70-640 Practice Exams

  • Download Free Microsoft 70-640 PDF and VCE Updated Today 551-560

    Vendor: Microsoft
    Exam Code: 70-640
    Exam Name: TS: Windows Server 2008 Active Directory, Configuring
    Version: 14.91

    QUESTION 551
    Your network contains an Active Directory domain named contoso.com. The network contains a public key infrastructure (PKI). You deploy a new certificate revocation list (CRL) distribution point (CDP) to a server named Server1. You discover that users cannot download delta CRLs from Server1. You verify that the users can download the complete CRL successfully. You need to ensure that the users can download delta CRLs from Server1. Which command should you run?

    A.    Appcmd set config "Default Web Site"
    /section:system.webServer/Security/requestFiltering -allowDoubleEscaping:True
    B.    Appcmd set config "Certificates" /section:system.webServer/Security/requestFiltering – allowDoubleEscaping:
    False
    C.    Certutil -setreg CA\CRLDeltaPeriod "Days"
    D.    Certutil -setreg CA\CRLOverlapPeriod "Days"

    Answer: A

    (more…)

  • Download Free Microsoft 70-640 PDF and VCE Updated Today 521-530

    Vendor: Microsoft
    Exam Code: 70-640
    Exam Name: TS: Windows Server 2008 Active Directory, Configuring
    Version: 14.91

    QUESTION 521
    Your network contains an Active Directory domain. The domain contains four domain controllers. You create a new application directory partition. You need to ensure that the new application directory partition replicates to only three of the domain controllers. Which tool should you use?

    A.    Active Directory Administrative Center
    B.    Dsamain
    C.    Dsmod
    D.    Ntdsutil

    Answer: D

    (more…)

  • Download Free Microsoft 70-640 PDF and VCE Updated Today 531-540

    Vendor: Microsoft
    Exam Code: 70-640
    Exam Name: TS: Windows Server 2008 Active Directory, Configuring
    Version: 14.91

    QUESTION 531
    Your network consists of an Active Directory forest that contains one domain named contoso.com. All domain controllers run Windows Server 2008 R2 and are configured as DNS servers.
    You have two Active Directory-integrated zones: contoso.com and nwtraders.com.
    You need to ensure a user is able to modify records in the nwtraders.com zone.
    The solution must prevent the user from modifying the SOA record in the contoso.com zone.
    What should you do?

    A.    From the DNS Manager console, modify the permissions of the nwtraders.com zone.
    B.    From the DNS Manager console, modify the permissions of the contoso.com zone.
    C.    From the Active Directory Users and Computers console, run the Delegation of Control Wizard.
    D.    From the Active Directory Users and Computers console, modify the permissions of the Domain Controllers organizational unit (OU).

    Answer: A

    (more…)

  • Download Free Microsoft 70-640 PDF and VCE Updated Today 501-510

    Vendor: Microsoft
    Exam Code: 70-640
    Exam Name: TS: Windows Server 2008 Active Directory, Configuring
    Version: 14.91

    QUESTION 501
    Your network contains an Active Directory forest named contoso.com. The functional level of the forest is Windows Server 2008 R2. You have four Active Directory sites. Each site has multiple Active Directory subnets.
    You need to identify all of the authentication requests that originate from client computers that are not associated to an Active Directory subnet.
    What should you use?

    A.    The %Systemroot%\System32\Network_llu.log log file
    B.    The %Systemroot%\Debug\Netsetup.log log file
    C.    The Authentication User Interface operational log
    D.    The %Systemroot%\Debug\Netlogon.log log file

    Answer: B

    (more…)

  • Download Free Microsoft 70-640 PDF and VCE Updated Today 511-520

    Vendor: Microsoft
    Exam Code: 70-640
    Exam Name: TS: Windows Server 2008 Active Directory, Configuring
    Version: 14.91

    QUESTION 511
    Your network contains an Active Directory domain. The domain contains five sites. One of the sites contains a read-only domain controller (RODC) named RODC1. You need to identify which user accounts can have their password cached on RODC1. Which tool should you use?

    A.    Ntdsutil
    B.    Dcdiag
    C.    Repadmin
    D.    Get-ADAccountResultantPasswordReplicationPolicy

    Answer: A

    (more…)

  • Download Free Microsoft 70-640 PDF and VCE Updated Today 491-500

    Vendor: Microsoft
    Exam Code: 70-640
    Exam Name: TS: Windows Server 2008 Active Directory, Configuring
    Version: 14.91

    QUESTION 491
    Your network contains an Active Directory forest named contoso.com. You need to identify whether a fine-grained password policy is applied to a specific group.
    Which tool should you use?

    A.    Active Directory Users and Computers
    B.    Security Configuration Wizard (SCW)
    C.    Group Policy Management Editor
    D.    Active Directory Sites and Services

    Answer: A

    (more…)

  • Download Free Microsoft 70-640 PDF and VCE Updated Today 481-490

    Vendor: Microsoft
    Exam Code: 70-640
    Exam Name: TS: Windows Server 2008 Active Directory, Configuring
    Version: 14.91

    QUESTION 481
    You are the systems administrator for a medium-sized Active Directory domain. Currently, the environment supports many different domain controllers, some of which are running Windows NT 4 and others that are running Windows 2003 and Server 2008 R2. When you are running domain controllers in this type of environment, which of the following types of groups can you not use?
    (Choose Two)

    A.    Universal security groups
    B.    Global groups
    C.    Domain local groups
    D.    Computer groups

    Answer: AD

    (more…)

  • Download Free Microsoft 70-640 PDF and VCE Updated Today 461-470

    Vendor: Microsoft
    Exam Code: 70-640
    Exam Name: TS: Windows Server 2008 Active Directory, Configuring
    Version: 14.91

    QUESTION 461
    Your network contains an Active Directory forest. The forest contains domain controllers that run Windows Server 2008 R2. The functional level of the forest is Windows Server 2003. The functional level of the domain is Windows Server 2008.
    From a domain controller, you need to perform an authoritative restore of an organizational unit (OU).
    What should you do first?

    A.    Raise the functional level of the forest
    B.    Modify the tombstone lifetime of the forest.
    C.    Restore the system state.
    D.    Raise the functional level of the domain.

    Answer: C

    (more…)

Posts navigation