Microsoft 70-640 - Windows Server 2008 Active Directory, Configuring Exam
Page: 3 / 127
Total 631 questions
Question #11 (Topic: Topic 1)
Your company has two Active Directory forests named Forest1 and Forest2, The forest
functional level and the domain functional level of Forest1 are set to Windows Server 2008.
The forest functional level of Forest2 is set to Windows 2000, and the domain functional
levels in Forest2 are set to Windows Server 2003.
You need to set up a transitive forest trust between Forest1 and Forest2.
What should you do first?
functional level and the domain functional level of Forest1 are set to Windows Server 2008.
The forest functional level of Forest2 is set to Windows 2000, and the domain functional
levels in Forest2 are set to Windows Server 2003.
You need to set up a transitive forest trust between Forest1 and Forest2.
What should you do first?
A. Raise the forest functional level of Forest2 to Windows Server 2003 Interim mode.
B. Raise the forest functional level of Forest2 to Windows Server 2003.
C. Upgrade the domain controllers in Forest2 to Windows Server 2008.
D. Upgrade the domain controllers in Forest2 to Windows Server 2003.
Answer: B
Question #12 (Topic: Topic 1)
Your company has an Active Directory domain.
You plan to install the Active Directory Certificate Services (AD CS) server role on a
member server that runs Windows Server 2008 R2.
You need to ensure that members of the Account Operators group are able to issue
smartcard credentials.They should not be able to revoke certificates.
Which three actions should you perform? (Each correct answer presents part of the
solution. Choose three.)
You plan to install the Active Directory Certificate Services (AD CS) server role on a
member server that runs Windows Server 2008 R2.
You need to ensure that members of the Account Operators group are able to issue
smartcard credentials.They should not be able to revoke certificates.
Which three actions should you perform? (Each correct answer presents part of the
solution. Choose three.)
A. Create an Enrollment Agent certificate.
B. Create a Smartcard logon certificate.
C. Restrict enrollment agents for the Smartcard logon certificate to the Account Operator group.
D. Install the AD CS role and configure it as an Enterprise Root CA.
E. Install the AD CS role and configure it as a Standalone CA.
F. Restrict certificate managers for the Smartcard logon certificate to the Account Operator group.
Answer: B,C,D
Question #13 (Topic: Topic 1)
Your company has an Active Directory domain. All servers run Windows Server 2008 R2.
Your company runs an Enterprise Root certification authority (CA).
You need to ensure that only administrators can sign code.
Which two tasks should you perform? (Each correct answer presents part of the solution.
Choose two.)
Your company runs an Enterprise Root certification authority (CA).
You need to ensure that only administrators can sign code.
Which two tasks should you perform? (Each correct answer presents part of the solution.
Choose two.)
A. Edit the local computer policy of the Enterprise Root CA to allow only administrators to manage Trusted Publishers.
B. Modify the security settings on the template to allow only administrators to request code signing certificates.
C. Edit the local computer policy of the Enterprise Root CA to allow users to trust peer certificates and allow only administrators to apply the policy.
D. Publish the code signing template.
Answer: B,D
Question #14 (Topic: Topic 1)
Your company purchases a new application to deploy on 200 computers. The application
requires that you modify the registry on each target computer before you install the
application.
The registry modifications are in a file that has an .adm extension.
You need to prepare the target computers for the application.
What should you do?
requires that you modify the registry on each target computer before you install the
application.
The registry modifications are in a file that has an .adm extension.
You need to prepare the target computers for the application.
What should you do?
A. Import the .adm file into a new Group Policy Object (GPO). Edit the GPO and link it to an organizational unit that contains the target computers.
B. Create a Microsoft Windows PowerShell script to copy the .adm file to each computer. Run the REDIRUsr CONTAINER-DN command on each target computer.
C. Create a Microsoft Windows PowerShell script to copy the .adm file to the startup folder of each target computer.
D. Create a Microsoft Windows PowerShell script to copy the .adm file to each computer. Run the REDIRCmp CONTAINER-DN command on each target computer.
Answer: A
Question #15 (Topic: Topic 1)
Your company has an Active Directory domain. A user attempts to log on to a computer
that was turned off for twelve weeks. The administrator receives an error message that
authentication has failed.
You need to ensure that the user is able to log on to the computer.
What should you do?
that was turned off for twelve weeks. The administrator receives an error message that
authentication has failed.
You need to ensure that the user is able to log on to the computer.
What should you do?
A. Run the netsh command with the set and machine options.
B. Reset the computer account. Disjoin the computer from the domain, and then rejoin the computer to the domain.
C. Run the netdom TRUST /reset command.
D. Run the Active Directory Users and Computers console to disable, and then enable the computer account.
Answer: B
