Braindump2go New Published Microsoft 70-640 Dumps PDF Contanins the latest questions from Microsoft Exam Center! 100% Certification got guaranteed!
Vendor: Microsoft
Exam Code: 70-640
Exam Name: TS: Windows Server 2008 Active Directory, Configuring
QUESTION 121
Which of the following are required to create a domain controller successfully? (Each correct answer presents part of the solution. Choose all that apply.)
A. A valid DNS domain name
B. A valid NetBIOS name
C. A DHCP server to assign an IP address to the domain controller
D. A DNS server
Answer: AB
QUESTION 122
Trey Research has recently acquired Litware, Inc.
Because of regulatory issues related to data replication, it is decided to configure a child domain in the forest for Litware users and computers.
The Trey Research forest currently contains only Windows Server 2008 R2 domain controllers. The new domain will be created by promoting a Windows Server 2008 R2 domain controller, but you might need to use existing Windows Server 2003 systems as domain controllers in the Litware domain.
Which functional levels will be appropriate to configure?
A. Windows Server 2008 R2 forest functional level and Windows Server 2008 R2 domain
functional level for the Litware domain
B. Windows Server 2008 R2 forest functional level and Windows Server 2003 domain
functional level for the Litware domain
C. Windows Server 2003 forest functional level and Windows Server 2008 R2 domain
functional level for the Litware domain
D. Windows Server 2003 forest functional level and Windows Server 2003 domain functional
level for the Litware domain
Answer: D
QUESTION 123
You are logged on as Administrator to SERVER02, one of four domain controllers in the contoso.com domain that run Server Core.
You want to demote the domain controller.
Which of the following is required?
A. The local Administrator password
B. The credentials for a user in the Domain Admins group
C. The credentials for a user in the Domain Controllers group
D. The address of a DNS server
Answer: A
QUESTION 124
SERVER02 is running Server Core. It is already configured with the AD DS role.
You want to add Active Directory Certificate Services (AD CS) to the server.
What must you do?
A. Install the Active Directory Certificate Services role.
B. Install the Active Directory Federated Services role.
C. Install the AD Rights Management Services role.
D. Reinstall the server as Windows Server 2008 R2 (Full Installation).
Answer: D
QUESTION 125
You are a support professional for Contoso, Ltd.
The domain’s administrators have distributed a custom console with the Active Directory Users And Computers snap-in.
When you open the console and attempt to reset a user’s password, you receive Access Denied errors.
You are certain that you have been delegated permission to reset passwords for users.
What is the best solution?
A. Close the custom console and open Server Manager.
Use the Active Directory Users And Computers snap-in in Server Manager.
B. Close the custom console and open Command Prompt.
Type dsa.msc.
C. Close the custom console, and right-click the console, and then click Run As Administrator.
Type the credentials for your secondary administrative account.
D. Close the custom console, and then open Command Prompt.
Use the DSMOD USER command with the -p switch to change the user’s password.
Answer: C
QUESTION 126
Your network contains a single Active Directory domain.
You need to create an Active Directory Domain Services snapshot.
What should you do?
A. Use the Ldp tool.
B. Use the NTDSUtil tool.
C. Use the Wbadmin tool.
D. From Windows Server Backup, perform a full backup.
Answer: B
Explanation:
http://technet.microsoft.com/en-us/library/cc753609.aspx
QUESTION 127
Your network contains a single Active Directory domain.
A domain controller named DC2 fails.
You need to remove DC2 from Active Directory.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
A. At the command prompt, run dcdiag.exe /fix.
B. At the command prompt, run netdom.exe remove dc2.
C. From Active Directory Sites and Services, delete DC2.
D. From Active Directory Users and Computers, delete DC2.
Answer: CD
Explanation:
http://technet.microsoft.com/en-us/library/cc816907.aspx
QUESTION 128
Your company has an Active Directory domain named contoso.com.
The company network has two DNS servers named DNS1 and DNS2.
The DNS servers are configured as shown in the following table.
Domain users, who are configured to use DNS2 as the preferred DNS server, are unable to connect to Internet Web sites.
You need to enable Internet name resolution for all client computers.
What should you do?
A. Update the list of root hints servers on DNS2.
B. Create a copy of the .(root) zone on DNS1.
C. Delete the .(root) zone from DNS2. Configure conditional forwarding on DNS2.
D. Update the Cache.dns file on DNS2. Configure conditional forwarding on DNS1.
Answer: C
Explanation:
http://support.microsoft.com/kb/298148
How To Remove the Root Zone (Dot Zone)
When you install DNS on a Windows 2000 server that does not have a connection to the Internet, the zone for the domain is created and a root zone, also known as a dot zone, is also created. This root zone may prevent access to the Internet for DNS and for clients of the DNS. If there is a root zone, there are no other zones other than those that are listed with DNS, and you cannot configure forwarders or root hint servers. For these reasons, you may have to remove the root zone.
QUESTION 129
Your company has two Active Directory forests named contoso.com and fabrikam.com.
The company network has three DNS servers named DNS1, DNS2, and DNS3.
The DNS servers are configured as shown in the following table.
All computers that belong to the fabrikam.com domain have DNS3 configured as the preferred DNS server.
All other computers use DNS1 as the preferred DNS server.
Users from the fabrikam.com domain are unable to connect to the servers that belong to the contoso.com domain.
You need to ensure users in the fabrikam.com domain are able to resolve all contoso.com queries.
What should you do?
A. Configure conditional forwarding on DNS1 and DNS2 to forward fabrikam.com queries to
DNS3.
B. Create a copy of the _msdcs.contoso.com zone on the DNS3 server.
C. Create a copy of the fabrikam.com zone on the DNS1 server and the DNS2 server.
D. Configure conditional forwarding on DNS3 to forward contoso.com queries to DNS1.
Answer: D
Explanation:
http://technet.microsoft.com/en-us/library/cc730756.aspx
Understanding Forwarders
A forwarder is a Domain Name System (DNS) server on a network that forwards DNS queries for external DNS names to DNS servers outside that network.
You can also forward queries according to specific domain names using conditional forwarders.
You designate a DNS server on a network as a forwarder by configuring the other DNS servers in the network to forward the queries that they cannot resolve locally to that DNS server. By using a forwarder, you can manage name resolution for names outside your network, such as names on the Internet, and improve the efficiency of name resolution for the computers in your network.
The following figure illustrates how external name queries are directed with forwarders.
Conditional forwarders
A conditional forwarder is a DNS server on a network that forwards DNS queries according to the DNS domain name in the query. For example, you can configure a DNS server to forward all the queries that it receives for names ending with corp.contoso.com to the IP address of a specific DNS server or to the IP addresses of multiple DNS servers.
QUESTION 130
Your company, Contoso Ltd, has offices in North America and Europe.
Contoso has an Active Directory forest that has three domains.
You need to reduce the time required to authenticate users from the labs.eu.contoso.com domain when they access resources in the eng.na.contoso.com domain.
What should you do?
A. Decrease the replication interval for all Connection objects.
B. Decrease the replication interval for the DEFAULTIPSITELINK site link.
C. Set up a one-way shortcut trust from eng.na.contoso.com to labs.eu.contoso.com.
D. Set up a one-way shortcut trust from labs.eu.contoso.com to eng.na.contoso.com.
Answer: C
Explanation:
http://technet.microsoft.com/en-us/library/cc754538.aspx
Understanding When to Create a Shortcut Trust
When to create a shortcut trust
Shortcut trusts are one-way or two-way, transitive trusts that administrators can use to optimize the authentication process.
Authentication requests must first travel a trust path between domain trees. In a complex forest this can take time, which you can reduce with shortcut trusts. A trust path is the series of domain trust relationships that authentication requests must traverse between any two domains. Shortcut trusts effectively shorten the path that authentication requests travel between domains that are located in two separate domain trees.
Shortcut trusts are necessary when many users in a domain regularly log on to other domains in a forest.
Using the following illustration as an example, you can form a shortcut trust between domain B and domain D, between domain A and domain 1, and so on.
Using one-way trusts
A one-way, shortcut trust that is established between two domains in separate domain trees can reduce the time that is necessary to fulfill authentication requests–but in only one direction. For example, when a oneway, shortcut trust is established between domain A and domain B, authentication requests that are made in domain A to domain B can use the new one-way trust path. However, authentication requests that are made in domain B to domain A must still travel the longer trust path.
Using two-way trusts
A two-way, shortcut trust that is established between two domains in separate domain trees reduces the time that is necessary to fulfill authentication requests that originate in either domain. For example, when a two-way trust is established between domain A and domain B, authentication requests that are made from either domain to the other domain can use the new, two-way trust path.
Braindump2go Offers 100% money back guarantee on all products! Our products remain valid for a lifetime! Recently we update our 70-640 Exam Questions since the Microsoft Official Exam Center adds some new questions in 70-640 Exam Dumps. Braindump2go checks all Exam Dumps every day and guarantee all the exam questions are the latest and correcr!
http://www.braindump2go.com/70-640.html
