Microsoft Windows Server 2008 Active Directory. Configuring - 070-640 Exam Practice Test
A corporate network includes a single Active Directory Domain Services (AD DS) domain. All regular user accounts reside in an organizational unit (OU) named Employees. All administrator accounts reside in an OU named Admins.
You need to ensure that any time an administrator modifies an employee's name in AD DS, the change is audited.
What should you do first?
You need to ensure that any time an administrator modifies an employee's name in AD DS, the change is audited.
What should you do first?
Correct Answer: D
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).
Your network contains an Active Directory forest named contoso.com. The forest contains three domains named contoso.com, childl.contoso.com, and child2.contoso.com. The childl.contoso.com domain contains five domain controllers. The domain controllers are configured as shown in the following table.
You plan to decommission the child1.contoso.com domain.
You need to identify which two FSMO roles can be moved from childl.contoso.com to child2.contoso.com.
Which two FSMO roles should you identify? (Each correct answer presents part of the solution. Choose two.)
You plan to decommission the child1.contoso.com domain.
You need to identify which two FSMO roles can be moved from childl.contoso.com to child2.contoso.com.
Which two FSMO roles should you identify? (Each correct answer presents part of the solution. Choose two.)
Correct Answer: A,D
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).
You are the network administrator for an organization that has two locations, New York and London.
Each location has multiple domains but all domains fall under the same tree, Stellacon.com.
Users in the NY.us.stellacon.com domain need to access resources in the London.uk.stellacon.comdomain.
You need to reduce the amount of time it takes for authentication when users from NY.us.stellacon.com access resources in London.uk.stellacon.com.
What can you do?
Each location has multiple domains but all domains fall under the same tree, Stellacon.com.
Users in the NY.us.stellacon.com domain need to access resources in the London.uk.stellacon.comdomain.
You need to reduce the amount of time it takes for authentication when users from NY.us.stellacon.com access resources in London.uk.stellacon.com.
What can you do?
Correct Answer: A
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).
Your network contains an Active Directory-integrated zone. All DNS servers that host the
zone are domain controllers.
You add multiple DNS records to the zone.
You need to ensure that the records are replicated to all DNS servers.
Which tool should you use?
zone are domain controllers.
You add multiple DNS records to the zone.
You need to ensure that the records are replicated to all DNS servers.
Which tool should you use?
Correct Answer: D
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).
Your network contains an Active Directory domain. All domain controllers run Windows Server 2008 R2. Client computers run either Windows 7 or Windows Vista Service Pack 2 (SP2).
You need to audit user access to the administrative shares on the client computers.
What should you do?
You need to audit user access to the administrative shares on the client computers.
What should you do?
Correct Answer: C
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).
The corporate network of Company consists of a Windows Server 2008 single Active Directory domain. The domain has two servers named Company 1 and Company 2.
To ensure central monitoring of events you decided to collect all the events on one server, to collect events from Company, and transfer them to Company 1.
You configure the required event subscriptions.
You selected the Normal option for the Event delivery optimization setting by using the HTTP protocol.
However, you discovered that none of the subscriptions work.
Which of the following actions would you perform to configure the event collection and event forwarding on the two servers? (Select three. Each answer is a part of the complete solution).
To ensure central monitoring of events you decided to collect all the events on one server, to collect events from Company, and transfer them to Company 1.
You configure the required event subscriptions.
You selected the Normal option for the Event delivery optimization setting by using the HTTP protocol.
However, you discovered that none of the subscriptions work.
Which of the following actions would you perform to configure the event collection and event forwarding on the two servers? (Select three. Each answer is a part of the complete solution).
Correct Answer: A,B,E
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).
ABC.com has a network that consists of a single Active Directory domain. A technician has accidently deleted an Organizational unit (OU) on the domain controller. As an administrator of ABC.com, you are in process of restoring the OU.
You need to execute a non-authoritative restore before an authoritative restore of the OU.
Which backup should you use to perform non- authoritative restore of Active Directory Domain Services (AD DS) without disturbing other data stored on domain controller?
You need to execute a non-authoritative restore before an authoritative restore of the OU.
Which backup should you use to perform non- authoritative restore of Active Directory Domain Services (AD DS) without disturbing other data stored on domain controller?
Correct Answer: D
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).
Your network contains an Active Directory domain named contoso.com.
You have an organizational unit (OU) named Sales and an OU named Engineering.
Users in the Sates OU frequently log on to client computers in the Engineering OU. You need to meet the following requirements:
- All of the user settings in the Group Policy objects (GPOs) linked to both the Sales OU and the Engineering OU must be applied to sales users when they log on to client computers in the Engineering OU.
- Only the policy settings in the GPOs linked to the Sales OU must be applied to sales users when they log on to client computers in the Sales OU. - Policy settings in the GPOs linked to the Sales OU must not be applied to users in the Engineering OU.
What should you do?
You have an organizational unit (OU) named Sales and an OU named Engineering.
Users in the Sates OU frequently log on to client computers in the Engineering OU. You need to meet the following requirements:
- All of the user settings in the Group Policy objects (GPOs) linked to both the Sales OU and the Engineering OU must be applied to sales users when they log on to client computers in the Engineering OU.
- Only the policy settings in the GPOs linked to the Sales OU must be applied to sales users when they log on to client computers in the Sales OU. - Policy settings in the GPOs linked to the Sales OU must not be applied to users in the Engineering OU.
What should you do?
Correct Answer: D
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).
Your company has a main office and a branch office that are configured as a single Active Directory forest. The functional level of the Active Directory forest is Windows Server 2003. There are four Windows Server 2003 domain controllers in the main office.
You need to ensure that you are able to deploy a read-only domain controller (RODC) at the branch office.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
You need to ensure that you are able to deploy a read-only domain controller (RODC) at the branch office.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
Correct Answer: A,C
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).
HOTSPOT
Your network contains an Active Directory domain that has the password policy shown in the following exhibit. (Click the Exhibit button.)
To answer, complete each statement according to the information presented in the exhibit.
Your network contains an Active Directory domain that has the password policy shown in the following exhibit. (Click the Exhibit button.)
To answer, complete each statement according to the information presented in the exhibit.
Correct Answer:
The Company has a Windows 2008 domain controller server. This server is routinely backed up over the network from a dedicated backup server that is running Windows 2003 OS.
You need to prepare the domain controller for disaster recovery apart from the routine backup procedures.
You are unable to launch the backup utility while attempting to back up the system state data for the data controller.
You need to backup system state data from the Windows Server 2008 domain controller server.
What should you do?
You need to prepare the domain controller for disaster recovery apart from the routine backup procedures.
You are unable to launch the backup utility while attempting to back up the system state data for the data controller.
You need to backup system state data from the Windows Server 2008 domain controller server.
What should you do?
Correct Answer: C
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).
HOTSPOT
Your network contains an Active Directory forest named contoso.com. The forest contains two sites named Seattle and Montreal. The Seattle site contains two domain controllers. The domain controllers are configured as shown in the following table.
The Montreal site contains a domain controller named DC3. DC3 is the only global catalog server in the forest.
You need to configure DC2 as a global catalog server.
Which object's properties should you modify? To answer, select the appropriate object in the answer area.
Your network contains an Active Directory forest named contoso.com. The forest contains two sites named Seattle and Montreal. The Seattle site contains two domain controllers. The domain controllers are configured as shown in the following table.
The Montreal site contains a domain controller named DC3. DC3 is the only global catalog server in the forest.
You need to configure DC2 as a global catalog server.
Which object's properties should you modify? To answer, select the appropriate object in the answer area.
Correct Answer:
Your network contains a single Active Directory domain. The functional level of the forest is Windows Server 2008. The functional level of the domain is Windows Server 2008 R2. All DNS servers run Windows Server 2008. All domain controllers run Windows Server 2008 R2.
You need to ensure that you can enable the Active Directory Recycle Bin.
What should you do?
You need to ensure that you can enable the Active Directory Recycle Bin.
What should you do?
Correct Answer: A
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).
Your network contains an Active Directory forest. All client computers run Windows 7.
The network contains a high-volume enterprise certification authority (CA).
You need to minimize the amount of network bandwidth required to validate a certificate.
What should you do?
The network contains a high-volume enterprise certification authority (CA).
You need to minimize the amount of network bandwidth required to validate a certificate.
What should you do?
Correct Answer: C
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).
Your network contains an Active Directory forest. All domain controllers run Windows
Server 2008 Standard.
The functional level of the domain is Windows Server 2003.
You have a certification authority (CA).
The relevant servers in the domain are configured as shown below:
You need to ensure that you can install the Active Directory Certificate Services (AD CS) Certificate Enrollment Web Service on the network.
What should you do?
Server 2008 Standard.
The functional level of the domain is Windows Server 2003.
You have a certification authority (CA).
The relevant servers in the domain are configured as shown below:
You need to ensure that you can install the Active Directory Certificate Services (AD CS) Certificate Enrollment Web Service on the network.
What should you do?
Correct Answer: A
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).