70-640 TS Braindump ExamSoon 70-640 Exams Microsoft TS: Windows Server 2008 Active Directory, Configuring O rder : 70-640 Exam Practice Exam: 70-640 Exam Number/Code: 70-640 Exam Name: TS: Windows Server 2008 Active Directory, Configuring Questions and Answers: 323 Q&As Free 70-640 Braindumps Exam : Microsoft 70-640 Title : TS: Windows Server 2008 Active Directory, Configuring 1. You work as a technology specialist in an international company named Wiikigo. Your major job is to configure Windows Server 2008 Active Directory. And you are experienced in configuring the Active Directory infrastructure and maintaining Active Directory objects. There is a head office and a branch office in your company. A single-domain Active Directory forest is contained by your company. Two domain controllers named DC01 and DC02 that run Windows Server 2008 are contained by the head office. And a Windows Server 2008 read-only domain controller (RODC) named DC03 is contained by the branch office. The DNS Server server role is held by all domain controllers which are configured as Active Directory-integrated zones. Only secure updates are permitted by the DNS zones. You should enable dynamic DNS updates on DC03. Which action should be performed to achieve the goal? A. To achieve the goal, a custom application directory partition should be created on DC01. and then, the partition should be configured to store Active Directory-integrated zones. B. To achieve the goal, the Ntdsutil.exe /DS Behavior commands should be run on DC03. C. To achieve the goal, the Dnscmd.exe /ZoneResetType command should be run on DC03. D. To achieve the goal, Active Directory Domain Services on DC03 should be reinstalled as a writable domain controller. Answer: D 2. You work as a technology specialist in an international company named Wiikigo. Your major job is to configure Windows Server 2008 Active Directory. And you are experienced in configuring the Active Directory infrastructure and maintaining Active Directory objects. Now you receive an order from the company management, you are asked to make sure that users who enter three successive invalid passwords within 5 minutes are locked out for 5 minutes. So what should you do? (Choose more than one) A. The Enforce password history setting should be set to 3 passwords remembered. B. The Account lockout duration setting should be set to 5 minutes. C. The Minimum password age setting should be set to one day. D. The Maximum password age setting should be set to one day. E. The Reset account lockout counter after setting should be set to 5 minutes. F. The Account lockout threshold setting should be set to 3 invalid logon attempts. Answer: BEF 3. You work as a technology specialist in an international company named Wiikigo. Your major job is to configure Windows Server 2008 Active Directory. And you are experienced in configuring the Active Directory infrastructure and maintaining Active Directory objects. There are two domain controllers named DC01 and DC02 in your company. All domain and forest operations master roles are hosted by DC01. A problem occurred that DC01 fails. Since you are the technical support, you are required to reinstall the operating system to rebuild DC01. In addition, you are required to have all operations master roles rollbacked to their original state. A metadate cleanup is performed and all references of DC01 are removed. Which action should be performed to achieve the goal? (Choose three from the options below, and then put them in a correct order) 1 Operations master roles should be transferred from DC01 to DC02. 2 Operations master roles should be transferred from DC02 to DC01. 3 Operations master roles should be seized from DC01 to DC02. 4 Operations master roles should be seized from DC02 to DC01 5 DC01 should be rebuilt as a replica domain controller. 6 DC02 should be rebuilt as a domain controller. A. 3->5->2 B. 3->6->1 C. 4->5->2 D. 4->6->1 Answer: A 4. You work as a technology specialist in an international company named Wiikigo. Your major job is to configure Windows Server 2008 Active Directory. And you are experienced in configuring the Active Directory infrastructure and maintaining Active Directory objects. There is an Active Directory forest in your company. And only Windows Server 2003 domain controllers are contained by an Active Directory forest. Since you are the technical support, you are required to prepare the Active Directory domain so as to have Windows Server 2008 domain controllers installed. Which actions should be performed to achieve the goal? (Choose more than one.) A. To achieve the goal, the forest functional level should be raised to Windows Server 2008. B. To achieve the goal, the domain functional level should be raised to Windows Server 2008. C. To achieve the goal, the adprep /forestprep command should be run. D. To achieve the goal, the adprep /domainprep command should be run. Answer: CD 5. You work as a technology specialist in an international company named Wiikigo. Your major job is to configure Windows Server 2008 Active Directory. And you are experienced in configuring the Active Directory infrastructure and maintaining Active Directory objects. The Active Directory Domain Services (AD DS) role and the Active Directory Lightweight Directory Services (AD LDS) role are installed on a server named DC01.An AD LDS instsance named LDS01 has its data stored on the C: drive.Since you are the technical support, you are required to have the LDS01 instance relocated to the D: drive. To achieve the goal, which actions should be performed to achieve the goal? (choose three options and put them in a correct order) 1 The net stop ???Active Directory Domain Services??? command should be run. 2 The net stop LSD01 command should be run. 3 The Ntdsutil tool should be utilized to migrate the database files. 4 The xcopy command should be run to migrate the database files. 5 The net start LDS01 command should be run. 6 The net start ???Active Directory Domain Services??? command should be run. 7 The Windows Backup tool should be utilized to back up and recover the LDS01 instance to the D: drive. A. 2->3->6 B. 3->2->5 C. 7->3->4 D. 1->3->5 Answer: A 6. You work as a technology specialist in an international company named Wiikigo. Your major job is to configure Windows Server 2008 Active Directory. And you are experienced in configuring the Active Directory infrastructure and maintaining Active Directory objects. There is an Active Directory domain named ad.wiikigo.com in your company. Two domain controllers named DC01 and DC02 are contained by the domain. The DNS Server server role is installed by the two domain controllers. A new DNS server named DNS01.wiikigo.com is installed on the perimeter network. DC01 is configured to forward all unresolved name requests to DNS01.wiikigo.com. A problem occurred that the DNS forwarding option cannot be used on DC02. Since you are the technical support, you are required to configure DNS forwarding on the DC02 server to point to the DNS01.wiikigo.com server. Which action should be performed to achieve the goal? (Choose more than one.) A. To achieve the goal, conditional forwarding on DC02 should be configured. B. To achieve the goal, the Listen On address on DC02 should be configured. C. To achieve the goal, the DNS cache on DC02 should be cleared. D. To achieve the goal, the Root zone on DC02 should be deleted. Answer: AD 7. You work as a technology specialist in an international company named Wiikigo. Your major job is to configure Windows Server 2008 Active Directory. And you are experienced in configuring the Active Directory infrastructure and maintaining Active Directory objects. There are two servers named S01 and S02. Windows Server 2008 is run by the two servers. The company configures S01 as an Enterprise Root certification authority (CA). The Online Responder role service is installed on S02. Since you are the technical support, you are required to configure S02 so as to have certificate revocation lists (CRLs) issued for the enterprise root CA. to achieve the goal, which action should be performed? (Choose more than one.) A. To achieve the goal, the Startup Type of the Certificate Propagation service should be set to Automatic. B. To achieve the goal, the enterprise root CA certificate should be imported. C. To achieve the goal, the OCSP Response Signing certificate should be imported. D. To achieve the goal, the S01 computer account should be added to the CertPublishers group. Answer: BC 8. You work as a technology specialist in an international company named Wiikigo. Your major job is to configure Windows Server 2008 Active Directory. And you are experienced in configuring the Active Directory infrastructure and maintaining Active Directory objects. There is an Active Directory forest in the company. The forest includes organizational units corresponding to the following four locations: Paris, Huston, Denver, and Valencia. Each location has a child organizational unit named Sales. All the users and computers from the sales department are contained in the Sales organizational unit. The offices in Paris, Huston, and Denver are connected by T1 connections. The office in Valencia is connected by a 256-Kbps ISDN connection. According to the company requirement, you have to install an application on all the computers in the sales department. So what should you do? (Choose more than one) A. You should create a Group Policy Object (GPO) named OfficeInstall that assigns the application to the computers. The GPO should be linked to each Sales organizational unit. B. The slow link detection setting should be disabled in the Group Policy Object (GPO). C. The slow link detection threshold setting should be configured to 1,544 Kbps (T1) in the Group Policy Object (GPO). D. You should create a Group Policy Object (GPO) named OfficeInstall that assigns the application to users. The GPO should be linked to each Sales organizational unit. Answer: AB 9. You work as a technology specialist in an international company named Wiikigo. Your major job is to configure Windows Server 2008 Active Directory. And you are experienced in configuring the Active Directory infrastructure and maintaining Active Directory objects. In your company, there is an Active Directory domain named wiikigo.com. And there are two DNS servers named DNS01 and DNS02 on the company network. You can see the configuration of the DNS servers from the table below. It is reported by the Domain users who are configured to utilize DNS02 as the preferred DNS server that they cannot get access to Internet Web sites. Since you are the technical report, you are required to have Internet name resolution enabled for all client computers. Which action should be performed to achieve the goal? A. To achieve the goal, the Cache.dns file should be updated on DNS02. And then, conditional forwarding should be configured on DNS01. B. To achieve the goal, the .(root) zone should be deleted from DNS02. And then, conditional forwarding should be set on DNS02. C. To achieve the goal, a copy of the .(root) zone should be created on DNS01. D. To achieve the goal, the list of root hints servers should be updated on DNS02. Answer: B 10. You work as a technology specialist in an international company named Wiikigo. Your major job is to configure Windows Server 2008 Active Directory. And you are experienced in configuring the Active Directory infrastructure and maintaining Active Directory objects. There is an Active Directory domain in your company. A new domain controller is installed in the domain. It is reported by a few users that the domain cannot be logged on. According to the company requirements, the SRV records should be reregistered. On the new domain controller, which command should be run? A. On the new domain controller, the sc stop netlogon command should be run followed by the sc start netlogon command. B. On the new domain controller, the netsh interface reset command should be run. C. On the new domain controller, the ipconfig /flushdns command should be run. D. On the new domain controller, the dnscmd /EnlistDirectoryPartition command should be run. Answer: A 11. You work as a technology specialist in an international company named Wiikigo. Your major job is to configure Windows Server 2008 Active Directory. And you are experienced in configuring the Active Directory infrastructure and maintaining Active Directory objects. The company has an Active Directory domain which is named ad.wiikigo.com. Luxware, Inc. has an Active Directory domain which is named intranet.luxware.com. The transfer of internal DNS zone data outside the Luxware network is prevented by Luxware security policy. According to the company requirement, you have to make sure that the Wiikkigo users can resolve names from the intranet.luxware.com domain. So what action should you perform? A. In order to make sure of this, conditional forwarding for the intranet.luxware.com domain should be configured. B. In order to make sure of this, a new stub zone should be created for the intranet.luxware.com domain. C. In order to make sure of this, an Active Directoryintegrated zone should be created for the intranet.luxware.com domain. D. In order to make sure of this, a standard secondary zone should be created for the intranet.luxware.com domain. Answer: A 12. You work as a technology specialist in an international company named Wiikigo. Your major job is to configure Windows Server 2008 Active Directory. And you are experienced in configuring the Active Directory infrastructure and maintaining Active Directory objects. One of the domain controllers in a child domain is being decommissioned. Since you are the technical support, you are required to move all domain operations master roles within the child domain to a newly installed domain controller, and the newly installed domain is in the same child domain. From the following five domain operations master roles, which three should be moved to finish the task? (Choose more than one.) A. To finish the task, Domain naming master should be moved to a newly installed domain controller. B. To finish the task, RID master should be moved to a newly installed domain controller. C. To finish the task, PDC emulator should be moved to a newly installed domain controller. D. To finish the task, Schema master should be moved to a newly installed domain controller. E. To finish the task, Infrastructure master should be moved to a newly installed domain controller. Answer: BCE 13. You work as a technology specialist in an international company named Wiikigo. Your major job is to configure Windows Server 2008 Active Directory. And you are experienced in configuring the Active Directory infrastructure and maintaining Active Directory objects. There is an Active Directory forest in the company. Only Windows Server 2003 domain controllers are contained in this forest. Now you receive an order from the company, you have to prepare the Active Directory domain to install Windows Server 2008 domain controllers. What action should you perform? (Choose more than one) A. The domain functional level should be raised to Windows Server 2008. B. The adprep /forestprep command should be run. C. The adprep /domainprep command should be run. D. The forest functional level should be raised to Windows Server 2008. Answer: BC 14. You work as a technology specialist in an international company named Wiikigo. Your major job is to configure Windows Server 2008 Active Directory. And you are experienced in configuring the Active Directory infrastructure and maintaining Active Directory objects. You have a domain controller named DC01. Windows Server 2008 is run by this domain controller. DC01 is configured as a DNS server for wiikigo.com. You have the DNS Server server role installed on a member server which is named Server01 and then you create a standard secondary zone for wiikigo.com. DC01 is configured as the master server for the zone. You have to make sure that Server01 receives zone updates from DC01. What action should you perform? A. The zone transfer settings for the wiikigo.com zone should be modified on DC01. B. The Server01 computer account should be added to the DNSUpdateProxy group. C. A conditional forwarder should be added on S01. D. The permissions of wiikigo.com zone should be modified on DC01. Answer: A 15. You work as a technology specialist in an international company named Wiikigo. Your major job is to configure Windows Server 2008 Active Directory. And you are experienced in configuring the Active Directory infrastructure and maintaining Active Directory objects. There is a server that runs Windows Server 2008 in your company. The company configures Active Directory Certificate Services (AD CS) as a stand-alone Certification Authority (CA) on the server. According to the company requirements, you are required to audit modifications to the CA configuration settings and the CA security settings. To achieve the goal, which tasks should be performed to achieve the goal? (Choose more than one.) A. To achieve the goal, auditing of successful and failed attempts should be enabled to write to files in the % SYSTEM32%CertLog directory. B. To achieve the goal, the Audit object access setting should be enabled in the Local Security Policy for the Active Directory Certificate Services (AD CS) server. C. To achieve the goal, auditing in the Certification Authority snap-in should be configured. D. To achieve the goal, auditing of successful and failed attempts should be enabled to modify permissions on files in the %SYSTEM32%CertSrv directory. Answer: BC 16. You work as a technology specialist in an international company named Wiikigo. Your major job is to configure Windows Server 2008 Active Directory. And you are experienced in configuring the Active Directory infrastructure and maintaining Active Directory objects. There is a single Active Directory domain in the company network. Windows Server 2008 is run by all domain controllers that are configured as DNS servers. A domain controller named DC01 has a standard primary zone for wiikigo.com. A domain controller named DC02 has a standard secondary zone for wiikigo.com. You have to make sure that the replication of the wiikigo.com zone is encrypted. You must not lose any zone data. So what action should you perform? A. The zone transfer settings of the standard primary zone should be configured. The Master Servers lists on the secondary zone should be modified. B. The interface that the DNS server listens on should be modified on both servers. C. The primary zone should be converted into an Active Directory-integrated zone. The secondary zone should be deleted. D. The primary zone should be converted into an Active Directory-integrated stub zone. The secondary zone should be deleted. Answer: C 17. You work as a technology specialist in an international company named Wiikigo. Your major job is to configure Windows Server 2008 Active Directory. And you are experienced in configuring the Active Directory infrastructure and maintaining Active Directory objects. Your network consists of an Active Directory forest named contoso.com. All servers run Windows Server 2008. All domain controllers are configured as DNS servers. The wiikigo.com DNS zone is stored in the ForestDnsZones Active Directory application partition. You have a member server that contains a standard primary DNS zone for dev.wiikigo.com. You have to make sure that all domain controllers can resolve names for dev.wiikigo.com. What action should you perform? A. The properties of the SOA record in the wiikigo.com zone should be modified. B. A NS record in the wiikigo.com zone should be created. C. A delegation in the wiikigo.com zone should be created. D. A standard secondary zone on a Global Catalog server should be created. Answer: C 18. You work as a technology specialist in an international company named Wiikigo. Your major job is to configure Windows Server 2008 Active Directory. And you are experienced in configuring the Active Directory infrastructure and maintaining Active Directory objects. There is an organizational unit named Production in your company. The Production organizational unit has a child organizational unit named R D. After a GPO named Software Deployment is created by you, you link it to the Production organizational unit. You create a shadow group for the R D organizational unit. You have to deploy an application to users in the Production organizational unit. You also need to make sure that the application is not deployed to users in the R D organizational unit. What are two possible ways to achieve this goal? A. In order to achieve this goal, security filtering on the Software Deployment GPO should be configured to Deny Apply group policy for the R D security group. B. In order to achieve this goal, the Enforce setting should be configured on the software deployment GPO. C. In order to achieve this goal, the Block Inheritance setting should be configured on the R D organizational unit. D. In order to achieve this goal, the Block Inheritance setting should be configured on the Production organizational unit. Answer: AC 19. You work as a technology specialist in an international company named Wiikigo. Your major job is to configure Windows Server 2008 Active Directory. And you are experienced in configuring the Active Directory infrastructure and maintaining Active Directory objects. There is a domain controller in your company. Windows Server 2008 is run by the domain controller. In addition, the domain controller is configured as a DNS server. According to the company requirements, you are required to have all inbound DNS queries to the server recorded. Which action should be performed in the DNS Manager console? A. In the DNS Manager console, event logging should be configured to log errors and warnings. B. In the DNS Manager console, debug logging should be enabled. C. In the DNS Manager console, automatic testing for simple queries should be enabled. D. In the DNS Manager console, automatic testing for recursive queries should be enabled. Answer: B 20. You work as a technology specialist in an international company named Wiikigo. Your major job is to configure Windows Server 2008 Active Directory. And you are experienced in configuring the Active Directory infrastructure and maintaining Active Directory objects. There is an Active Directory forest in the company. Not all domain controllers in the forest are configured as Global Catalog Servers. One root domain and one child domain is contained in your domain structure. You modify the folder permissions on a file server that is in the child domain. You find that some Access Control entries start with S-1-5-21 and that no account name is listed. You have to list the account names. So what action should you perform? A. The schema should be modified to enable replication of the friendlynames attribute to the Global Catalog. B. The RID master role in the child domain should be moved to a domain controller that holds the Global Catalog. C. The infrastructure master role in the child domain should be moved to a domain controller that does not hold the Global Catalog. D. The RID master role in the child domain should be moved to a domain controller that does not hold the Global Catalog. Answer: C More 70-640 Braindumps Information Exam Description 1. ExamSoon offer free update service for three month. After you purchase our product, we will offer free update in time for three month. 2. High quality and Value for the 70-640 Exam. ExamSoon Practice Exams for 70-640 are written to the highest standards of technical accuracy, provided by our certified subject matter experts and published authors for development. 3. 100% Guarantee to Pass Your TS exam and get your TS Certification. We guarantee your success in the first attempt. If you do not pass the TS "70-640" (TS: Windows Server 2008 Active Directory, Configuring on your first attempt, send us the official result. We will give you a FULLY REFUND of your purchasing fee and send you another same value product for free. 4. ExamSoon TS 70-640 Exam Downloadable. Our PDF or Testing Engine Preparation Material of TS 70-640 exam provides everything which you need to pass your exam. The TS Certification details are researched and produced by our Professional Certification Experts who are constantly using industry experience to produce precise, and logical. You may get "70-640 exam" questions from different websites or books, but logic is the key. Our Product will help you not only pass in the first TS: Windows Server 2008 Active Directory, Configuring( TS ) exam try, but also save your valuable time. Comprehensive questions with complete details about 70-640 exam. 70-640 exam questions accompanied by exhibits. Verified Answers Researched by Industry Experts and almost 100% correct. Drag and Drop questions as experienced in the Real TS exam. 70-640 exam questions updated on regular basis. Like actual TS Certification exams, 70-640 exam preparation is in multiple-choice questions (MCQs). Tested by many real TS exams before publishing. Try free TS exam demo before you decide to buy it in http://www.ExamSoon.com High quality and Valued for the 70-640 Exam: 100% Guarantee to Pass Your 70-640 exam and get your TS Certification. Come to http://www.ExamSoon.com The easiest and quickest way to get your TS Certification. ExamSoon professional provides TS 70-640 the newest Q&A, completely covers 70-640 test original topic. With our completed TS resources, you will minimize your TS cost and be ready to pass your 70-640 test on Your First Try, 100% Money Back Guarantee included! 70-640 Exam Study Guide 70-640 exam is regarded as one of the most favourite TS Certifications. Many IT professionals prefer to add 70-640 exam among their credentials. ExamSoon not only caters you all the information regarding the 70-640 exam but also provides you the excellent 70-640 study guide which makes the certification exam easy for you. ExamSoon Engine Features Comprehensive questions and answers about 70-640 exam 70-640 exam questions accompanied by exhibits Verified Answers Researched by Industry Experts and almost 100% correct 70-640 exam questions updated on regular basis Same type as the certification exams, 70-640 exam preparation is in multiple-choice questions (MCQs). Tested by multiple times before publishing Try free 70-640 exam demo before you decide to buy it in ExamSoon.com ExamSoon Help You Pass Any IT Exam ExamSoon.com offers incredib le career enhancing opportunities. We are a team of IT professionals that focus on providing our customers with the most up to date material for any IT certification exam. This material is so effective that we Guarantee you will pass the exam or your money back. 70-640 TS: Windows Server 2008 Active Directory, Configuring 83-640 TS: Windows Server 2008 Active Directory, Configuring 70-433 TS: Microsoft SQL Server 2008, Database Development 70-647 Pro: Windows Server 2008,Enterprise Administrator 70-642 TS: Windows Server 2008 Network Infrastructure, Configuring 70-432 TS:MS SQL Server@ 2008,Implementation and Maintenance 70-643 TS: Windows Server 2008 Applications Infrastructure, Configuring 70-450 PRO:MS SQL Serv 08,Design,Optimize, & Maintain DB Admin Solu 70-448 TS:MS SQL Server 2008.Business Intelligence Dev & Maintenan 70-660 TS:Windows® Internals 70-561 TS: MS .NET Framework 3.5, ADO.NET Application Development 70-673 TS: Designing, Assessing, and Optimizing Software Asset Management (SAM) 70-505 TS: Microsoft .NET Framework 3.5,Windows Forms Application Development 70-562 TS: MS .NET Framework 3.5, ASP.NET Application Development 70-541 TS: MS Windows SharePoint Srvics3.0 Application Development 70-568 Upgrade: Transition your MCPD Enterprise Application Developer Skills to MCPD Enterprise Applications Developer 3.5, Par 70-653 TS:Windows Small Business Server 2008, Configuring 70-567 Upgrade: Transition your MCPD Web Developer Skills to MCPD ASP.NET Developer 3.5 70-562CSharp TS:MS.NET Framework 3.5, ASP.NET Application Development 70-351 TS: MS Internet Security & Acceleration Serv 2006, Configuring Related 70-640 Exams Other Microsoft Exams 70-547 70-220 70-298 MB3-208 70- 443GB2312 70-624 MB3-010 70-290 70-236 70-544 MB3-462 70- 561C++ 70-350 70-561 70- 541CSharp MB3-532 MB6-295 MB4-349 MB3-527 70- 571GB2312