This page was exported from Braindump2go Free Exam Dumps with PDF and VCE Collection [ https://www.mcitpdump.com ] Export date:Thu Mar 28 16:39:55 2024 / +0000 GMT ___________________________________________________ Title: Free Microsoft 70-640 Practice Test Questions Download From Braindump2go! (171-180) --------------------------------------------------- Braindump2go Guarantees Your Microsoft 70-640 Exam 100% Success with Our Unique Official 70-640 Exam Questions Resources! Braindump2go's 70-640 Braindumps are Developed by Experiences IT Certifications Professionals Working in Today's Prospering Companies and Data Centers! Braindump2go 70-640 Exam Dumps are Checked by Our Experts Team every day to ensure you have the Latest Updated Exam Dumps! Vendor: Microsoft Exam Code: 70-640 Exam Name: TS: Windows Server 2008 Active Directory, Configuring Keywords: 70-640 Exam Dumps,70-640 Practice Tests,70-640 Practice Exams,70-640 Exam Questions,70-640 Dumps,70-640 Dumps PDF,Microsoft 70-640 Exam Dumps,70-640 Questions and Answers,TS: Windows Server 2008 Active Directory, Configuring QUESTION 171You need to ensure that users who enter three successive invalid passwords within 5 minutes are locked out for 5 minutes.Which three actions should you perform? (Each correct answer presents part of the solution. Choose three.) A.    Set the Minimum password age setting to one day.B.    Set the Maximum password age setting to one day.C.    Set the Account lockout duration setting to 5 minutes.D.    Set the Reset account lockout counter after setting to 5 minutes.E.    Set the Account lockout threshold setting to 3 invalid logon attempts.F.    Set the Enforce password history setting to 3 passswords remembered. Answer: CDEExplanation:  QUESTION 172Your network contains an Active Directory domain named contoso.com.The Administrator deletes an OU named OU1 accidentally.You need to restore OU1. Which cmdlet should you use? A.    Set-ADObject cmdlet.B.    Set-ADOrganizationalUnit cmdlet.C.    Set-ADUser cmdlet.D.    Set-ADGroup cmdlet. Answer: AExplanation:http://technet.microsoft.com/en-us/library/dd379509.aspx QUESTION 173Your network contains an Active Directory domain. The domain is configured as shown in the exhibit.You have a Group Policy Object (GPO) linked to the domain.You need to ensure that the settings in the GPO are not processed by user accounts or computer accounts in the Finance organizational unit (OU). You must achieve this goal by using the minimum amount of administrative effort.What should you do? A.    Modify the Group Policy Permission.B.    Configure WMI filtering.C.    Enable block inheritance.D.    Enable loopback processing in replace mode.E.    Configure the link order.F.    Configure Group Policy Preferences.G.    Link the GPO to the Human Resources OU.H.    Configure Restricted Groups.I.    Enable loopback processing in merge mode.J.    Link the GPO to the Finance OU. Answer: CExplanation:http://technet.microsoft.com/en-us/library/cc731076.aspx QUESTION 174Your network contains an Active Directory domain named contoso.com.You have an organizational unit (OU) named Sales and an OU named Engineering.You have two Group Policy objects (GPOs) named GP01 and GPO2. GP01 and GP02 are linked to the Sales OU and contain multiple settings.You discover that GPO2 has a setting that conflicts with a setting in GP01. When the policies are applied, the setting in GPO2 takes effect.You need to ensure that the settings in GP01 supersede the settings in GP02. The solution must ensure that all non-conflicting settings in both GPOs are applied.What should you do? A.    Configure Restricted Groups.B.    Configure the link order.C.    Link the GPO to the Sales OU.D.    Link the GPO to the Engineering OU.E.    Enable loopback processing in merge mode.F.    Modify the Group Policy permissions.G.    Configure WMI Filtering.H.    Configure Group Policy Preferences.I.    Enable loopback processing in replace mode.J.    Enable block inheritance. Answer: B QUESTION 175Your network contains an Active Directory forest.All users have a value set for the Department attribute.From Active Directory Users and Computers, you search a domain for all users who have a Department attribute value of Marketing. The search returns 50 users.From Active Directory Users and Computers, you search the entire directory for all users who have a Department attribute value of Marketing.The search does not return any users.You need to ensure that a search of the entire directory for users in the marketing department returns all of the users who have the Marketing Department attribute.What should you do? A.    Install the Windows Search Service role service on a global catalog server.B.    From the Active Directory Schema snap-in modify the properties of the Department attribute.C.    Install the Indexing Service role service on a global catalog server.D.    From the Active Directory Schema snap-in modify the properties of the user class. Answer: BExplanation:http://technet.microsoft.com/en-us/library/how-global-catalog-servers-work.aspxGlobal Catalog Partial Attribute Set The attributes that are replicated to the global catalog by default include a base set that have been defined by Microsoft as the attributes that are most likely to be used in searches. Administrators can use the Microsoft Management Console (MMC) Active Directory Schema snap-in to specify additional attributes to meet the needs of their installation. In the Active Directory Schema snap-in, you can select the Replicate this attribute to the global catalog check box to designate an attributeSchema object as a member of the PAS, which sets the value of the isMemberOfPartialAttributeSet attribute to TRUE. QUESTION 176Your network contains an Active Directory forest. The forest contains one domain named contoso.com.You discover the following event in the Event log of domain controllers: "The request for a new account-identifier pool failed. The operation will be retried until the request succeeds. The error is " %1 ""You need to ensure that the domain controllers can acquire new account-identifier pools successfully.What should you do? A.    Move the PDC emulator role.B.    Move the schema master role.C.    Move the global catalog server.D.    Move the domain naming master role.E.    Move the infrastructure master role.F.    Move the RID master role.G.    Restart the Active Directory Domain Services (AD DS) service.H.    Deploy an additional global catalog server.I.    Move the bridgehead server.J.    Install a read-only domain controller (RODC). Answer: FExplanation:http://technet.microsoft.com/en-us/library/cc756699.aspx QUESTION 177Your network contains an Active Directory domain named contoso.com.You need to create one password policy for administrators and another password policy for all other users.Which tool should you use? A.    NtdsutilB.    Active Directory Users and ComputersC.    ADSI EditD.    Group Policy Management Console (GPMC) Answer: CExplanation:http://technet.microsoft.com/en-US/library/cc754461.aspxActive Directory Service Interfaces Editor (ADSI Edit) provides a view of every object and attribute in an Active Directory Domain Services (AD DS) forest. You can use ADSI Edit to query, view, and edit AD DS objects and attributes. QUESTION 178Your network contains an Active Directory forest named contoso.com.You need to identify whether a fine-grained password policy is applied to a specific group.Which tool should you use? A.    Active Directory Sites and ServicesB.    Authorization ManagerC.    Local Security PolicyD.    ADSI Edit Answer: D QUESTION 179A corporate network includes an Active Directory-integrated zone. All DNS servers that host the zone are domain controllers.You add multiple DNS records to the zone.You need to ensure that the new records are available on all DNS servers as soon as possible.Which tool should you use? A.    RepadminB.    Active Directory Domains and Trusts consoleC.    LdpD.    Ntdsutil Answer: AExplanation:http://technet.microsoft.com/en-us/library/cc811569.aspx QUESTION 180Your network contains an Active Directory forest named contoso.com. The forest contains two domains named contoso.com and child.contoso.com. The forest contains two sites named Seattle and Denver. Both sites contain users, client computers, and domain controllers from both domains.The Seattle site contains the first domain controller deployed to the forest. The Seattle site also contains the primary domain controller (PDC) emulator for both domains. All of the domain controllers are configured as DNS servers. All DNS zones are replicated to all of the domain controllers in the forest.The users in the Denver site report that is takes a long time to log on to their client computer when they use their user principal name (UPN). The users in the Seattle site do not experience the same issue.You need to reduce the amount of time it takes for the Denver users to log on to their client computer by using their UPN.What should you do? A.    Reduce the cost of the site link between the Denver site and the Seattle site.B.    Enable the global catalog on a domain controller in the Denver site.C.    Enable universal group membership caching in the Denver site.D.    Move a PDC emulator to the Denver site.E.    Reduce the replication interval of the site link between the Denver site and the Seattle site.F.    Add an additional domain controller to the Denver site. Answer: BExplanation:http://technet.microsoft.com/en-us/library/cc728188.aspx Braindump2go Promise All 70-640 Questions and Answers are the Latest Updated,we aim to provide latest and guaranteed questions for all certifications.You just need to be braved in trying then we will help you arrange all left things! 100% Pass All Exams you want Or Full Money Back! Do yo want to have a try on passing 70-640?   http://www.braindump2go.com/70-640.html --------------------------------------------------- Images: --------------------------------------------------- --------------------------------------------------- Post date: 2015-04-15 07:37:48 Post date GMT: 2015-04-15 07:37:48 Post modified date: 2015-04-15 07:37:48 Post modified date GMT: 2015-04-15 07:37:48 ____________________________________________________________________________________________ Export of Post and Page as text file has been powered by [ Universal Post Manager ] plugin from www.gconverters.com