Ensurepass

QUESTION 471

You are the network administrator for the Contoso Company. Your network consists of two DNS servers named DNS1 and DNS2. The users who are configured to use DNS2 complain because they are unable to connect to Internet websites. The following table shows the configuration of both servers:

 

 

The users connected to DNS2 need to be able to access the Internet. What needs to be done?

 

A.      Build a new Active Directory Integrated zone on DNS2.

B.      Delete the .(root) zone from DNS2 and configure Conditional forwarding on DNS2.

C.      Delete the current cache.dns file.

D.      Update your cache.dns file and root hints.

 

Correct Answer: B

 

 

QUESTION 472

You are the network administrator for a large company that has one main site and one branch office. Your company has a single Active Directory forest, ABC.com. You have a single domain controller (Server A) in the main site that has the DNS role installed. Server A is configured as a primary DNS zone. You have decided to place a domain controller (Server B) in the remote site and implement the DNS role on that server. You want to configure DNS so that if the WAN link fails, users in both sites can still update records and resolve any DNS queries. How should you configure the DNS servers?

 

A.      Configure Server B as a secondary DNS server. Set replication to occur every 5 minutes.

B.      Configure Server B as s stub zone.

C.      Configure Server B as an Active Directory Integrated zone and convert Server A to an Active Directory Integrated zone.

D.      Configure Server A as an Active Directory Integrated zone and configure Server B as a secondary zone.

 

Correct Answer: C

 

 

 

 

 

 

QUESTION 473

You are the systems administrator of a large organization that has recently implemented Windows Server 2008 R2. You have a few remote sites that do not have very tight security. You have decided to implement read-only domain controllers (RODC). What forest and function levels does the network need for you to do the install? (Choose Three)

 

A.      Windows 2000 Mixed

B.      Windows 2008 R2

C.      Windows 2003

D.      Windows 2008

 

Correct Answer: BCD

 

 

QUESTION 474

What is the maximum number of domains that a Windows Server 2008 R2 computer, configured as a domain controller, may participate in at one time?

 

A.      Zero

B.      One

C.      Two

D.      Any number of domains

 

Correct Answer: B

 

 

QUESTION 475

You are the network administrator for an organization that has two locations, New York and London. Each location has multiple domains but all domains fall under the same tree, Stellacon.com. Users in the NY.us.stellacon.com domain need to access resources in the London.uk.stellacon.com domain.

 

You need to reduce the amount of time it takes for authentication when users from NY.us.stellacon.com access resources in London.uk.stellacon.com. What can you do?

 

A.      Set up a one-way shortcut trust from London.uk.stellacon.com to NY.us.stellacon.com.

B.      Set up a one-way shortcut trust from NY.us.stellacon.com to London.uk.stellacon.com.

C.      Enable Universal Group Membership Caching in NY.us.stellacon.com.

D.      Enable Universal Group Membership Caching in London.uk.stellacon.com.

 

Correct Answer: A

 

 

 

QUESTION 476

You are hired as a consultant by ABC Corporation to implement a Windows Server 2008 R2 computer onto their Windows Server 2003 domain. All of the client machines are Windows 7. You install Windows Server 2008 R2 onto a new computer and join that computer to the Windows 2003 domain. You want to upgrade the Windows Server 2008 R2 to a domain controller. What should you do first?

 

A. On the new server, run adprep /domainprep.

B. On the new server, run adprep /forestprep.

C. On a Windows Server 2003 domain controller, run adprep /domainprep.

D. On a Windows Server 2003 domain controller, run adprep /forestprep.

 

Correct Answer: D

 

 

QUESTION 477

You need to deactivate the UGMC option on some of your domain controllers. At which level in Active Directory would you deactivate UGMC?

 

A.      Server

B.      Site

C.      Domain

D.      Forest

 

Correct Answer: B

 

 

QUESTION 478

You work for an organization with a single domain forest. Your company has one main location and two branch locations. All locations are configured as Active Directory sites and all sites are connected with the DEFAULTIPSITELINK object. Your connections are running slower than the company policy allows. You want to decrease the replication latency between all domain controllers in the various sites. What should you do?

 

A.      Decrease the Replication interval for the DEFAULTIPSITELINK object.

B.      Decrease the Replication interval for the site.

C.      Decrease the Replication schedule for the site.

D.      Decrease the Replication schedule for all domain controllers.

 

Correct Answer: A

 

 

 

 

QUESTION 479

You are the network administrator for the ABC Company. The ABC Company has all Windows Server 2008 R2 Active Directory domains and uses an Enterprise Root certificate server. You need to verify that revoked certificate data is highly available.

 

A.      Implement a Group Policy Object (GPO) that has the Certificate Verification Enabled option.

B.      Using Network Load Balancing, implement an Online Certificate Status Protocol (OCSP) responder.

C.      Implement a Group Policy Object (GPO) that enables the Online Certificate Status Protocol (OCSP) responder.

D.      Using Network Load Balancing, implement the Certificate Verification Enabled option.

 

Correct Answer: B

 

 

QUESTION 480

You are the network administrator for your organization. Your company uses a Windows Server 2008 R2 Enterprise Root CA. The company has issued a new policy that prevents port 443 and port 80 from being opened on domain controllers and on issuing CAs. Your users need to request certificates from a web interface. You have already installed the AD CS role. What do you need to do next?

 

A.      Configure the Certificate Authority Web Enrollment Service on a member server.

B.      Configure the Certificate Authority Web Enrollment Service on a domain server.

C.      Configure AD FS on member server to allow secure web-based access.

D.      Configure AD FS on domain controller to allow secure web-based access.

 

Correct Answer: A

 

Instant Access to Download Testing Software & PDF File for Microsoft 70-640 Real Exam

Instant Access to Try Microsoft 70-640 Free Demo