Microsoft 70-640 Practice Test Question 10

Microsoft 70-640 Practice Test Question 10
Your company has an Active Directory domain. A user attempts to log on to a computer that was turned off for twelve weeks. The administrator receives an error message that authentication has failed. You need to ensure that the user is able to log on to the computer. What should you do?

A. Run the netsh command with the set and machine options.
B. Reset the computer account. Disjoin the computer from the domain, and then rejoin the computer to the domain.
C. Run the netdom TRUST /reset command.
D. Run the Active Directory Users and Computers console to disable, and then enable the computer account.

Answer: B
Explanation: To ensure that the administrator can log on to the computer, you should disjoin the computer from the domain and rejoin it again. Reset the computer account too. Due to long inactivity, the computer was not responding to the authentication query using the Active Directory records. So when you disjoin and rejoin the computer to the domain and reset the computer account, the Active Directory refreshes the computer account password. After that the administrator can easily log on to the computer.

Microsoft 70-640 Practice Test Question 9

Microsoft 70-640 Practice Test Question 9
You have two servers named Server1 and Server2. Both servers run Windows Server 2008 R2. Server1 is configured as an enterprise root certification authority (CA). You install the Online Responder role service on Server2. You need to configure Server1 to support the Online Responder. What should you do?

A. Import the enterprise root CA certificate.
B. Add the Server2 computer account to the CertPublishers group.
C. Configure the Authority Information Access (AIA) extension.
D. Configure the Certificate Revocation List Distribution Point extension.

Answer: C
Explanation: To configure online responder role service on S1, you should configure AIA extension. The authority information access extension indicates how to access CA information and services for the issuer of the certificate in which the extension appears. Information and services may include on-line validation services and CA policy data. (The location of CRLs is not specified in this extension; that information is provided by the cRLDistributionPoints extension.) This extension may be included in subject or CA certificates, and it MUST be non-critical

Microsoft 70-640 Practice Test Question 8

Microsoft 70-640 Practice Test Question 8
Your company has an Active Directory domain. All servers run Windows Server 2008 R2. Your company uses an Enterprise Root certificate authority (CA). You need to ensure that revoked certificate information is highly available. What should you do?

A. Implement an Online Certificate Status Protocol (OCSP) responder by using an Internet Security and Acceleration Server array.
B. Publish the trusted certificate authorities list to the domain by using a Group Policy Object (GPO).
C. Implement an Online Certificate Status Protocol (OCSP) responder by using Network Load Balancing.
D. Create a new Group Policy Object (GPO) that allows users to trust peer certificates. Link the GPO to the domain.

Answer: C
Explanation: To ensure that the revoked certificate information is available at all, you should use the network load balancing and publish an OCSP responder. OCSP is an online responder that can receive a request to check for revocation of a certificate without the client having to download the entire CRL. This process speeds up certificate revocation checking and reduces network bandwidth used for this process. This can be helpful especially when such checking is down over slow WAN links.

Microsoft 70-640 Practice Test Question 7

Microsoft 70-640 Practice Test Question 7
Your network consists of an Active Directory forest that contains one domain named contoso.com. All domain controllers run Windows Server 2008 R2 and are configured as DNS servers. You have two Active Directory-integrated zones: contoso.com and nwtraders.com. You need to ensure a user is able to modify records in the contoso.com zone. You must prevent the user from modifying the SOA record in the nwtraders.com zone. What should you do?

A. From the Active Directory Users and Computers console, run the Delegation of Control Wizard.
B. From the Active Directory Users and Computers console, modify the permissions of the Domain Controllers organizational unit (OU).
C. From the DNS Manager console, modify the permissions of the contoso.com zone.
D. From the DNS Manager console, modify the permissions of the nwtraders.com zone.

Answer: C
Explanation: To allow the user to modify records in contoso.com and prevent him/her from modifying the SOA record in contoso.com zone, you should set the permissions of contoso.com through DNS Manager Console. You set the permissions for the users to modify the records in contoso.com. By setting permission on one Active directory-integrated zone, you will be preventing the users from modifying anything else on the other zones.

Microsoft 70-640 Practice Test Question 6

Microsoft 70-640 Practice Test Question 6
Your company has an Active Directory forest that runs at the functional level of Windows Server 2008. You implement Active Directory Rights Management Services (AD RMS). You install Microsoft SQL Server 2005. When you attempt to open the AD RMS administration Web site, you receive the following error message: "SQL Server does not exist or access denied." You need to open the AD RMS administration Web site. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

A. Restart IIS.
B. Manually delete the Service Connection Point in AD DS and restart AD RMS.
C. Install Message Queuing.
D. Start the MSSQLSVC service.

Answer: A,D
Explanation: To rectify the SQL server problem, you have to restart the internet information server (IIS). The IIS server will be refreshed. Then you start the MSSQULSVC service to start the SQL server. This will enable you to access the database from AD RMS administration website.

Microsoft 70-640 Practice Test Question 5

Microsoft 70-640 Practice Test Question 5
Your company has an Active Directory domain. The company has two domain controllers named DC1 and DC2. DC1 holds the Schema Master role. DC1 fails. You log on to Active Directory by using the administrator account. You are not able to transfer the Schema Master operations role. You need to ensure that DC2 holds the Schema Master role. What should you do?

A. Configure DC2 as a bridgehead server.
B. On DC2, seize the Schema Master role.
C. Log off and log on again to Active Directory by using an account that is a member of the Schema Administrators group. Start the Active Directory Schema snap-in.
D. Register the Schmmgmt.dll. Start the Active Directory Schema snap-in.

Answer: B
Explanation: 

To ensure that DC2 holds the Schema Master role, you should seize the Schema Master role on DC2. Seizing the schema master role is a drastic step that should be considered only if the current operations master will never be available again. So to transfer the schema master operations role, you have to seize it on DC2.

Microsoft 70-640 Practice Test Question 4

Microsoft 70-640 Practice Test Question 4
Your company has a server that runs an instance of Active Directory Lightweight Directory Service (AD LDS). You need to create new organizational units in the AD LDS application directory partition. What should you do?

A. Use the dsmod OU <OrganizationalUnitDN> command to create the organizational units.
B. Use the Active Directory Users and Computers snap-in to create the organizational units on the AD LDS application directory partition.
C. Use the dsadd OU <OrganizationalUnitDN> command to create the organizational units.
D. Use the ADSI Edit snap-in to create the organizational units on the AD LDS application directory partition.

Answer: D
Explanation:
To create new OUs in the AD LDS application directory partition, you should use ADSI Edit snap-in. ADSI Edit is a snap-in that runs in a Microsoft Management Console (MMC). The default console containing ADSI Edit is AdsiEdit.msc. If this snap-in is not added in your MMC, you can do it by adding through Add/Remove Snap-in menu option in the MMC or you can open AdsiEdit.msc from a Windows Explorer.

Microsoft 70-640 Practice Test Question 3

Microsoft 70-640 Practice Test Question 3
Your company, Contoso, Ltd., has a main office and a branch office. The offices are connected by a WAN link. Contoso has an Active Directory forest that contains a single domain named ad.contoso.com. The ad.contoso.com domain contains one domain controller named DC1 that is located in the main office. DC1 is configured as a DNS server for the ad.contoso.com DNS zone. This zone is configured as a standard primary zone. You install a new domain controller named DC2 in the branch office. You install DNS on DC2. You need to ensure that the DNS service can update records and resolve DNS queries in the event that a WAN link fails. What should you do?

A. Create a new stub zone named ad.contoso.com on DC2.
B. Create a new standard secondary zone named ad.contoso.com on DC2.
C. Configure the DNS server on DC2 to forward requests to DC1.
D. Convert the ad.contoso.com zone on DC1 to an Active Directory-integrated zone.

Answer: D
Explanation: To make sure that the DNS service on TK2 can update records and resolve DNS queries in the event of a MAN link failure, you should convert maks.contoso.com on TK1 to an Active Directory-integrated zone. Active Directory-integrated DNS offers two pluses over traditional zones. For one, the fault tolerance built into Active Directory eliminates the need for primary and secondary nameservers. Effectively, all nameservers using Active Directory-integrated zones are primary nameservers. This has a huge advantage for the use of dynamic DNS as well: namely, the wide availability of nameservers that can accept registrations. 

Recall that domain controllers and workstations register their locations and availability to the DNS zone using dynamic DNS. In a traditional DNS setup, only one type of nameserver can accept these registrations—the primary server, because it has the only read/write copy of a zone. By creating an Active Directory-integrated zone, all Windows Server 2008 nameservers that store their zone data in Active Directory can accept a dynamic registration, and the change will be propagated using Active Directory multimaster replication.

Microsoft 70-640 Practice Test Question 2

Microsoft 70-640 Practice Test Question 2
Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2. The Audit account management policy setting and Audit directory services access setting are enabled for the entire domain. You need to ensure that changes made to Active Directory objects can be logged. The logged changes must include the old and new values of any attributes. What should you do?

A. Run auditpol.exe and then configure the Security settings of the Domain Controllers OU.
B. From the Default Domain Controllers policy, enable the Audit directory service access setting and enable directory service changes.
C. Enable the Audit account management policy in the Default Domain Controller Policy.
D. Run auditpol.exe and then enable the Audit directory service access setting in the Default Domain policy.

Answer: A
Explanation:
To make sure the changes made to active directory objects are logged and the logs show the old and new values of any attribute, you should run audipol.exe and configure the security settings for the domain controllers Organizational Unit.

Microsoft 70-640 Practice Test Question 1

Microsoft 70-640 Practice Test Question 1
You have a single Active Directory domain. All domain controllers run Windows Server 2008 and are configured as DNS servers. The domain contains one Active Directory-integrated DNS zone. You need to ensure that outdated DNS records are automatically removed from the DNS zone. What should you do?

A. From the properties of the zone, modify the TTL of the SOA record.
B. From the properties of the zone, enable scavenging.
C. From the command prompt, run ipconfig /flushdns.
D. From the properties of the zone, disable dynamic updates.

Answer: B
Explanation:
To remove the outdated DNS records from the DNS zone automatically, you should enable Scavenging through Zone properties. Scavenging will help you clean up old unused records in DNS. Since "clean up" really means "delete stuff" a good understanding of what you are doing and a healthy respect for "delete stuff" will keep you out of the hot grease. Because deletion is involved there are quite a few safety valves built into scavenging that take a long time to pop. When enabling scavenging, patience is required.

Microsoft 70-640 Exam Certifications

Importance of Microsoft 70-640 Exam Certifications

In the modern era of today there are progressively more spirited industries which are getting certified by acknowledged purveyors such as Intel, Microsoft which will considerably inflate people’s chances just like you of getting a better employment, as it is an every person need today to fulfill his needs. The certifications provided by Microsoft and other purveyors will authenticate people like you who have the skills and potential. The employers who have these certifications can straight away see what you can accomplish and know that you can fabricate work to higher eminence levels that Microsoft stipulates from its Certified Exam Software..

To Pass your Microsoft Vertical Big Data Solutions 70-640 in first Attempt

People who are in search for the solution which can easily help them out to pass the Vertical Big Data Solutions Microsoft 70-640 exam dump in first attempt have come to the right place. The PDF format guides available here on our website are written by Exam Software gives a one hundred percent chance for the new comers to pass the Vertical Big Data Solutions Microsoft 70-640 exams in first attempt. On our website there are a lot of questionnaires of Vertical Big Data Solutions Microsoft 70-640 exams which allows the professionals to successfully prepare and pass the Vertical Big Data Solutions Microsoft 70-640 exams Question in first go. People can maximize their chances to pass their IT and Vertical Big Data Solutions Microsoft 70-640 exams by just visiting our website.

PDF guides by Microsoft Exam Software

The content available over here on our website of IT and Vertical Big Data Solutions Microsoft 70-640 exams is written and provided by highly qualified Microsoft lecturers and Professionals who have at least ten to twelve years of experience in the relevant field. This content gives a complete insight for our new Microsoft professionals as it helps them to pass their Vertical Big Data Solutions Microsoft 70-640 exams in first attempt and secure a better job in the IT industry of today. Our content for the Microsoft exam software optimize their chances of success in the Vertical Big Data Solutions Microsoft 70-640 exams. We also guarantee the success and assurance of job by reading our content available of Vertical Big Data Solutions Microsoft 70-640 exams PDF.

Content Availability in Multi-platform Capability

In the IT industry of today, there are people who like to purchase and download content for the successful preparation of Vertical Big Data Solutions Microsoft 70-640 exams search for content which is available in multi platform can easily visit us. The content in the Vertical Big Data Solutions Microsoft 70-640 study guides and solutions are in PDF format which is usually accessible by any device for the help of people all around the world. It means that people will now not have to convert and pay for any sort software which is needed to get complete access to the content. This content availability in multi platform capability allows the people to save their time and money and successful preparation of Vertical Big Data Solutions Microsoft 70-640 exam braindumps.

Tips for Affordable and effective Microsoft 70-640 Exams preparation for Exams Software

There are many people around the world who are in search for tips which are affordable and effective for the Microsoft 70-640 test preparation can easily visit us. We provide a complete and positive widespread and very cost effective solution for the better and improved preparation for Microsoft 70-640 exams. On our website there are PDF preparation guides which are written by the best and highly qualified Microsoft professionals which help the upcoming certified professionals to prepare in a better way to clear their Vertical Big Data Solutions Microsoft 70-640 exam. Our website owner and workers persistently scrutinize our competitors to ensure the possibility as we are offering you the best possible prices and the guides which can be studied instantaneously, which allows the students to save both their time and money.

Where to Purchase and download you’re Vertical Big Data Solutions Microsoft 70-640 guide

There are many people around the world who are in search for the best offer and a place where they can easily purchase or download Vertical Big Data Solutions Microsoft 70-640 demo which can easily help them to pass their Microsoft certifications, as these certifications allows them to get a better job and a bright career. The people who are in search for vertical Big Data Solutions Microsoft 70-640 guide can easily get it from us by a secure payment method through online via PayPal, people can also download the solution and start immediate preparation by just clicking the “Add to Cart” button on our official website page which results directly added to you shopping cart from our website. The purchase or download of Vertical Big Data Solutions Microsoft 70-640 guide from us will allow you to make a prosperous career as Microsoft certified professional.