Microsoft 70-640 Online Practice Questions and Exam Preparation

Microsoft 70-640 Online Questions & Answers

• Question 361:

  Your network contains an Active Directory forest named adatum.com. You need to create an Active Directory Rights Management Services (AD RMS) licensing-only cluster.

  What should you install before you create the AD RMS root cluster?

  A. The Failover Cluster feature
  B. The Active Directory Certificate Services (AD CS) role
  C. Microsoft Exchange Server 2010
  D. Microsoft SharePoint Server 2010
  E. Microsoft SQL Server 2008
  E. Microsoft SQL Server 2008

  ---

  Reference:

  http://technet.microsoft.com/en-us/library/cc771789.aspx

  Before you install AD RMS

  Before you install Active Directory Rights Management Services (AD RMS) on Windows Server?2008 R2 for the first time, there are several requirements that must be met:

  (...)

  In addition to pre-installation requirements for AD RMS, we strongly recommend the following:

  Install the database server that is used to host the AD RMS databases on a separate computer.

  (...)

• Question 362:

  Your network contains an Active Directory domain. All DNS servers are domain controllers. You view the properties of the DNS zone as shown in the exhibit. (Click the Exhibit button.)

  

  You need to ensure that only domain members can register DNS records in the zone.

  What should you do first?

  A. Modify the zone type.
  B. Create a trust anchor.
  C. Modify the Advanced properties of the DNS server.
  D. Modify the Dynamic updates setting.
  A. Modify the zone type.

  ---

  To ensure that only domain members are allowed to register DNS records we have to:

  1.

  modify the zone type to Active Directory-Integrated.

  2.

  set the Dynamic updates option to Secure only, which is only available to Active Directory- Integrated zones.

  Reference 1:

  MCTS Windows Server ?2008 Active Directory Configuration Study Guide (Sybex, 2008) page 53 Secure only--This means that only machines with accounts in Active Directory can register with DNS. Before DNS registers any account in its

  database, it checks Active Directory to make sure that account is an authorized domain computer.

  Reference 2:

  http://technet.microsoft.com/en-us/library/ee649287.aspx

  Secure dynamic update is supported only for Active Directory-integrated zones. If the zone type is configured differently, you must change the zone type and directory-integrate the zone before securing it for DNS dynamic updates.

• Question 363:

  Your network contains an Active Directory domain named adatum.com. The functional level of the domain is Windows Server 2008. All domain controllers run Windows Server 2008 R2. All client computers run Windows 7 Enterprise.

  You need to create a snapshot of Active Directory.

  What should you do?

  A. Run the Get-ADDomain cmdlet.
  B. Run the dsget.exe command.
  C. Run the ntdsutil.exe command.
  D. Run the ocsetup.exe command.
  E. Run the dsamain.exe command
  F. Run the eventcreate.exe command.
  G. Create a Data Collector Set (DCS).
  H. Create custom views from Event Viewer.
  I. Configure subscriptions from Event Viewer.
  J. Import the Active Directory module for Windows PowerShell.
  C. Run the ntdsutil.exe command.

• Question 364:

  Your network contains an Active Directory domain. The functional level of the domain is Windows Server 2003.

  The domain contains five domain controllers that run Windows Server 2008 and five domain controllers that run Windows Server 2008 R2.

  You need to ensure that SYSVOL is replicated by using Distributed File System Replication (DFSR).

  What should you do first?

  A. Run dfsrdiag.exe PollAD.
  B. Run dfsrmig.exe /SetGlobalState 0.
  C. Upgrade all domain controllers to Windows Server 2008 R2.
  D. Raise the functional level of the domain to Windows Server 2008.
  D. Raise the functional level of the domain to Windows Server 2008.

  ---

  http://technet.microsoft.com/en-us/library/cc753479%28v=ws.10%29.aspx Distributed File System

  Distributed File System (DFS) Namespaces and DFS Replication offer simplified, highly-available access to files, load sharing, and WAN-friendly replication. In the Windows Server?2003 R2 operating system, Microsoft revised and renamed

  DFS Namespaces (formerly called DFS), replaced the Distributed File System snap-in with the DFS Management snap-in, and introduced the new DFS Replication feature. In the Windows Server?2008 operating system, Microsoft added the

  Windows Server 2008 mode of domain-based namespaces and added a number of usability and performance improvements.

  What does Distributed File System (DFS) do?

  The Distributed File System (DFS) technologies offer wide area network (WAN)-friendly replication as well as simplified, highly-available access to geographically dispersed files. The two technologies in DFS are the following:

  DFS Namespaces. Enables you to group shared folders that are located on different servers into one or more logically structured namespaces. Each namespace appears to users as a single shared folder with a series of subfolders. This

  structure increases availability and automatically connects users to shared folders in the same Active Directory Domain Services site, when available, instead of routing them over WAN connections.

  DFS Replication. DFS Replication is an efficient, multiple-master replication engine that you can use to keep folders synchronized between servers across limited bandwidth network connections. It replaces the File Replication Service (FRS)

  as the replication engine for DFS Namespaces, as well as for replicating the AD DS SYSVOL folder in domains that use the Windows Server 2008 domain functional level.

• Question 365:

  Your network contains an Active Directory domain named contoso.com. A domain controller named DC1 runs Windows Server 2008 R2 Service Pack 1 (SP1).

  You install Windows Server 2008 R2 SP1 on a server named Server1. You need to perform an offline domain join of Serverl to the domain.

  What should you do? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

  ---

  Note:

  Performing an offline domain join using different physical computers To perform an offline domain join using physical computers, you can complete the following steps. The best practice in this case is to have one domain controller, one

  domain-joined computer to use as a provisioning server, and one client computer that you want to join to the domain. 1.On the provisioning server, open an elevated command prompt. To open an elevated Command Prompt window, click

  Start, point to All Programs, click Accessories, right-click Command Prompt, and then click Run as administrator.

  Type the following command to provision the computer account:

  djoin /provision /domain /machine /savefile blob.txt

  2.Copy the blob.txt file to the client computer.

  3. On the client computer, open an elevated command prompt, and then type the following command to request the domain join: djoin /requestODJ /loadfile blob.txt /windowspath %SystemRoot% /localos

  * Offline domain join is a new process that computers that run Windows 7/8 or Windows Server 2008/2012 R2 can use to join a domain without contacting a domain controller. This makes it possible to join computers to a domain in locations where there is no connectivity to a corporate network.

• Question 366:

  A corporate network includes a single Active Directory Domain Services (AD DS) domain. The domain contains 10 domain controllers. The domain controllers run Windows Server 2008 R2 and are configured as DNS servers.

  You plan to create an Active Directory-integrated zone.

  You need to ensure that the new zone is replicated to only four of the domain controllers.

  What should you do first?

  A. Use the ntdsutil tool to modify the DS behavior for the domain.
  B. Use the ntdsutil tool to add a naming context.
  C. Create a new delegation in the ForestDnsZones application directory partition.
  D. Use the dnscmd tool with the /zoneadd parameter.
  B. Use the ntdsutil tool to add a naming context.

  ---

  

  Reference 1:

  http://technet.microsoft.com/en-us/library/cc725739.aspx

  Store Data in an AD DS Application Partition

  You can store Domain Name System (DNS) zones in the domain or application directory partitions of Active Directory Domain Services (AD DS). An application directory partition is a data structure in AD DS that distinguishes data for different

  replication purposes. When you store a DNS zone in an application directory partition, you can control the zone replication scope by controlling the replication scope of the application directory partition.

  Reference 2:

  http://technet.microsoft.com/en-us/library/cc730970.aspx

  Partition management

  Manages directory partitions for Active Directory Domain Services (AD DS) or Active Directory Lightweight Directory Services (AD LDS).

  This is a subcommand of Ntdsutil and Dsmgmt.

  Examples

  To create an application directory partition named AppPartition in the contoso.com domain, complete the following steps:

  1.

  To open an elevated Command Prompt window, click Start, point to All Programs, click Accessories, rightclick Command Prompt, and then click Run as administrator.

  2.

  Type: ntdsutil

  3.

  Type: Ac in ntds

  4.

  Type: partition management

  5.

  Type: connections

  6.

  Type: Connect to server DC_Name

  7.

  Type: quit

  8.

  Type: list The following partitions will be listed: 0 CN=Configuration,DC=Contoso,DC=com 1 DC=Contoso,DC=com 2 CN=Schema,CN=Configuration,DC=Contoso,DC=com 3 DC=DomainDnsZones,DC=Contoso,DC=com 4 DC=ForestDnsZones,DC=Contoso,DC=com

  9.

  At the partition management prompt, type: create nc dc=AppPartition,dc=contoso,dc=com ConDc1.contoso.com

  10.

  Run the list command again to refresh the list of partitions.

• Question 367:

  Your network contains an Active Directory domain named contoso.com. The properties of the contoso.com DNS zone are configured as shown in the exhibit. (Click the Exhibit button.)

  

  You need to update the Host (A) record for a domain controller in the domain. What should you do?

  A. Restart the Netlogon service.
  B. Restart the DNS Client service.
  C. Run sc.exe and specify the triggerinfo parameter.
  D. Run ipconfig.exe and specify the /registerdns parameter.
  D. Run ipconfig.exe and specify the /registerdns parameter.

• Question 368:

  Your network contains an Active Directory domain. All domain controllers run Windows Server 2008 R2.

  You need to compact the Active Directory database.

  What should you do?

  A. Run the Get-ADForest cmdlet.
  B. Configure subscriptions from Event Viewer.
  C. Run the eventcreate.exe command.
  D. Configure the Active Directory Diagnostics Data Collector Set (OCS).
  E. Create a Data Collector Set (DCS).
  F. Run the repadmin.exe command.
  G. Run the ntdsutil.exe command.
  H. Run the dsquery.exe command.
  I. Run the dsamain.exe command.
  J. Create custom views from Event Viewer.
  G. Run the ntdsutil.exe command.

  ---

  Reference 1:

  http://technet.microsoft.com/en-us/library/cc794920.aspx

  Compact the Directory Database File (Offline Defragmentation) You can use this procedure to compact the Active Directory database offline. Offline

  defragmentation returns free disk space in the Active Directory database to the file system. As part of the offline defragmentation procedure, check directory

  database integrity. Performing offline defragmentation creates a new, compacted version of the database file in a different location.

  Reference 2:

  Mastering Windows Server 2008 R2 (Sybex, 2010) page 805

  Performing Offline Defragmentation of Ntds.dit

  These steps assume that you will be compacting the Ntds.dit file to a local folder. If you plan to defragment and compact the database to a remote shared folder,

  map a drive letter to that shared folder before you begin these steps, and use that drive letter in the path where appropriate.

  1.

  Open an elevated command prompt. Click Start, and then right-click Command Prompt. Click Run as Administrator.

  2.

  Type ntdsutil, and then press Enter.

  3.

  Type Activate instance NTDS, and press Enter.

  4.

  At the resulting ntdsutil prompt, type Files (case sensitive), and then press Enter.

  5.

  At the file maintenance prompt, type compact to followed by the path to the destination folder for the defragmentation, and then press Enter.

• Question 369:

  Your company uses an application that stores data in an Active Directory Lightweight Directory Services (AD LDS) instance named Instance1. You attempt to create a snapshot of Instance1 as shown in the exhibit. (Click the Exhibit button.)

  

  You need to ensure that you can take a snapshot of Instance1. What should you do?

  A. At the command prompt, run net start VSS.
  B. At the command prompt, run net start Instance1.
  C. Set the Startup Type for the Instance1 service to Disabled.
  D. Set the Startup Type for the Volume Shadow Copy Service (VSS) to Manual.
  A. At the command prompt, run net start VSS.

  ---

  Hard to find references on this, but the solution can be found by eliminating the rest. Instance1 is running, otherwise you'd get a different message at the snaphot:

  create step. ("AD service must be running in order to perform this operation", on my virtual server.) Disabling Instance1 makes no sense because you need it, nor is setting the Startup Type for the Volume Shadow Copy Service (VSS) to

  Manual.

• Question 370:

  Your network contains an Active Directory domain.

  The password policy for the domain is configured as shown in the Current Policy exhibit, (Click the Exhibit button.)

  

  You change the password policy for the domain as shown in the New Policy exhibit. (Click the Exhibit button.)

  

  You need to provide users with examples of a valid password.

  Which password examples should you provide to the users? (Each correct answer presents a complete solution. Choose three.)

  A. 123456!@#$%^
  B. !@#$1234ABCD
  C. passwordl234
  D. 1-2-3-4-5-a-b-c-e
  E. %%PASS1234%%
  F. 111111aaaaaaa
  B. !@#$1234ABCD
  D. 1-2-3-4-5-a-b-c-e
  E. %%PASS1234%%

  ---

  Reference: http://technet.microsoft.com/en-us/library/cc786468.aspx

  Passwords must meet complexity requirements This security setting determines whether passwords must meet complexity requirements. Complexity requirements are enforced when passwords are changed or created. If this policy is enabled, passwords must meet the following minimum requirements when they are changed or created:

  1.

  Passwords must not contain the user's entire samAccountName (Account Name) value or entire displayName (Full Name) value.

  2.

  Passwords must contain characters from three of the following five categories:

  Uppercase characters of European languages (A through Z, with diacritic marks, Greek and Cyrillic characters)

  Lowercase characters of European languages (a through z, sharp-s, with diacritic marks, Greek and Cyrillic characters)

  Base 10 digits (0 through 9)

  Nonalphanumeric characters: ~!@#$%^and*_-+=`|\(){}[]:;"'<>,.?/ Any Unicode character that is categorized as an alphabetic character but is not uppercase or lowercase.

  This includes Unicode characters from Asian languages.