This page was exported from Braindump2go Free Exam Dumps with PDF and VCE Collection [ https://www.mcitpdump.com ] Export date:Tue Apr 23 14:02:28 2024 / +0000 GMT ___________________________________________________ Title: Study Latest Braindump2go 70-640 Practice Exam Questions From Today Pass 70-640 Easily! (341-350) --------------------------------------------------- 2015 Latest 70-640 Real exam questions to master and practice upon! Braindump2go Offers the New Updated Microsoft 70-640 651 Exam Questions in PDF & VCE files that can also be downloaded on every mobile device for preparation! Vendor: Microsoft Exam Code: 70-640 Exam Name: TS: Windows Server 2008 Active Directory, Configuring Keywords: 70-640 Exam Dumps,70-640 Practice Tests,70-640 Practice Exams,70-640 Exam Questions,70-640 Dumps,70-640 Dumps PDF,Microsoft 70-640 Exam Dumps,70-640 Questions and Answers,TS: Windows Server 2008 Active Directory, Configuring QUESTION 341Your network contains an Active Directory domain named contoso.com. Contoso.com contains a member server that runs Windows Server 2008 R2 Standard.You need to create an enterprise subordinate certification authority (CA) that can issue certificates based on version 3 certificate templates.You must achieve this goal by using the minimum amount of administrative effort.What should you do first? A.    Run the certutil.exe - addenrollmentserver command.B.    Install the Active Directory Certificate Services (AD CS) role on the member server.C.    Upgrade the member server to Windows Server 2008 R2 Enterprise.D.    Run the certutil.exe - installdefaulttemplates command. Answer: C QUESTION 342Your network contains a server named Server1. The Active Directory Rights Management Services (AD RMS) server role is installed on Server1.An administrator changes the password of the user account that is used by AD RMS. You need to update AD RMS to use the new password.Which console should you use? A.    Active Directory Rights Management ServicesB.    Active Directory Users and ComputersC.    Local Users and GroupsD.    Services Answer: AExplanation:http://social.technet.microsoft.com/wiki/contents/articles/13034.ad-rms-how-to-change-the-rms-serviceaccount-password.aspxAD RMS How To: Change the RMS Service Account PasswordThe Active Directory Rights Management Services management console provides a wizard to change or update the AD RMS service account. The most common use for this process is to update the service account password when it has been changed.It is important to use this process to update or change the AD RMS service account. This ensures the necessary components are updated properly. QUESTION 343Your company, Contoso, Ltd., has a main office and a branch office. The offices are connected by a WAN link. Contoso has an Active Directory forest that contains a single domain named ad.contoso.com.The ad.contoso.com domain contains one domain controller named DC1 that is located in the main office. DC1 is configured as a DNS server for the ad.contoso.com DNS zone. This zone is configured as a standard primary zone.You install a new domain controller named DC2 in the branch office. You install DNS on DC2.You need to ensure that the DNS service can update records and resolve DNS queries in the event that a WAN link fails.What should you do? A.    Create a new secondary zone named ad.contoso.com on DC2.B.    Create a new stub zone named ad.contoso.com on DC2.C.    Configure the DNS server on DC2 to forward requests to DC1.D.    Convert the ad.contoso.com zone on DC1 to an Active Directory-integrated zone. Answer: DExplanation:Three answers don't make sense, leaving us with the one that works. Create a new secondary zone named ad.contoso.com on DC2. This would create a read-only zone, so it couldn't be updated Create a new stub zone named ad.contoso.com on DC2. This stub zone would contain source information about authoritative name servers for its zone only, being DC1, but that one would be unavailable in the WAN link fails. Configure the DNS server on DC2 to forward requests to DC1. This doesn't help if the WAN link fails and DC1 is unavailable. QUESTION 344Your network contains an enterprise certification authority (CA) that runs Windows Server 2008 R2 Enterprise.You enable key archival on the CA. The CA is configured to use custom certificate templates for Encrypted File System (EFS) certificates.You need to archive the private key for all new EFS certificates.Which snap-in should you use? A.    Active Directory Users and ComputersB.    Authorization ManagerC.    Group Policy ManagementD.    Enterprise PKIE.    Security TemplatesF.    TPM ManagementG.    CertificatesH.    Certification AuthorityI.    Certificate Templates Answer: IExplanation:http://technet.microsoft.com/en-us/library/cc753826.aspx QUESTION 345Your network contains an enterprise certification authority (CA) that runs Windows Server 2008 R2 Enterprise.You need to ensure that all of the members of a group named Group1 can view the event log entries for Certificate Services.Which snap-in should you use? A.    Certificate TemplatesB.    Certification AuthorityC.    Authorization ManagerD.    Active Directory Users and ComputersE.    TPM ManagementF.    Security TemplatesG.    Group Policy ManagementH.    Enterprise PKII.    Certificates Answer: G QUESTION 346Your network contains an enterprise certification authority (CA) that runs Windows Server 2008 R2 Enterprise.You need to ensure that users can enroll for certificates that use the IPSEC (Offline request) certificate templateWhich snap-in should you use? A.    Enterprise PKIB.    TPM ManagementC.    CertificatesD.    Active Directory Users and ComputersE.    Authorization ManagerF.    Certification AuthorityG.    Group Policy ManagementH.    Security TemplatesI.    Certificate Templates Answer: I QUESTION 347Your network contains an enterprise certification authority (CA) that runs Windows Server 2008 R2 Enterprise.You have a custom certificate template named Template 1. Template1 is published to the CA.You need to ensure that all of the members of a group named Group1 can enroll for certificates that use Template1.Which snap-in should you use? A.    Security TemplatesB.    Enterprise PKIC.    Certification AuthorityD.    Certificate TemplatesE.    CertificatesF.    TPM ManagementG.    Authorization ManagerH.    Group Policy ManagementI.    Active Directory Users and Computers Answer: D QUESTION 348Your network contains an enterprise certification authority (CA) that runs Windows Server 2008 R2 Enterprise.You need to approve a pending certificate request.Which snap-in should you use? A.    Active Directory Users and ComputersB.    Authorization ManagerC.    Certification AuthorityD.    Group Policy ManagementE.    Certificate TemplatesF.    TPM ManagementG.    CertificatesH.    Enterprise PKII.    Security Templates Answer: C QUESTION 349Your network contains an Active Directory domain. The domain contains a domain controller named DC1 that runs windows Server 2008 R2 Service Pack 1 (SP1).You need to implement a central store for domain policy templates.What should you do? To answer, select the source content that should be copied to the destination folder in the answer area. Answer:   QUESTION 350Your network contains an Active Directory forest named contoso.com.You plan to migrate all user accounts to a new forest named litwareinc.com.The functional level of the contoso.com forest is Windows Server 2003. Contoso.com contains four servers. The servers are configured as shown in the following table. The functional level of the litwareinc.com forest is Windows Server 2008. Litwareinc.com contains four servers. The servers are configured as shown in the following table. You need to identify on which server in the litwareinc.com forest you must install Active Directory Migration Tool version 3.2 (ADMT v3.2).Which server should you identify? A.    Litw_Srv4B.    Litw_Srv1C.    Litw_Srv2D.    Litw_Srv3 Answer: DExplanation:http://technet.microsoft.com/en-us/library/cc974370.aspx 70-640 Updated Questions are 2015 Latest Released Which 100% will Meet in Your 70-640 Test! Braindump2go New Released 70-640 Exam Dumps Contain All New Added Questions Which Will Help you Have A Totally Success in 2015 New Tear! Download our 100% Pass Guaranteed 70-640 Exam Dumps Full Version, special 10% Off Discount enjoyed!   http://www.braindump2go.com/70-640.html --------------------------------------------------- Images: --------------------------------------------------- --------------------------------------------------- Post date: 2015-04-17 05:56:26 Post date GMT: 2015-04-17 05:56:26 Post modified date: 2015-04-17 05:56:26 Post modified date GMT: 2015-04-17 05:56:26 ____________________________________________________________________________________________ Export of Post and Page as text file has been powered by [ Universal Post Manager ] plugin from www.gconverters.com