transfer all domain operations master roles within the child domain to a newly installed domain controller in the same child domain.   Which three domain operations master roles should you transfer? (Each correct answer presents part of the solution. Choose three.)   A. RID master B. PDC emulator C. Schema master D. Infrastructure master E. Domain naming master Read more [...]

[Free] Download New Updated (February 2016) Microsoft 70-640 Practice Tests 151-160

EnsurepassQUESTION 151 Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2008 R2. The functional level of the domain is Windows Server 2008 R2. The functional level of the forest is Windows Server 2008.   You have a member server named Server1 that runs Windows Server 2008.   You need to ensure that you can add Server1 to contoso.com as a domain controller.   What should you run before you promote Server1?   A. dcpromo.exe Read more [...]

[Free] Download New Updated (February 2016) Microsoft 70-640 Practice Tests 161-170

EnsurepassQUESTION 161 The Company has a Windows 2008 domain controller server. This server is routinely backed up over the network from a dedicated backup server that is running Windows 2003 OS.   You need to prepare the domain controller for disaster recovery apart from the routine backup procedures.   You are unable to launch the backup utility while attempting to back up the system state data for the data controller.   You need to backup system state data from the Windows Server Read more [...]

[Free] Download New Updated (February 2016) Microsoft 70-640 Practice Tests 131-140

EnsurepassQUESTION 131 Your network contains an Active Directory domain named contoso.com. The network contains client computers that run either Windows Vista or Windows 7. Active Directory Rights Management Services (AD RMS) is deployed on the network.   You create a new AD RMS template that is distributed by using the AD RMS pipeline. The template is updated every month.   You need to ensure that all the computers can use the most up-to-date version of the AD RMS template.   You Read more [...]

[Free] Download New Updated (February 2016) Microsoft 70-640 Practice Tests 141-150

EnsurepassQUESTION 141 HOTSPOT Your network contains an Active Directory forest named contoso.com. The forest contains two sites named Seattle and Montreal. The Seattle site contains two domain controllers. The domain controllers are configured as shown in the following table.     The Montreal site contains a domain controller named DC3. DC3 is the only global catalog server in the forest.   You need to configure DC2 as a global catalog server.   Which object's properties should Read more [...]

[Free] Download New Updated (February 2016) Microsoft 70-640 Practice Tests 121-130

EnsurepassQUESTION 121 As an administrator at Company, you have installed an Active Directory forest that has a single domain.   You have installed an Active Directory Federation services (AD FS) on the domain member server.   What should you do to configure AD FS to make sure that AD FS token contains information from the active directory domain?   A. Add a new account store and configure it. B. Add a new resource partner and configure it C. Add a new resource store and Read more [...]
1 2 3