Study Latest Braindump2go 70-640 Practice Exam Questions From Today Pass 70-640 Easily! (341-350)
2015 Latest 70-640 Real exam questions to master and practice upon! Braindump2go Offers the New Updated Microsoft 70-640 651 Exam Questions in PDF & VCE files that can also be downloaded on every mobile device for preparation! Vendor: Microsoft
Exam Code: 70-640
Exam Name: TS: Windows Server 2008 Active Directory, Configuring Keywords: 70-640 Exam Dumps,70-640 Practice Tests,70-640 Practice Exams,70-640 Exam Questions,70-640 Dumps,70-640 Dumps PDF,Microsoft 70-640 Exam Dumps,70-640 Questions and Answers,TS: Windows Server 2008 Active Directory, Configuring
QUESTION 341
Your network contains an Active Directory domain named contoso.com.
Contoso.com contains a member server that runs Windows Server 2008 R2 Standard.
You need to create an enterprise subordinate certification authority (CA) that can issue certificates based on version 3 certificate templates.
You must achieve this goal by using the minimum amount of administrative effort.
What should you do first? A. Run the certutil.exe - addenrollmentserver command.
B. Install the Active Directory Certificate Services (AD CS) role on the member server.
C. Upgrade the member server to Windows Server 2008 R2 Enterprise.
D. Run the certutil.exe - installdefaulttemplates command. Answer: C QUESTION 342
Your network contains a server named Server1.
The Active Directory Rights Management Services (AD RMS) server role is installed on Server1.
An administrator changes the password of the user account that is used by AD RMS.
You need to update AD RMS to use the new password.
Which console should you use? A. Active Directory Rights Management Services
B. Active Directory Users and Computers
C. Local Users and Groups
D. Services Answer: A
Explanation:
http://social.technet.microsoft.com/wiki/contents/articles/13034.ad-rms-how-to-change-the-rms-serviceaccount-password.aspx 1
AD RMS How To: Change the RMS Service Account Password
The Active Directory Rights Management Services management console provides a wizard to change or update the AD RMS service account. The most common use for this process is to update the service account password when it has been changed.
It is important to use this process to update or change the AD RMS service account.
This ensures the necessary components are updated properly. QUESTION 343
Your company, Contoso, Ltd., has a main office and a branch office.
The offices are connected by a WAN link.
Contoso has an Active Directory forest that contains a single domain named ad.contoso.com.
The ad.contoso.com domain contains one domain controller named DC1 that is located in the main office.
DC1 is configured as a DNS server for the ad.contoso.com DNS zone.
This zone is configured as a standard primary zone.
You install a new domain controller named DC2 in the branch office.
You install DNS on DC2.
You need to ensure that the DNS service can update records and resolve DNS queries in the event that a WAN link fails.
What should you do? A. Create a new secondary zone named ad.contoso.com on DC2.
B. Create a new stub zone named ad.contoso.com on DC2.
C. Configure the DNS server on DC2 to forward requests to DC1.
D. Convert the ad.contoso.com zone on DC1 to an Active Directory-integrated zone. Answer: D
Explanation:
Three answers don't make sense, leaving us with the one that works.
Create a new secondary zone named ad.contoso.com on DC2.
This would create a read-only zone, so it couldn't be updated
Create a new stub zone named ad.contoso.com on DC2.
This stub zone would contain source information about authoritative name servers for its zone only, being DC1, but that one would be unavailable in the WAN link fails.
Configure the DNS server on DC2 to forward requests to DC1.
This doesn't help if the WAN link fails and DC1 is unavailable. QUESTION 344
Your network contains an enterprise certification authority (CA) that runs Windows Server 2008 R2 Enterprise.
You enable key archival on the CA.
The CA is configured to use custom certificate templates for Encrypted File System (EFS) certificates.
You need to archive the private key for all new EFS certificates.
Which snap-in should you use? A. Active Directory Users and Computers
B. Authorization Manager
C. Group Policy Management
D. Enterprise PKI
E. Security Templates
F. TPM Management
G. Certificates
H. Certification Authority
I. Certificate Templates Answer: I
Explanation:
http://technet.microsoft.com/en-us/library/cc753826.aspx 2 QUESTION 345
Your network contains an enterprise certification authority (CA) that runs Windows Server 2008 R2 Enterprise.
You need to ensure that all of the members of a group named Group1 can view the event log entries for Certificate Services.
Which snap-in should you use? A. Certificate Templates
B. Certification Authority
C. Authorization Manager
D. Active Directory Users and Computers
E. TPM Management
F. Security Templates
G. Group Policy Management
H. Enterprise PKI
I. Certificates Answer: G QUESTION 346
Your network contains an enterprise certification authority (CA) that runs Windows Server 2008 R2 Enterprise.
You need to ensure that users can enroll for certificates that use the IPSEC (Offline request) certificate template
Which snap-in should you use? A. Enterprise PKI
B. TPM Management
C. Certificates
D. Active Directory Users and Computers
E. Authorization Manager
F. Certification Authority
G. Group Policy Management
H. Security Templates
I. Certificate Templates Answer: I QUESTION 347
Your network contains an enterprise certification authority (CA) that runs Windows Server 2008 R2 Enterprise.
You have a custom certificate template named Template 1.
Template1 is published to the CA.
You need to ensure that all of the members of a group named Group1 can enroll for certificates that use Template1.
Which snap-in should you use? A. Security Templates
B. Enterprise PKI
C. Certification Authority
D. Certificate Templates
E. Certificates
F. TPM Management
G. Authorization Manager
H. Group Policy Management
I. Active Directory Users and Computers Answer: D QUESTION 348
Your network contains an enterprise certification authority (CA) that runs Windows Server 2008 R2 Enterprise.
You need to approve a pending certificate request.
Which snap-in should you use? A. Active Directory Users and Computers
B. Authorization Manager
C. Certification Authority
D. Group Policy Management
E. Certificate Templates
F. TPM Management
G. Certificates
H. Enterprise PKI
I. Security Templates Answer: C QUESTION 349
Your network contains an Active Directory domain.
The domain contains a domain controller named DC1 that runs windows Server 2008 R2 Service Pack 1 (SP1).
You need to implement a central store for domain policy templates.
What should you do? To answer, select the source content that should be copied to the destination folder in the answer area.
Answer:
 QUESTION 350
Your network contains an Active Directory forest named contoso.com.
You plan to migrate all user accounts to a new forest named litwareinc.com.
The functional level of the contoso.com forest is Windows Server 2003.
Contoso.com contains four servers.
The servers are configured as shown in the following table.
The functional level of the litwareinc.com forest is Windows Server 2008.
Litwareinc.com contains four servers.
The servers are configured as shown in the following table.
You need to identify on which server in the litwareinc.com forest you must install Active Directory Migration Tool version 3.2 (ADMT v3.2).
Which server should you identify? A. Litw_Srv4
B. Litw_Srv1
C. Litw_Srv2
D. Litw_Srv3 Answer: D
Explanation:
http://technet.microsoft.com/en-us/library/cc974370.aspx 3
70-640 Updated Questions are 2015 Latest Released Which 100% will Meet in Your 70-640 Test! Braindump2go New Released 70-640 Exam Dumps Contain All New Added Questions Which Will Help you Have A Totally Success in 2015 New Tear! Download our 100% Pass Guaranteed 70-640 Exam Dumps Full Version, special 10% Off Discount enjoyed!  http://www.braindump2go.com/70-640.html
|
