70-640 Microsoft Real Questions Pass4Sure Free Tests 41-45

Ensurepass d1. Ensurepass has an Active Directory domain. The company has two domain controllers named DC1 and DC2. DC1 holds the schema master role. DC1 fails. You log on to Active Directory by using the administrator account. You are not able to transfer the schema master role. You need to ensure that DC2 holds the schema master role. What should you do? A. Register the Schmmgmt.dll. Start the Active Directory Schema snap-in. B. Configure DC2 as a bridgehead server. C. On DC2, seize the schema Read more [...]

70-640 Microsoft Real Questions Pass4Sure Free Tests 36-40

Ensurepass d6. Ensurepass has a main office and 10 branch offices. Each branch office has an Active Directory site that contains one domain controller. Only domain controllers in the main office are configured as Global Catalog servers. You need to deactivate the Universal Group Membership Caching option on the domain controllers in the branch offices. At which level should you deactivate the Universal Group Membership Caching option? A. Site B. Server C. Domain D. Connection object Answer: A Read more [...]

70-640 Microsoft Real Questions Pass4Sure Free Tests 31-35

Ensurepass d1. Ensurepass has an Active Directory forest that contains only Windows Server 2008 domain controllers. You need to prepare the Active Directory domain to install Windows Server 2008 R2 domain controllers. Which two tasks should you perform? (Each correct answer presents part of the solution. Choose two.) A. Run the adprep /forestprep command. B. Run the adprep /domainprep command. C. Raise the forest functional level to Windows Server 2008. D. Raise the domain functional level to Windows Read more [...]

70-640 Microsoft Real Questions Pass4Sure Free Tests 26-30

Ensurepass d6. Your network consists of a single Active Directory domain. The domain contains 10 domain controllers. The domain controllers run Windows Server 2008 R2 and are configured as DNS servers. You plan to create a new Active Directory-integrated zone. You need to ensure that the new zone is only replicated to four of your domain controllers. What should you do first? A. Create a new delegation in the ForestDnsZones application directory partition. B. Create a new delegation in the DomainDnsZones Read more [...]

70-640 Microsoft Real Questions Pass4Sure Free Tests 21-25

Ensurepass 11. Contoso, Ltd. has an Active Directory domain named ad.contoso.com. Fabrikam, Inc. has an Active Directory domain named intranet.fabrikam.com. Fabrikams security policy prohibits the transfer of internal DNS zone data outside the Fabrikam network. You need to ensure that the Contoso users are able to resolve names from the intranet.fabrikam.com domain. What should you do? A. Create a new stub zone for the intranet.fabrikam.com domain. B. Configure conditional forwarding for the intranet.fabrikam.com Read more [...]

70-640 Microsoft Real Questions Pass4Sure Free Tests 16-20

Ensurepass 6. Your network consists of an Active Directory forest that contains two domains. All servers run Windows Server 2008 R2. All domain controllers are configured as DNS servers. You have a standard primary zone for dev.contoso.com that is stored on a member server. You need to ensure that all domain controllers can resolve names from the dev.contoso.com zone. What should you do? A. On the member server, create a stub zone. B. On the member server, create a NS record for each domain controller. Read more [...]

70-640 Microsoft Real Questions Pass4Sure Free Tests 11-15

Ensurepass 1. Ensurepass, Contoso, Ltd., has a main office and a branch office. The offices are connected by a WAN link. Contoso has an Active Directory forest that contains a single domain named ad.contoso.com. The ad.contoso.com domain contains one domain controller named DC1 that is located in the main office. DC1 is configured as a DNS server for the ad.contoso.com DNS zone. This zone is configured as a standard primary zone. You install a new domain controller named DC2 in the branch office. Read more [...]

70-640 Microsoft Real Questions Pass4Sure Free Tests 96-100

Ensurepass d6. Ensurepass has an Active Directory domain. All servers run Windows Server 2008 R2. Ensurepass uses an Enterprise Root certification authority (CA) and an Enterprise Intermediate CA. The Enterprise Intermediate CA certificate expires. You need to deploy a new Enterprise Intermediate CA certificate to all computers in the domain. What should you do? A. Import the new certificate into the Intermediate Certification Store on the Enterprise Root CA server. B. Import the new certificate Read more [...]

70-640 Microsoft Real Questions Pass4Sure Free Tests 06-10

Ensurepass 6.Rate your level of proficiency in creating and maintaining Active Directory objects, including creating and applying Group Policy objects (GPOs) and configuring account policies. A:Very High B:High C:Moderate D:Low E:Very Low A 7.Rate your level of proficiency in maintaining the Active Directory environment, including configuring backup and recovery. A:Very High B:High C:Moderate D:Low E:Very Low A 8.Rate your level of proficiency in configuring Active Directory Certificate Services, Read more [...]

70-640 Microsoft Real Questions Pass4Sure Free Tests 91-95

Ensurepass d1. Ensurepass has a server that runs Windows Server 2008 R2. Active Directory Certificate Services (AD CS) is configured as a standalone Certification Authority (CA) on the server. You need to audit changes to the CA configuration settings and the CA security settings. Which two tasks should you perform? (Each correct answer presents part of the solution. Choose two.) A. Configure auditing in the Certification Authority snap-in. B. Enable auditing of successful and failed attempts Read more [...]

70-640 Microsoft Real Questions Pass4Sure Free Tests 86-90

Ensurepass d6. Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2. You need to capture all replication errors from all domain controllers to a central location. What should you do? A. Configure event log subscriptions. B. Start the System Performance data collector set. C. Start the Active Directory Diagnostics data collector set. D. Install Network Monitor and create a new capture. Answer: A 77. You have an Active Directory domain that Read more [...]

70-640 Microsoft Real Questions Pass4Sure Free Tests 81-85

Ensurepass d1. Ensurepass has an Active Directory domain. You have a two-tier PKI infrastructure that contains an offline root CA and an online issuing CA. The Enterprise certification authority is running Windows Server 2008 R2. You need to ensure users are able to enroll new certificates. What should you do? A. Renew the Certificate Revocation List (CRL) on the root CA. Copy the CRL to the CertEnroll folder on the issuing CA. B. Renew the Certificate Revocation List (CRL) on the issuing CA. Read more [...]

70-640 Microsoft Real Questions Pass4Sure Free Tests 76-80

Ensurepass d6. Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2. Auditing is configured to log changes made to the Managed By attribute on group objects in an organizational unit named OU1. You need to log changes made to the Description attribute on all group objects in OU1 only. What should you do? A. Run auditpol.exe. B. Modify the auditing entry for OU1. C. Modify the auditing entry for the domain. D. Create a new Group Policy object Read more [...]

70-640 Microsoft Real Questions Pass4Sure Free Tests 71-75

Ensurepass d1. You need to ensure that users who enter three successive invalid passwords within 5 minutes are locked out for 5 minutes. Which three actions should you perform? (Each correct answer presents part of the solution. Choose three.) A. Set the Minimum password age setting to one day. B. Set the Maximum password age setting to one day. C. Set the Account lockout duration setting to 5 minutes. D. Set the Reset account lockout counter after setting to 5 minutes. E. Set the Account lockout Read more [...]

70-640 Microsoft Real Questions Pass4Sure Free Tests 66-70

Ensurepass d6. Ensurepass has an Active Directory forest that contains client computers that run Windows Vista and Windows XP. You need to ensure that users are able to install approved application updates on their computers. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.) A. Set up Automatic Updates through Control Panel on the client computers. B. Create a GPO and link it to the Domain Controllers organizational unit. Configure the GPO to Read more [...]

70-640 Microsoft Real Questions Pass4Sure Free Tests 61-65

Ensurepass d1. Ensurepass has an Active Directory forest that contains Windows Server 2008 R2 domain controllers and DNS servers. All client computers run Windows XP SP3. You need to use your client computers to edit domain-based GPOs by using the ADMX files that are stored in the ADMX central store. What should you do? A. Add your account to the Domain Admins group. B. Upgrade your client computers to Windows 7. C. Install .NET Framework 3.0 on your client computers. D. Create a folder on PDC Read more [...]

70-640 Microsoft Real Questions Pass4Sure Free Tests 56-60

Ensurepass d6. Ensurepass has an organizational unit named Production. The Production organizational unit has a child organizational unit named R&D. You create a GPO named Software Deployment and link it to the Production organizational unit. You create a shadow group for the R&D organizational unit. You need to deploy an application to users in the Production organizational unit. You also need to ensure that the application is not deployed to users in the R&D organizational unit. What are two Read more [...]

70-640 Microsoft Real Questions Pass4Sure Free Tests 51-55

Ensurepass d1. Ensurepasss security policy requires complex passwords. You have a comma delimited file named import.csv that contains user account information. You need to create user accounts in the domain by using the import.csv file. You also need to ensure that the new user accounts are set to use default passwords and are disabled. What should you do? A. Modify the userAccountControl attribute to disabled. Run the csvde Ci Ck Cf import.csv command. Run the DSMOD utility to set default passwords Read more [...]
1 2