Exampdf is proceeding HP exams promotion activity. During June. 24 to July. 15 you can enjoy 20% discount on all latest HP exams. Just input the coupon "HP" to enjoy this discount. At Exampdf Bundles page you can get additional big sale. Microsoft certifications contain: MCP, MTA, MCSE, MCDST, MCSA, MCSD, and so on. Hot Microsoft exams at Exampdf: 74-343 74-344 70-331 70-332
The safer , easier way to help you pass any IT exams.
Exam
: 70-640
Title
: Windows Server 2008 Active Directory. Configuring
Version : DEMO
1/5
The safer , easier way to help you pass any IT exams.
1. Your network contains an Active Directory domain named contoso.com.Contoso.com contains a domain controller named DC1 and a read-only domain controller (RODC) named RODC1. You need to view the most recent user accounts authenticated by RODC1. What should you do first? A.From Active Directory Sites and Services, right-click the Connection object for DC1, and then click Replicate Now. B.From Active Directory Sites and Services, right-click the Connection object for DC2, and then click Replicate Now. C.From Active Directory Users and Computers, right-click contoso.com, click Change DomainController, and then connect to DC1. D.From Active Directory Users and Computers, right-click contoso.com, click Change Domain Controller, and then connect to RODC1. Answer: C 2.Your network contains an Active Directory domain. The domain contains two le servers. The le servers are con gured as shown in the following table.
You create a Group Policy object (GPO) named GPO1 and you link GPO1 to OU1. You con gure the advanced audit policy. You discover that the settings are not applied to Server1. The settings are applied to Server2. You need to ensure that access to the le shares on Server1 is audited. What should you do? A. From Active Directory Users and Computers, modify the permissions of the computer account for Server1. B. From GPO1, configure the Security Options. C. From Active Directory Users and Computers, add Server1 to the Event Log Readers group. D. On Server1, run seceditexe and specify the /configure parameter. E. On Server1, run auditpol.exe and specify the /set parameter. Answer: E 3. Your company has four offices. The network contains a single Active Directory domain. Each office has a domain controller.Each office has an organizational unit (OU) that contains the user accounts for the users in that office. In each office, support technicians perform basic troubleshooting for the users in their respective office. You need to ensure that the support technicians can reset the passwords for the user accounts in their respective office only.The solution must prevent the technicians from creating user accounts. What should you do? A.For each OU, run the Delegation of Control Wizard. B.For the domain, run the Delegation of Control Wizard.
2/5
The safer , easier way to help you pass any IT exams.
C.For each office, create an Active Directory group, and then modify the security settings for each group. D.For each office, create an Active Directory group, and then modify the controlAccessRights attribute for each group. Answer: A 4. Your network contains an Active Directory domain named contoso.com.All domain controllers and member servers run Windows Server 2008.All client computers run Windows 7. From a client computer, you create an audit policy by using the Advanced Audit Policy Configuration settings in the Default Domain Policy Group Policy object (GPO). You discover that the audit policy is not applied to the member servers.The audit policy is applied to the client computers. You need to ensure that the audit policy is applied to all member servers and all client computers. What should you do? A.Add a WMI filter to the Default Domain Policy GPO. B.Modify the security settings of the Default Domain Policy GPO. C.Configure a startup script that runs auditpol.exe on the member servers. D.Configure a startup script that runs auditpol.exe on the domain controllers. Answer: C 5. Your network contains an Active Directory domain named contoso.com. You need to identify whether the Active Directory Recycle Bin is enabled. What should you do? A.From Ldp, search for the LostAndFound container. B.From Ldp, search for the Reanimate-Tombstones object. C.From Windows PowerShell, run the Get-ADObject cmdlet. D.From Windows PowerShell, run the Get-ADOptionalFeature cmdlet. Answer: D 6. Your network contains an Active Directory domain controller named DC1.DC1 runs Windows Server 2008 R2. You need to defragment the Active Directory database on DC1.The solution must minimize downtime on DC1. What should you do first? A.At the command prompt, run net stop ntds. B.At the command prompt, run net stop netlogon. C.Restart DC1 in Safe Mode. D.Restart DC1 in Directory Services Restore Mode (DSRM). Answer: A 7.Your company has a branch office that is configured as a separate Active Directory site and has an Active Directory domain controller. The Active Directory site requires a local Global Catalog server to support a new application. You need to configure the domain controller as a Global Catalog server. Which tool should you use?
3/5
The safer , easier way to help you pass any IT exams.
A.The Dcpromo.exe utility B.The Server Manager console C.The Computer Management console D.The Active Directory Sites and Services console E.The Active Directory Domains and Trusts console Answer: D 8.Your company has an Active Directory domain.The company has two domain controllers named DC1 and DC2.DC1 holds the schema master role. DC1 fails.You log on to Active Directory by using the administrator account.You are not able to transfer the schema master role. You need to ensure that DC2 holds the schema master role. What should you do? A.Register the Schmmgmt.dll.Start the Active Directory Schema snap-in. B.Configure DC2 as a bridgehead server. C.On DC2, seize the schema master role. D.Log off and log on again to Active Directory by using an account that is a member of the Schema Admins group.Start the Active Directory Schema snap-in. Answer: C 9.You are decommissioning domain controllers that hold all forest-wide operations master roles. You need to transfer all forest-wide operations master roles to another domain controller. Which two roles should you transfer? (Each correct answer presents part of the solution.Choose two.) A.RID master B.PDC emulator C.Schema master D.Infrastructure master E.Domain naming master Answer: CE 10.You might need to use the scroll bar to view the entire contents of the panes in the work area. You can use the splitter bars to resize the panes. A server named DC1 has the Active Directory Domain Services (AD?DS) role and the Active Directory Lightweight Directory Services (AD?LDS) role installed. An AD?LDS instance named LDS1 stores its data on the C: drive. You need to relocate the LDS1 instance to the D: drive. Which three actions should you perform in sequence? (To answer, move the three appropriate actions from the list of actions to the answer area and arrange them in the correct order.) List of Actions A.Run the net stop Active Directory Domain Services command. B.Run the net stop LDS1 command. C.Use the Ntdsutil tool to move the database files. D.Run the xcopy command to move the database files. E.Run the net start LDS1 command.
4/5
The safer , easier way to help you pass any IT exams.
F.Run the net start Active Directory Domain Services command. G.Use the Windows Backup tool to back up and restore the LDS1 instance to the D: drive. Answer.B BEFORE C AND C BEFORE E AND ONLY B, C, E
5/5