Braindump2go Updates Microsoft 70-640 Exam Dumps Questions, adds some new changed questions from Microsoft Official Exam Center. Want to know 2015 70-640 Exam test points? Download the following free Braindump2go Latest Exam Questions Today!
Vendor: Microsoft
Exam Code: 70-640
Exam Name: TS: Windows Server 2008 Active Directory, Configuring
Keywords: 70-640 Exam Dumps,70-640 Practice Tests,70-640 Practice Exams,70-640 Exam Questions,70-640 Dumps,70-640 Dumps PDF,70-640 VCE,70-640 Braindump,70-640 TS: Windows Server 2008 Active Directory, Configuring
QUESTION 581
Your company has two Active Directory sites named New York and Los Angeles.
When you disable IPv4 on a computer in the Los Angeles site, the computer authenticates by using a domain controller in the New York site.
You need to ensure that IPv6-only computers in the Los Angeles site authenticate to domain controllers in the same site.
What should you do?
A. Install an Intra-Site Automatic Tunnel Addressing Protocol (ISATAP) router in the Los
Angeles site.
B. Create Active Directory Domain Services connection objects between the two sites.
C. Create Active Directory subnet objects for the Los Angeles site.
D. Configure the NTDS Site Settings object for the Los Angeles site.
Answer: C
QUESTION 582
A corporate network contains a Windows Server 2008 R2 Active Directory forest.
You need to add a user principal name (UPN) suffix to the forest.
Which tool should you use?
A. Active Directory module for Windows PowerShell
B. Active Directory Administrative Center console
C. Active Directory Sites and Services console
D. Active Directory Users and Computers console
Answer: B
QUESTION 583
Hotspot Question
Your network contains two DNS servers named Server1 and Server2.
Server1 hosts a primary zone named contoso.com.
Server2 hosts a secondary copy of the contoso.com zone.
You need to configure how often Server2 will check for updates for the contoso.com zone.
Which tab should you use? To answer, select the appropriate tab in the answer area.
Answer:
QUESTION 584
Your network contains an Active Directory domain named contoso.com.
The domain has one Active Directory site.
The domain contains an organizational unit (OU) named 0U1.
OU1 contains user accounts for 100 users and their managers.
You apply a Group Policy object (GPO) named GPO1 to OU1.
GPO1 restricts several desktop settings.
The managers request that the desktop settings not be applied to them.
You need to prevent the desktop settings in GPO1 from being applied to the managers.
All other users in OU1 must have GPO1 applied to them.
What should you do?
A. Link GPO1 to the site and remove the link for GPO1 from OU1.
B. Move the managers to a child OU of OU1 and block inheritance on the child OU.
C. Configure the permissions on OU1.
D. Disable the computer configurations of GPO1.
Answer: B
QUESTION 585
Hotspot Question
Your network contains an Active Directory domain named contoso.com.
All users have laptops that run Windows 7.
The laptops are joined to the domain.
Windows Firewall is enabled on all the laptops.
You need to ensure that when the users connect to unidentified networks, Windows Firewall uses the Public Profile.
Which node in Group Policy Management Editor should you use? To answer, select the appropriate node in the answer area.
Answer:
QUESTION 586
Drag and Drop Question
Your network contains an Active Directory forest named contoso.com.
All client computers used by the sales department are in an organizational unit (OU) named Sales Computers.
All user accounts for the sales department are in an OU named Sales Users.
You purchase a new application.
You need to ensure that every user in the domain who logs on to a sales department computer can use the application.
The application must only be available from the sales department computers.
What should you do? To answer, move the appropriate actions from the Possible Actions list to the Necessary Actions area and arrange them in the correct order.
Answer:
QUESTION 587
Your network contains an Active Directory domain.
You need to activate the Active Directory Recycle Bin in the domain.
Which tool should you use?
A. Dsamain
B. Add-PSSnapin
C. Enable-ADOptionalFeature
D. Add-WindowsFeature
Answer: C
Explanation:
You can enable Active Directory Recycle Bin by using the following methods:
– Enable-ADOptionalFeature Active Directory module cmdlet (This is the recommended method.)
– Ldp.exe
Note:
Before you can make the recycle bin available, you must first update Active Directory schema with the required attributes. When you do this, the schema is updated, and then every object in the forest is updated with the recycle bin attributes as well. This process is irreversible once it is started.
QUESTION 588
Your network contains an Active Directory forest named contoso.com.
The domain contains two domain controllers named DC1 and DC2 that run Windows Server 2008 R2.
DC2 holds the PDC emulator role.
The power supply on DC2 fails.
You seize the PDC emulator role to DC1.
You replace the power supply on DC2.
You need to bring DC2 back online as the PDC emulator as soon as possible.
The solution must minimize the disruption of services for users.
What should you do?
A. Connect DC2 to the network.
Turn on DC2, and then transfer the PDC emulator role.
B. Reinstall Windows Server 2008 on DC2 and promote DC2 to a domain controller.
Transfer the PDC emulator role.
C. Reinstall Windows Server 2008 on DC2 and promote DC2 to a domain controller.
Seize the PDC emulator role.
D. Disconnect DC2 from the network.
Turn on DC2, and then seize the PDC emulator role.
Connect DC2 to the network.
Answer: A
QUESTION 589
Drag and Drop Question
Your network contains an Active Directory domain named contoso.com.
You need to create a Group Policy object (GPO) that contains all of the settings included in the Windows Server 2008 R2 Security Baseline.
The solution must minimize administrative effort.
Which three actions should you perform in sequence? (To answer, move the appropriate three actions from the list of actions to the answer area and arrange them in the correct order.)
Answer:
QUESTION 590
Your network contains an Active Directory forest named contoso.com.
You need to identify the Password Setting object (PSO) applied to a user named User1.
Which cmdlet should you run?
A. Get-AdFineGrainedPasswordPolicy
B. Get-AdFineGrainedPasswordPolicySubject
C. Get- AdUserResultantPasswordPolicy
D. Get-AdDefaultDomainPasswordPolicy
Answer: C
100% Full Money Back Guarantee Promised By Braindump2go to All 70-640 Exam Candiates: Braindump2go is confident that our NEW UPDATED 70-640 Exam Questions and Answers are changed with Microsoft Official Exam Center, If you cannot PASS 70-640 Exam, nevermind, we will return your full money back! Visit Braindump2go exam dumps collection website now and download 70-640 Exam Dumps Instantly Today!
