2015 Latest released Microsoft Official 70-640 Practice Exam Question Free Download From Braindump2go Now! All New Updated 651 Questions And Answers are Real Questions from Microsoft Exam Center!
Vendor: Microsoft
Exam Code: 70-640
Exam Name: TS: Windows Server 2008 Active Directory, Configuring
Keywords: 70-640 Exam Dumps,70-640 Practice Tests,70-640 Practice Exams,70-640 Exam Questions,70-640 Dumps,70-640 Dumps PDF,Microsoft 70-640 Exam Dumps,70-640 Questions and Answers,TS: Windows Server 2008 Active Directory, Configuring
QUESTION 341
Your network contains an Active Directory domain named contoso.com.
Contoso.com contains a member server that runs Windows Server 2008 R2 Standard.
You need to create an enterprise subordinate certification authority (CA) that can issue certificates based on version 3 certificate templates.
You must achieve this goal by using the minimum amount of administrative effort.
What should you do first?
A. Run the certutil.exe – addenrollmentserver command.
B. Install the Active Directory Certificate Services (AD CS) role on the member server.
C. Upgrade the member server to Windows Server 2008 R2 Enterprise.
D. Run the certutil.exe – installdefaulttemplates command.
Answer: C
QUESTION 342
Your network contains a server named Server1.
The Active Directory Rights Management Services (AD RMS) server role is installed on Server1.
An administrator changes the password of the user account that is used by AD RMS.
You need to update AD RMS to use the new password.
Which console should you use?
A. Active Directory Rights Management Services
B. Active Directory Users and Computers
C. Local Users and Groups
D. Services
Answer: A
Explanation:
http://social.technet.microsoft.com/wiki/contents/articles/13034.ad-rms-how-to-change-the-rms-serviceaccount-password.aspx
AD RMS How To: Change the RMS Service Account Password
The Active Directory Rights Management Services management console provides a wizard to change or update the AD RMS service account. The most common use for this process is to update the service account password when it has been changed.
It is important to use this process to update or change the AD RMS service account.
This ensures the necessary components are updated properly.
QUESTION 343
Your company, Contoso, Ltd., has a main office and a branch office.
The offices are connected by a WAN link.
Contoso has an Active Directory forest that contains a single domain named ad.contoso.com.
The ad.contoso.com domain contains one domain controller named DC1 that is located in the main office.
DC1 is configured as a DNS server for the ad.contoso.com DNS zone.
This zone is configured as a standard primary zone.
You install a new domain controller named DC2 in the branch office.
You install DNS on DC2.
You need to ensure that the DNS service can update records and resolve DNS queries in the event that a WAN link fails.
What should you do?
A. Create a new secondary zone named ad.contoso.com on DC2.
B. Create a new stub zone named ad.contoso.com on DC2.
C. Configure the DNS server on DC2 to forward requests to DC1.
D. Convert the ad.contoso.com zone on DC1 to an Active Directory-integrated zone.
Answer: D
Explanation:
Three answers don’t make sense, leaving us with the one that works.
Create a new secondary zone named ad.contoso.com on DC2.
This would create a read-only zone, so it couldn’t be updated
Create a new stub zone named ad.contoso.com on DC2.
This stub zone would contain source information about authoritative name servers for its zone only, being DC1, but that one would be unavailable in the WAN link fails.
Configure the DNS server on DC2 to forward requests to DC1.
This doesn’t help if the WAN link fails and DC1 is unavailable.
QUESTION 344
Your network contains an enterprise certification authority (CA) that runs Windows Server 2008 R2 Enterprise.
You enable key archival on the CA.
The CA is configured to use custom certificate templates for Encrypted File System (EFS) certificates.
You need to archive the private key for all new EFS certificates.
Which snap-in should you use?
A. Active Directory Users and Computers
B. Authorization Manager
C. Group Policy Management
D. Enterprise PKI
E. Security Templates
F. TPM Management
G. Certificates
H. Certification Authority
I. Certificate Templates
Answer: I
Explanation:
http://technet.microsoft.com/en-us/library/cc753826.aspx
QUESTION 345
Your network contains an enterprise certification authority (CA) that runs Windows Server 2008 R2 Enterprise.
You need to ensure that all of the members of a group named Group1 can view the event log entries for Certificate Services.
Which snap-in should you use?
A. Certificate Templates
B. Certification Authority
C. Authorization Manager
D. Active Directory Users and Computers
E. TPM Management
F. Security Templates
G. Group Policy Management
H. Enterprise PKI
I. Certificates
Answer: G
QUESTION 346
Your network contains an enterprise certification authority (CA) that runs Windows Server 2008 R2 Enterprise.
You need to ensure that users can enroll for certificates that use the IPSEC (Offline request) certificate template
Which snap-in should you use?
A. Enterprise PKI
B. TPM Management
C. Certificates
D. Active Directory Users and Computers
E. Authorization Manager
F. Certification Authority
G. Group Policy Management
H. Security Templates
I. Certificate Templates
Answer: I
QUESTION 347
Your network contains an enterprise certification authority (CA) that runs Windows Server 2008 R2 Enterprise.
You have a custom certificate template named Template 1.
Template1 is published to the CA.
You need to ensure that all of the members of a group named Group1 can enroll for certificates that use Template1.
Which snap-in should you use?
A. Security Templates
B. Enterprise PKI
C. Certification Authority
D. Certificate Templates
E. Certificates
F. TPM Management
G. Authorization Manager
H. Group Policy Management
I. Active Directory Users and Computers
Answer: D
QUESTION 348
Your network contains an enterprise certification authority (CA) that runs Windows Server 2008 R2 Enterprise.
You need to approve a pending certificate request.
Which snap-in should you use?
A. Active Directory Users and Computers
B. Authorization Manager
C. Certification Authority
D. Group Policy Management
E. Certificate Templates
F. TPM Management
G. Certificates
H. Enterprise PKI
I. Security Templates
Answer: C
QUESTION 349
Your network contains an Active Directory domain.
The domain contains a domain controller named DC1 that runs windows Server 2008 R2 Service Pack 1 (SP1).
You need to implement a central store for domain policy templates.
What should you do? To answer, select the source content that should be copied to the destination folder in the answer area.
Answer:
QUESTION 350
Your network contains an Active Directory forest named contoso.com.
You plan to migrate all user accounts to a new forest named litwareinc.com.
The functional level of the contoso.com forest is Windows Server 2003.
Contoso.com contains four servers.
The servers are configured as shown in the following table.
The functional level of the litwareinc.com forest is Windows Server 2008.
Litwareinc.com contains four servers.
The servers are configured as shown in the following table.
You need to identify on which server in the litwareinc.com forest you must install Active Directory Migration Tool version 3.2 (ADMT v3.2).
Which server should you identify?
A. Litw_Srv4
B. Litw_Srv1
C. Litw_Srv2
D. Litw_Srv3
Answer: D
Explanation:
http://technet.microsoft.com/en-us/library/cc974370.aspx
For those who feel the overwhelming anxiety before their 70-640 exam,Braindump2go Latest updated 70-640 Exam Dumps will help you Pass 100% in a short time preparation! 70-640 Exam Dumps PDF & VCE Full Version Instant Download!
