Ensurepass

QUESTION 171

Your network contains two servers named Server1 and Server2 that run Windows Server 2008 R2. Server1 has the Active Directory Federation Services (AD FS) Federation Service role service installed. You plan to deploy AD FS 2.0 on Server2. You need to export the token-signing certificate from Server1, and then import the certificate to Server2. Which format should you use to export the certificate?

 

A.      Base-64 encoded X.S09 (.cer)

B.      Cryptographic Message Syntax Standard PKCS #7 (.p7b)

C.      DER encoded binary X.509 (.cer)

D.      Personal Information Exchange PKCS #12 (.pfx)

 

Correct Answer: D

 

 

QUESTION 172

Your company has a main office and 40 branch offices. Each branch office is configured as a separate Active Directory site that has a dedicated read-only domain controller (RODC). An RODC server is stolen from one of the branch offices. You need to identify the user accounts that were cached on the stolen RODC server. Which utility should you use?

 

A.      Dsmod.exe

B.      Ntdsutil.exe

C.      Active Directory Sites and Services

D.      Active Directory Users and Computers

 

Correct Answer: D

 

 

QUESTION 173

Your network contains a server named Server1 that runs Windows Server 2008 R2. On Server1, you create an Active Directory Lightweight Directory Services (AD LDS) instance named Instance1.

You connect to Instance1 by using ADSI Edit. You run the Create Object wizard and you discover that there is no User object class. You need to ensure that you can create user objects in Instance1. What should you do?

 

A.      Run the AD LDS Setup Wizard.

B.      Modify the schema of Instance1.

C.      Modify the properties of the Instance1 service.

D.      Install the Remote Server Administration Tools (RSAT).

 

Correct Answer: B

 

 

QUESTION 174

Your company has a server that runs Windows Server 2008 R2. The server runs an instance of Active Directory Lightweight Directory Services (AD LDS). You need to replicate the AD LDS instance on a test computer that is located on the network. What should you do?

 

A.      Run the repadmin /kcc <servername> command on the test computer.

B.      Create a naming context by running the Dsmgmt command on the test computer.

C.      Create a new directory partition by running the Dsmgmt command on the test computer.

D.      Create and install a replica by running the AD LDS Setup wizard on the test computer.

 

Correct Answer: D

 

 

QUESTION 175

Your network contains an Active Directory domain named contoso.com. The network contains client computers that run either Windows Vista or Windows 7. Active Directory Rights Management Services (AD RMS) is deployed on the network. You create a new AD RMS template that is distributed by using the AD RMS pipeline. The template is updated every month. You need to ensure that all the computers can use the most up-to-date version of the AD RMS template. You want to achieve this goal by using the minimum amount of administrative effort. What should you do?

 

A.      Upgrade all of the Windows Vista computers to Windows 7.

B.      Upgrade all of the Windows Vista computers to Windows Vista Service Pack 2 (SP2).

C.      Assign the Microsoft Windows Rights Management Services (RMS) Client Service Pack 2 (SP2) to all users by using a Software Installation extension of Group Policy.

D.      Assign the Microsoft Windows Rights Management Services (RMS) Client Service Pack 2 (SP2) to all computers by using a Software Installation extension of Group Policy.

 

Correct Answer: B

 

 

QUESTION 176

Your network contains a single Active Directory domain. Active Directory Rights Management Services (AD RMS) is deployed on the network. A user named User1 is a member of only the AD RMS Enterprise Administrators group. You need to ensure that User1 can change the service connection point (SCP) for the AD RMS installation. The solution must minimize the administrative rights of User1. To which group should you add User1?

 

A.      AD RMS Auditors

B.      AD RMS Service Group

C.      Domain Admins

D.      Schema Admins

 

Correct Answer: C

 

 

QUESTION 177

Your network contains a server named Server1 that runs Windows Server 2008 R2. Server 1 has the Remote Desktop Session Host (RD Session Host) role service installed. On server1, you install and configure the Windows System Resource Manager (WSRM) feature as shown in the exhibit.

 

 

You need to ensure that WSRM enforces the allocation of CPU capacity between users. What should you do?

 

A.      Enable Accounting.

B.      Change the Management type to Manage.

C.      Add Server1 to the Default computer group.

D.      Change the resource allocation policy to Equal_per_process.

 

Correct Answer: B

 

QUESTION 178

Your network contains two servers that run Windows Server 2008 R2. The servers are configured as shown in the following table.

 

 

The network contains 100 client computers that connect to Remote Desktop Services (RDS) on Server2. Server1 has 100 Remote Desktop Services Per Device client access licenses (RDS Per Device CALs) installed. You exchange 10 client computers for 10 new client computers. You need to ensure that the RDS Per Device CALs allocated to the old client computers can be immediately reallocated to the new client computers. What should you do?

 

A.      From the Remote Desktop Session Host Configuration console on Server2, modify the Licensing settings.

B.      From the Remote Desktop Licensing Manager tool on Server1, run the Manage RDS CALs wizard and click the Migrate action.

C.      From the Remote Desktop Licensing Manager tool on Server1, navigate to the Windows Server 2008 R2 – Installed RDS Per Device CALs node and run the Install Licenses wizard.

D.      From the Remote Desktop Licensing Manager tool on Server1, navigate to the Windows Server 2008 R2 – Installed RDS Per Device CALs node and click the Revoke RDS CAL action.

 

Correct Answer: D

 

 

QUESTION 179

Your network contains a Remote Desktop server. The server hosts 10 RemoteApp programs. You need to configure a digital signature for the RemoteApp programs. What should you modify?

 

A.      the Remote Desktop connection authorization policies (RD CAPs)

B.      the Remote Desktop resource authorization policies (RD RAPs)

C.      the RemoteApp and Desktop Connection properties

D.      the RemoteApp Deployment Settings

 

Correct Answer: D

 

 

QUESTION 180

Your network contains a server that has the Remote Desktop Session Host (RD Session Host) role service installed. You need to prevent administrators from logging other administrators off of the console session. What should you do?

 

A.      From the RDP-TCP properties of the RD Session Host server, modify the Client Settings.

B.      From the RDP-TCP properties of the RD Session Host server, modify the Sessions settings.

C.      From the Computer Configuration Group Policy settings, modify the Remote Desktop Session Host settings.

D.      From the User Configuration Group Policy settings, modify the Remote Desktop Connection Client settings.

 

Correct Answer: C

 

Instant Access to Download Testing Software & PDF File for Microsoft 70-649 Real Exam

Instant Access to Try Microsoft 70-649 Free Demo