This page was exported from Braindump2go Free Exam Dumps with PDF and VCE Collection [ https://www.mcitpdump.com ] Export date:Fri Nov 22 10:45:58 2024 / +0000 GMT ___________________________________________________ Title: Free Download PDF & VCE Format Microsoft 70-640 Dumps With New Changed Questions from Braindump2go (621-630) --------------------------------------------------- The 70-640 Exam Practice Questions and Answers are ideal for the aspring candiates to grab exceptional grades in Microsoft 70-640 Exam! The 70-640 Questions and Answers are developed using the latest updated course content and all the answers are verified to ensure phenoment preparation for the actual 70-640 Exam! Vendor: MicrosoftExam Code: 70-640Exam Name: TS: Windows Server 2008 Active Directory, Configuring Keywords: 70-640 Exam Dumps,70-640 Practice Tests,70-640 Practice Exams,70-640 Exam Questions,70-640 Dumps,70-640 Dumps PDF,70-640 VCE,70-640 Braindump,70-640 TS: Windows Server 2008 Active Directory, Configuring QUESTION 621Your network contains a server named Server1 that runs Windows Server 2008 R2. Server1 is configured as an Active Directory Federation Services (AD FS) 2.0 standalone server.You plan to add a new token-signing certificate to Server1.You import the certificate to the server as shown in the exhibit. (Click the Exhibit button.)When you run the Add Token-Signing Certificate wizard, you discover that the new certificate is unavailable. You need to ensure that you can use the new certificate for AD FS. What should you do?  A.    From the properties of the certificate, modify the Certificate Policy OIDs setting.B.    Import the certificate to the AD FS 2.0 Windows Service personal certificate store.C.    From the properties of the certificate, modify the Certificate purposes setting.D.    Import the certificate to the local computer personal certificate store. Answer: DExplanation:http://technet.microsoft.com/en-us/library/hh341466.aspxWhen you deploy the first federation server in a new AD FS 2.0 installation, you must obtain a token-signing certificate and install it in the local computer personal certificate store on that federation server. QUESTION 622You need to purge the list of user accounts that were authenticated on a read-only domain controller (RODC). What should you do? A.    Run the repadmin.exe command and specify the /prp parameter.B.    From Active Directory Sites and Services, modify the properties of the RODC computer object.C.    From Active Directory Users and Computers, modify the properties of the RODC computer object.D.    Run the dsrm.exe command and specify the -u parameter. Answer: AExplanation:http://technet.microsoft.com/en-us/library/rodc-guidance-for-administering-the-password-replication-policy.aspxClearing the authenticated accounts listIn addition to reviewing the list of authenticated users, you may decide to periodically clean up the list of accounts that are authenticated to the RODC. Cleaning up this list may help you more easily determine the new accounts that have authenticated through the RODC.Membership in the Domain Admins group of the domain in which the RODC is a member, or equivalent, is the minimum required to complete this procedure.To clear all entries from the list, run the command repadmin /prp delete <hostname> auth2 /all.Substitute the actual host name of the RODC that you want to clear. For example, if you want to clear the list of authenticated accounts for RODC2, type repadmin /prp delete rodc2 auth2 /all, and then press ENTER. QUESTION 623Your company has a main office and four branch offices.An Active Directory site exists for each office. Each site contains one domain controller. Each branch office site has a site link to the main office site.You discover that the domain controllers in the branch offices sometimes replicate directly to each other.You need to ensure that the domain controllers in the branch offices only replicate to the domain controller in the main office.What should you do? A.    Modify the firewall settings for the main office site.B.    Disable the Knowledge Consistency Checker (KCC) for each branch office site.C.    Disable site link bridging.D.    Modify the security settings for the main office site. Answer: CExplanation:http://technet.microsoft.com/en-us/library/cc757117.aspx QUESTION 624A user reports that she is receiving a logon message that states, "Your account is configured to prevent you from using the computer. Please try another computer." What should you do to enable her to log on to the computer? A.    Click the Log On To button on the Account tab of her user account.B.    Click the Allowed To Join Domain button in the New Computer dialog box.C.    Use the DSMove command.D.    Give her the right to log on locally, using the local security policy of the computer. Answer: A QUESTION 625A new project requires that users in your domain and in the domain of a partner organization have access to a shared folder on your file server. Which type of group should you create to manage the access to the shared folder? A.    Universal security groupB.    Domain local security groupC.    Global security groupD.    Domain local distribution group Answer: B QUESTION 626Your domain includes a global distribution group named Company Update. It has been used to send company news by email to its members. You have decided to allow all members to contribute to the newsletter by creating a shared folder on a file server. What must you do to allow group members access to the shared folder? A.    Change the group scope to domain localB.    Change the group scope to universalC.    Add the group to the Domain Users groupD.    Use DSMod with the -secgrp yes parameter Answer: D QUESTION 627You have created a global security group in the contoso.com domain named Corporate Managers. Which members can be added to the group? (Choose all that apply.) A.    Sales Managers, a global group in the fabrikam.com domain, a trusted domain of a partner companyB.    Sales Managers, a global group in the tailspintoys.com domain, a domain in the contoso.com forestC.    Linda Mitchell, a user in the tailspintoys.com domain, a domain in the contoso.com forestD.    Jeff Ford, a user in the fabrikam.com domain, a trusted domain of a partner companyE.    Mike Danseglio, a user in the contoso.com domainF.    Sales Executives, a global group in the contoso.com domainG.    Sales Directors, a domain local group in the contoso.com domainH.    European Sales Managers, a universal group in the contoso.com forest Answer: CDEF QUESTION 628Which of the following can be used to remove members from a group? (Choose all that apply.) A.    Remove-ItemB.    DSRmC.    DSModD.    LDIFDEE.    CSVDE Answer: CD QUESTION 629You are using DSMod to add a domain local group named GroupA to a global group named GroupB. You are receiving errors. Which command will solve the problem so that you can add GroupA to GroupB? (Choose all that apply.) A.    Dsrm.exeB.    Dsmod.exeC.    Dsquery.exeD.    Dsget.exe Answer: B QUESTION 630Your management has asked you to produce a list of all users who belong to the Special Project group, including those users belonging to groups nested into Special Project.Which of the following can you use? (Choose all that apply.) A.    Get-ADGroupMemberB.    Dsquery.exeC.    LDIFDED.    Dsget.exe Answer: AD Braindump2go New Released 70-640 Dump PDF Free Download, 651 Questions in all, Passing Your Exam 100% Easily! http://www.braindump2go.com/70-640.html --------------------------------------------------- Images: --------------------------------------------------- --------------------------------------------------- Post date: 2015-04-27 02:28:29 Post date GMT: 2015-04-27 02:28:29 Post modified date: 2015-04-27 02:28:29 Post modified date GMT: 2015-04-27 02:28:29 ____________________________________________________________________________________________ Export of Post and Page as text file has been powered by [ Universal Post Manager ] plugin from www.gconverters.com