Issuu on Google+

TestKing Microsoft 70-640 Exam Questions & Answers

70-640 TS: Windows Server 2008 Active Directory, Configuring Exam number/code: 70-640 Exam name: TS: Windows Server 2008 Active Directory, Configuring Questions & Answers: 96 Q&A Related Certifications: MCITP, MCTS

Hundreds of people each day pass their IT certification exams with Testking guaranteed certification resources and training kits. Use the Microsoft 70-640 questions and answers to practice for your next Microsoft certification exam. If you don't pass – you don't pay! Testking has the first and only 100% product satisfaction and exam passing guarantee. Advanced practice questions and answers help drive the information into your routine thinking and surpass 70-640 brain dumps in retention and skill building. Microsoft 70-640 exam answers and practice questions can be used at home or office, installable on up to two PCs, or print the questions and answers to take with you and train on-the-go! Microsoft 70-640 preparation tools are the perfect fit for any Microsoft certification candidate with 70-640 training materials for every level of entry. Exam Engine Features Control your IT training process by customizing your practice certification questions and answers. The fastest and best way to train. * * * * * *

Truly interactive practice tests Create and take notes on any question Retake tests until you're satisfied YOU select the areas of the exam to cover Filter questions for a new practice test experience each time Re-visit difficult questions


TestKing Microsoft 70-640 Exam Questions & Answers

Exam: 70-640 Certification Questions & Answers

Question 1: Jim is the systems administrator for a company that operates an AD DS network consisting of a single domain. He is configuring the properties of several GPOs, one of which is linked to the domain, and the others are linked to various OUs, including child OUs. At the domain level, Jim configures a Restricted Desktop GPO that removes the Network and Games folders from the Start menu. On the Scope tab for this policy in Group Policy Management Console (GPMC), he sets the Enforced option to Yes. Jim also configures another GPO that disables the removal of the Network folder, links it to the IT OU, and specifies Block Inheritance so that the IT staff will be able to use this folder. Later, a couple of IT staffers call to complain that they are unable to reach the Network folder. What is the most likely reason that IT staffers are unable to reach the Network folder? A. Block Inheritance takes precedence over Enforced. B. Enforced takes precedence over Block Inheritance. C. When both these options are set, they cancel each other out. D. The policies that Jim configured at the OU level were ignored because these options can be set only at the site or domain level. Answer: B

Question 2: You work as the network administrator at TestKing.com. The TestKing.com network has a domain named testking.com. All servers on the TestKing.com network run Windows Server 2008. The TestKing.com network has a server named TESTKING-SR02 that functions as standalone Certificate Authority (CA). You want to track any modifications made to the configuration and security settings of the TESTKING-SR02. What action should you take? A. You should configure auditing in the Certification Services console. B. You should add TESTKING-SR02 to the TKCertificates group. C. You should configured the Audit object Access setting on TESTKING-SR02. D. You should join TESTKING-SR02 to the testking.com domain. E. You should enable the Authority Information Access (AIA) extension on TESTKINGSR02. Answer: C

Question 3: You work as the network administrator at TestKing.com. The TestKing.com network has a domain named testking.com. All servers on the TestKing.com network run Windows Server 2008. The TestKing.com network has two servers named TESTKING-SR01 and TESTKING-SR02. TESTKING-SR01 - Enterprise Root certificate authority (CA). TESTKING-SR02 - Hosts the Online Responder role. What step you can perform to make sure that TESTKING-SR02 is issuing the certificate


TestKing Microsoft 70-640 Exam Questions & Answers revocation lists (CRL). A. You should enable the Dual Certificate List extension on TESTKING-SR02. B. You should ensure that TESTKING-SR02 is a member of the CertPublishers group. C. You should import the enterprise root CA certificate and the OCSP Response Signing certificate. D. You should enable the Authority Information Access (AIA) extension on TESTKINGSR02. E. You should run the CERTSRV command on TESTKING-SR02. Answer: C

Question 4: You work as the network administrator at TestKing.com. The TestKing.com network has a domain named testking.com. All servers on the TestKing.com network run Windows Server 2008 and all client computers run Windows Vista. During the course of the day a TestKing.com user named Rory Allen complains that he receives an error message stating that his account has expired when he attempts to authenticate to the testking.com domain from his client computer. What action should you consider to have Rory Allen log on to the testking.com domain from his client computer? A. You should consider reducing the account lockout duration in the default domain policy. B. You should consider resetting Rory Allen's user account. C. You should consider setting Rory Allen's user account to never expire. D. You should consider resetting the computer account for Rory Allen's client computer. Answer: C

Question 5: You work as the network administrator at TestKing.com. The TestKing.com network has a domain named testking.com. All servers on the TestKing.com network run Windows Server 2008. The TestKing.com network has two domain controllers TESTKING-DC01 and TESTKINGDC02. TESTKING-DC01 suffers a catastrophic failure but it is causing problems because it was configured to have Schema Master Operations role. You log on to the testking.com domain as a domain administrator but your attempts to transfer the Schema Master Operations role to TESTKING-DC02 are unsuccessful. What action should you take to transfer the Schema Master Operations role to TESTKINGDC02? A. Your best option would be to have the dcpromo /adv command executed on TESTKINGDC02. B. Your best option would be to have the Schema Master role seized to TESTKING-DC02. C. Your best option would be to have Schmmgmt.dll registered on TESTKING-DC02. D. Your best option would be to add your user account to the Schema Administrators group. Answer: B Explanation: To ensure that TESTKING-DC02 holds the Schema Master role you need to seize the Schema Master role on TESTKING-DC02. Seizing the schema master role is a drastic step that should be considered only if the current operations master will never be available again. So to transfer the schema master operations role, you have to seize it on TESTKING-DC02.


TestKing Microsoft 70-640 Exam Questions & Answers Reference: http://technet2.microsoft.com/windowsserver/en/library/d4301a14-dd18-4b3ca3cc-ec9a773f7ffb1033.mspx?mfr=true

Question 6: You work as a Network Administrator for Perfect Solutions Inc. The company has its headquarters in Los Angeles. The branch offices of the company are located in Denver, San Jose, and San Diego. All locations are connected through 128Kbps leased lines. You are configuring the network of the company. The company wants to configure a Windows 2008 Active Directory-based network. You are supposed to provide a design for the network. The management of the company does not want unnecessary traffic over the WAN connection. Which of the following strategies will you implement to fulfill the requirements of the company? A. Create a separate site for each location. Move the domain controllers to their respective sites. B. Create a separate site for each location. Keep all domain controllers at the headquarters site. C. Create a site for the headquarters and move all domain controllers to this site. D. Create a single site that covers all locations. Keep all domain controllers at the headquarters. Answer: A

Question 7: You are the network administrator for a company that operates an AD DS network consisting of a single domain. Servers run Windows Server 2008, and client computers run Windows Vista Enterprise. The domain contains OUs that are structured according to the departmental structure of the company, and all OUs have multiple GPOs linked to them. As a result of departmental reorganization, the Design OU needs to be moved under the Engineering OU. Alfredo needs to determine which objects in the Design OU are adversely affected by GPOs linked to the Engineering OU. What should Alfredo do to achieve this goal without disruption to users? A. Use the Group Policy Modeling Wizard for the Design OU. Choose the Engineering OU to simulate policy settings. B. Use the Group Policy Modeling Wizard for the Engineering OU. Choose the Design OU to simulate policy settings. C. Use the Group Policy Results Wizard for the Design OU. Review the policy results for users in the OU. D. Use the Group Policy Results Wizard for the Engineering OU. Review the policy results for users in the OU. Answer: A

Question 8: You work as an enterprise administrator at TestKing.com. The TestKing.com network has a domain named testking.com. All servers on the TestKing.com network run Windows Server 2008 and all client computers run Windows Vista Enterprise Edition. All client computers are located in an Organizational Unit named ClientPCs.


TestKing Microsoft 70-640 Exam Questions & Answers TestKing.com has acquired a new third-party application that you need to install on the client computers. Before you can install the application you need prepare the client computers by applying a file named tkApp.adm to them. The tkApp.adm file makes changes to the registry on the client computers. What action should you take to apply the tkApp.adm file? A. Your best option would be to create a transformation package that applies the tkApp.adm file and assign the package to the client computers. B. Your best option would be to copy the tkApp.adm file to a network share and write a Microsoft Windows PowerShell script that applies the file to the client computers. C. Your best option would be to write that the Microsoft Windows PowerShell script that copies the tkApp.adm file to the client computers. D. Your best option would be to create a Group Policy Object (GPO) that imports the tkApp.adm and link the GPO to the ClientPCs OU. Answer: D

Question 9: You work as a Network Administrator for Net World International. The company has an Active Directory-based Windows single forest network. Organizational units (OUs) are configured separately for each department. All the department's users and computers are placed in their respective OUs. A domain-level OU is also configured on the network to implement domain-wide policies. Rick, a Sales Manager, complains that he is unable to access an application. You suspect that a group policy is preventing Rick from accessing the application. You want to find out the effective group policies on Rick. Which command-line tool will you use to accomplish the task? A. GPUPDATE B. GETRESULT C. GPRESULT D. Resultant Set of Policy Wizard Answer: C

Question 10: You administer the network for a catering company called Thoughtful Food. Your firm operates a single domain AD DS network that includes three Windows Server 2008 computers and a mix of Windows XP Professional and Windows Vista Business clients. Management has notified you that a competitor known as Engorge & Devour has taken a keen interest in your pumpkin soup recipe. Two employees of Thoughtful Food have recently resigned and taken up positions with Engorge & Devour, and management is afraid that they will attempt to steal proprietary formulas and recipes belonging to Thoughtful Food by breaking into your network. You are tasked with improving logon security on Thoughtful Food's network by limiting the number of failed logon attempts for all users on the network and by establishing an audit policy for tracking failed logon attempts. Which of the following tasks should you undertake to complete this task? (Each correct answer represents part of the solution. Choose two answers.) A. Edit the Default Domain Policy GPO to enable auditing and account lockout. B. Monitor the security log for failed account management attempts on each domain controller. C. Monitor the security log for failed logon attempts on each domain controller. D. Configure a local security policy on each computer in the domain.


TestKing Microsoft 70-640 Exam Questions & Answers Answer: A,C

Question 11: You work as the network administrator at TestKing.com. The TestKing.com network has a domain named testking.com. All servers on the TestKing.com network run Windows Server 2003. You have just performed the migration of domain controllers from Windows 2003 to Windows 2008. Which of following commands can be used to configure DFS Replication (DFS-R) to replicate the Sysvol share? A. This can be accomplished by running the netdom /dfs -r command. B. This can be accomplished by raising the domain functional level to Windows Server 2008. C. This can be accomplished by running dfsutil /share:sysvol command. D. This can be accomplished by running dfsutil /addstdroot command. Answer: B

Question 12: You work as the network administrator at TestKing.com. The TestKing.com network has a domain named testking.com. All servers on the TestKing.com network run Windows Server 2008. You are responsible for managing two servers TESTKING-SR01 and TESTKING-SR02. They are setup with the following configuration. TESTKING-SR01 running Enterprise Root certificate authority (CA) TESTKING-SR02 running Online Responder role service Which of the steps must you perform for configuring the Online Responder to be supported on TESTKING-SR01? A. You should enable the Dual Certificate List extension on TESTKING-SR01. B. You should ensure that TESTKING-SR01 is a member of the CertPublishers group. C. You should import the OCSP Response Signing certificate to TESTKING-SR01. D. You should enable the Authority Information Access (AIA) extension on TESTKINGSR01. E. You should run the CERTSRV command on TESTKING-SR01. Answer: D Explanation: In order to configure the online responder role service on TESTKING-SR01 you need to configure the AIA extension. The authority information access extension will indicate how to access CA information and services for the issuer of the certificate in which the extension appears. Information and services may include on-line validation services and CA policy data. This extension may be included in subject or CA certificates, and it MUST be noncritical

Question 13: You work as a Network Administrator for Tech Perfect Inc. The company has a Windows 2008 Active Directory-based single domain network. The company has two offices, one in Atlanta and the other in Denver. The company's headquarters is located in Atlanta. Both locations have been configured as separate sites. The headquarters contains 500 users,


TestKing Microsoft 70-640 Exam Questions & Answers whereas the branch office in Denver contains fifty users. Users in the company use an application named REPORT that requires directory access. The management of the company wants to raise the level of security data. The new company policy dictates that Active Directory data must be secure. You know that the physical security in the branch office can be compromised. You need to secure the domain controller in the branch office. Which of the following steps will you take to accomplish the task? A. Configure universal group membership caching at the branch office. Remove the domain controller. B. Install a global catalog server at the branch office. Remove the domain controller. C. Install an RODC at the branch office. Remove the domain controller. D. Place the domain controller at the branch in a strong room secured with locks and keys. Answer: C

Question 14: You work as the enterprise administrator at TestKing.com. The TestKing.com network has a domain named testking.com. The TestKing.com network has three domain controllers named TESTKING-DC01, TESTKING-DC02 and TESTKING-DC03 that run Windows Server 2003. TestKing.com purchases a new Windows Server 2008 computer named TESTKING-SR04. What is the first step you should take to install TESTKING-SR04 as a domain controller on the TestKing.com network? A. You should consider running the dconfig command on TESTKING-SR04. B. You should consider running the adprep /forestprep command on TESTKING-DC01. C. You should consider raising the domain functional level to Windows Server 2008. D. You should consider running the adprep /domainprep command on TESTKING-DC01. E. You should consider running the dcpromo /remove command on TESTKING-DB01, TESTKING-DB02 and TESTKING-DB03. Answer: B

Question 15: You are the network administrator of your company. You install Windows Server 2008 on all servers on the network. All client computers are configured to run Windows Vista. You want to be able to use Advanced Encryption Standard (AES) with Kerberos for encryption of Ticket Granting Tickets (TGTs), service tickets, and session keys. What is the minimum domain functional level that is required to support AES encryption with Kerberos? A. Windows 2000 Server mixed B. Windows 2000 Server native C. Windows Server 2003 D. Windows Server 2008 Answer: D

Related 70-640 Exams: 70-643

70-642

70-647

70-646


TestKing Microsoft 70-640 Exam Questions & Answers

Popular Certification Exams: HP0-S18 JN0-331 642-564

000-094 HP0-634 000-894

HP2-T17 HP0-205 510-015

642-811 642-382 9A0-310

HP0-240 642-642 1z0-050

F8CD

MSF

CCENT

McData

SCP

Computer Associates

Hot Certifications: Advanced Technical Expert

ISM APP

Popular Certification Providers: Hitachi

Fortinet


70-640