[Free] 2018(Aug) Dumps4cert Microsoft 70-640 Dumps with VCE and PDF Download 361-370

Dumps4cert.com : Latest Dumps with PDF and VCE Files
2018 Aug Microsoft Official New Released 70-640
100% Free Download! 100% Pass Guaranteed!

Windows Server 2008 Active Directory, Configuring

Question No: 361 – (Topic 4)

Your network contains an Active Directory forest named contoso.com. The forest contains four computers. The computers are configured as shown in the following table.

Dumps4Cert 2018 PDF and VCE

An administrator creates a script that contains the following commands:

Dumps4Cert 2018 PDF and VCE

You need to identity which computers can successfully run all of the commands in the script.

Which two computers should you identify? (Each correct answer presents part of the solution. Choose two.)

  1. Computer1

  2. Server1

  3. Computer2

  4. Server2

Answer: C,D Explanation:

Original answer was B, D (quot;Server1quot;, quot;Server2quot;).

According to Technet the quot;Auditpol /resourceSACLquot; command applies only to Windows 7 and Windows

Server 2008 R2 (and I suppose Windows 8 and Windows Server 2012), so the answer should be Computer2 and Server2



Auditpol resourceSACL

Applies only to Windows 7 and Windows Server 2008 R2.

Question No: 362 – (Topic 4)

You have a DNS zone that is stored in a custom application partition.

You need to add a domain controller to the replication scope of the custom application partition.

Which tool should you use?

  1. DNScmd

  2. DNS Manager

  3. Server Manager

  4. Dsmod

    Answer: A



    After you create a Domain Name System (DNS) application directory partition to store a zone, you must enlist the DNS server that hosts the zone in the application directory partition.

    To enlist a DNS server in a DNS application directory partition

    1. Open a command prompt.

    2. Type the following command, and then press ENTER: dnscmd lt;ServerNamegt; / EnlistDirectoryPartition lt;FQDNgt;

      Question No: 363 – (Topic 4)

      Your network contains an Active Directory forest named contoso.com. The functional level of the forest is Windows Server 2008 R2.

      The DNS zone for contoso.com is Active Directory-integrated.

      You deploy a read-only domain controller (RODC) named RODC1. You install the DNS Server server role on RODC1.

      You discover that RODC1 does not have any DNS application directory partitions.

      You need to ensure that RODC1 has a copy of the DNS application directory partition of contoso.com.

      What should you do? (Each correct answer presents a complete solution. Choose two.)

      1. From DNS Manager, right-click RODC1 and click Create Default Application Directory Partitions.

      2. Run ntdsutil.exe. From the Partition Management context, run the create nc command.

      3. Run dnscmd.exe and specify the /createbuiltindirectorypartitions parameter.

      4. Run ntdsutil.exe. From the Partition Management context, run the add nc replica command.

      5. Run dnscmd.exe and specify the /enlistdirectorypartition parameter.

        Answer: D,E



        RODC Post-Installation Configuration

        If you install DNS server after the AD DS installation, you must also enlist the RODC in the DNS application directory partitions. The RODC is not enlisted automatically in the DNS application directory partitions by design because it is a privileged operation. If the RODC were allowed to enlist itself, it would have permissions to add or remove other DNS servers that are enlisted in the application directory partitions.

        To enlist a DNS server in a DNS application directory partition

        1. Open an elevated command prompt.

        2. At the command prompt, type the following command, and then press ENTER: dnscmdlt;ServerNamegt; /EnlistDirectoryPartition lt;FQDNgt;

For example, to enlist RODC01 in the domain-wide DNS application directory partition in a domain named child.contoso.com, type the following command:

dnscmd RODC01 /EnlistDirectoryPartition DomainDNSZones.child.contoso.com You might encounter the following error when you run this command: Command failed: ERROR_DS_COULDNT_CONTACT_FSMO 8367 0x20AF

If this error appears, use NTDSUTIL to add the RODC for the partition to be replicated:

  1. ntdsutil

  2. partition management

  3. connections

  4. Connect to a writeable domain controller (not an RODC): connect to server


  5. quit

  6. To enlist this server in the replication scope for this zone, run the following command: add NC Replica DC=DomainDNSZones,DC=Child,DC=Contoso,DC=Com lt;rodc Servergt;.Child.


    Original explanation:

    Please Check but I think this should be A and C and not A and D. I have changed it to A and C.

    Reason: Once the application directory partition is created, contoso.com should replicate to it.

    Dnscmd /enlistdirectorypartition — Adds the DNS server to the specified directory partition#39;s replica set.

    Dnscmd /createbuiltindirectorypartitions Creates a DNS application directory partition. When DNS is installed, an application directory partition for the service is created at the forest and domain levels. Use this command to create DNS application directory partitions that were deleted or never created. With no parameter, this command creates a built-in DNS directory partition for the domain.

    To create the default DNS application directory partitions Using the Windows interface

    Open DNS.

    In the console tree, right-click the applicable DNS server. Where?

    DNS/applicable DNS server

    Click Create Default Application Directory Partitions.

    Follow the instructions to create the DNS application directory partitions.

    Question No: 364 – (Topic 4)

    Your network contains an Active Directory domain. You have five organizational units (OUs) named Finance, HR, Marketing, Sales, and Dev. You link a Group Policy object named GPO1 to the domain as shown in the exhibit. (Click the Exhibit button.)

    Dumps4Cert 2018 PDF and VCE

    You need to ensure that GPO1 is applied to users in the Finance, HR, Marketing, and Sales OUs.

    The solution must prevent GPO1 from being applied to users in the Dev OU. What should you do?

    1. Enforce GPO1.

    2. Modify the security settings of the Dev OU.

    3. Link GPO1 to the Finance OU.

    4. Modify the security settings of the Finance OU.

Answer: C Explanation:

The OUs that are indicated by a blue exclamation mark in the console tree have blocked inheritance. This means that GPO1 will not be applied to those OUs. For the Dev OU that#39;s ok, but not for the Finance OU. So we have to link GPO1 to the Finance OU.



Block Inheritance

You can block inheritance for a domain or organizational unit. Blocking inheritance prevents Group Policy objects (GPOs) that are linked to higher sites, domains, or organizational units from being automatically inherited by the child-level.

If a domain or OU is set to block inheritance, it will appear with a blue exclamation mark in the console tree.

Question No: 365 – (Topic 4)

Your network contains three servers named ADFS1, ADFS2, and ADFS3 that run Windows Server 2008 R2. ADFS1 has the Active Directory Federation Services (AD FS) Federation Service role service installed.

You plan to deploy AD FS 2.0 on ADFS2 and ADFS3.

You need to export the token-signing certificate from ADFS1, and then import the certificate to ADFS2 and ADFS3.

In which format should you export the certificate?

  1. Personal Information Exchange PKCS #12 (.pfx)

  2. DER encoded binary X.509 (.cer)

  3. Cryptographic Message Syntax Standard PKCS #7 (.p7b)

  4. Base-64 encoded X.S09 (.cer)

Answer: A Explanation:

Reference 1:


Checklist: Migrating Settings in the AD FS 1.x Federation Service to AD FS 2.0

If the AD FS 1.x Federation Service has a token-signing certificate that was issued by a trusted certification authority (CA) and you want to reuse it, you will have to export it from AD FS 1.x.

[The site provides also a link for instructions on how to export the token-signing certificate. That link point to the site mentioned in reference 2.]

Reference 2:


Export the private key portion of a token-signing certificate

To export the private key of a token-signing certificate

->Click Start, point to Administrative Tools, and then click Active Directory Federation Services.

->Right-click Federation Service, and then click Properties.

->On the General tab, click View.

->In the Certificate dialog box, click the Details tab.

->On the Details tab, click Copy to File.

->On the Welcome to the Certificate Export Wizard page, click Next.

->On the Export Private Key page, select Yes, export the private key, and then click Next.

->On the Export File Format page, selectPersonal Information Exchange = PKCS

#12 (.PFX), and then click Next.


Question No: 366 – (Topic 4)

Your network contains a domain controller that runs Windows Server 2008 R2. You run the following command on the domain controller:

dsamain.exe C dbpath c:\$SNAP_201006170326_VOLUMEC$\Windows\NTDS\ntds.dit C ldapport 389 -allowNonAdminAccess

The command fails.

You need to ensure that the command completes successfully. How should you modify the command?

  1. Change the value of the -dbpath parameter.

  2. Include the path to Dsamain.

  3. Change the value of the -ldapport parameter.

  4. Remove the CallowNonAdminAccess parameter.

Answer: C


MS Press – Self-Paced Training Kit (Exam 70-640) (2nd Edition, July 2012) page 690

Use the AD DS database mounting tool to load the snapshot as an LDAP server. dsamain -dbpath c:\$SNAP_datetime_VOLUMEC$\windows\ntds\ntds.dit -ldapport portnumber

Be sure to use ALL CAPS for the -dbpath value and use any number beyond 40,000 for the

-ldapport value to ensure that you do not conflict with AD DS.

Also note that you can use the minus (-) sign or the slash (/) for the options in the command.

Question No: 367 – (Topic 4)

Your network contains an Active Directory forest named contoso.com.

You plan to migrate all user accounts to a new forest named litwareinc.com.

The functional level of the contoso.com forest is Windows Server 2003. Contoso.com contains four servers.

The servers are configured as shown in the following table.

Dumps4Cert 2018 PDF and VCE

The functional level of the litwareinc.com forest is Windows Server 2008. Litwareinc.com contains four servers.

The servers are configured as shown in the following table.

Dumps4Cert 2018 PDF and VCE

You need to identify on which server in the litwareinc.com forest you must install Active Directory Migration Tool version 3.2 (ADMT v3.2).

Which server should you identify?

  1. Litw_Srv4

  2. Litw_Srv1

  3. Litw_Srv2

  4. Litw_Srv3

Answer: D



Prerequisites for installing ADMT v3.2

Although you can use ADMT v3.2 to migrate accounts and resources from Active Directory environments that have a domain functional level of Windows Server 2003 or later, you can install ADMT v3.2 only on a server running Windows Server 2008 R2.

In addition to running Windows Server 2008 R2, the server computer that you use to install ADMT v3.2 must not be installed under the Server Core installation option or be running as a read-only domain controller (RODC).

Question No: 368 – (Topic 4)

Your network contains an Active Directory forest. The forest contains one domain named contoso.com.

You attempt to create a new child domain and you receive the following error message: quot;An LDAP read of operational attributes failed.quot;

You need to ensure that you can add a new child domain to the forest. What should you do?

  1. Move the PDC emulator role.

  2. Move the RID master role.

  3. Move the infrastructure master role.

  4. Move the schema master role.

  5. Move the domain naming master role.

  6. Move the global catalog server.

  7. Move the bridgehead server.

  8. Install a read-only domain controller (RODC).

  9. Deploy an additional global catalog server.

  10. Restart the Active Directory Domain Services (AD DS) service.

Answer: E Explanation:

This message appears when the domain naming master is unavailable. It needs to be moved to another domain controller to resolve this.


http://technet.microsoft.com/en-us/library/bb727058.aspx Troubleshooting Active Directory Installation Wizard Problems

Symptom or Error

An LDAP read of operational attributes failed. Root Cause

The domain naming master for the forest is offline or cannot be contacted.

Solution Make the current domain naming master accessible. If necessary, see quot;Seizing Operations Master Rolesquot; in this guide.

Question No: 369 – (Topic 4)

Your network contains a server that has the Active Directory Lightweight Directory Services (AD LDS) role installed.

You need to perform an automated installation of an AD LDS instance. Which tool should you use?

  1. Dism.exe

  2. Servermanagercmd.exe

  3. Adaminstall.exe

  4. Ocsetup.exe

    Answer: C


    http://technet.microsoft.com/en-us/library/cc816774.aspx To perform an unattended install of an AD LDS instance

    1. Create a new text file by using any text editor.

    2. Specify the installation parameters.

    3. At a command prompt (or in a batch or script file), change to the drive and directory that contains the AD LDS setup files.

    4. At the command prompt, type the following command, and then press ENTER:


      \adaminstall.exe /answer:drive:\lt;pathnamegt;\lt;filenamegt;.txtquot;

      Question No: 370 – (Topic 4)

      Your network contains an Active Directory domain named adatum.com. The functional level of the domain is Windows Server 2003. All domain controllers run Windows Server 2008 R2.

      You mount an Active Directory snapshot.

      You need to ensure that you can connect to the snapshot by using LDAP.

      What should you do?

      1. Run the Get-ADDomain cmdlet.

      2. Run the dsget.exe command.

      3. Run the ntdsutil.exe command.

      4. Run the ocsetup.exe command.

      5. Run the dsamain.exe command.

      6. Run the eventcreate.exe command,

      7. Create a Data Collector Set (DCS).

      8. Create custom views from Event Viewer.

      9. Configure subscriptions from Event Viewer.

      10. Import the Active Directory module for Windows PowerShell.

Answer: E



The Active Directory database mounting tool (Dsamain.exe) can improve recovery processes for your organization by providing a means to compare data as it exists in snapshots that are taken at different times so that you can better decide which data to restore after data loss. This eliminates the need to restore multiple backups to compare the Active Directory data that they contain.

Requirements for using the Active Directory database mounting tool

You do not need any additional software to use the Active Directory database mounting tool. All the tools that are required to use this feature are built into Windows Server 2008 and are available if you have the AD DS or the AD LDS server role installed. These tools include the following: (…)

Dsamain.exe, which you can use to expose the snapshot data as an LDAP server Existing LDAP tools, such as Ldp.exe and Active Directory Users and Computers

100% Dumps4cert Free Download!
70-640 PDF
100% Dumps4cert Pass Guaranteed!
70-640 Dumps

Dumps4cert ExamCollection Testking
Lowest Price Guarantee Yes No No
Up-to-Dated Yes No No
Real Questions Yes No No
Explanation Yes No No
Free VCE Simulator Yes No No
Instant Download Yes No No

Leave a Reply

Your email address will not be published. Required fields are marked *

  • Categories

  • Tags

  • Hot Exams

  • Hot Exams

  • Hot Catageories

  • microsoft dumps

    62-193 Dumps
    70-243 Dumps
    70-246 Dumps
    70-247 Dumps
    70-331 Dumps
    70-332 Dumps
    70-333 Dumps
    70-334 Dumps
    70-339 Dumps
    70-341 Dumps
    70-342 Dumps
    70-345 Dumps
    70-346 Dumps
    70-347 Dumps
    70-348 Dumps
    70-354 Dumps
    70-355 Dumps
    70-357 Dumps
    70-383 Dumps
    70-384 Dumps
    70-385 Dumps
    70-398 Dumps
    70-410 Dumps
    70-411 Dumps
    70-412 Dumps
    70-413 Dumps
    70-414 Dumps
    70-417 Dumps
    70-461 Dumps
    70-462 Dumps
    70-463 Dumps
    70-464 Dumps
    70-465 Dumps
    70-466 Dumps
    70-467 Dumps
    70-469 Dumps
    70-470 Dumps
    70-473 Dumps
    70-475 Dumps
    70-480 Dumps
    70-481 Dumps
    70-482 Dumps
    70-483 Dumps
    70-484 Dumps
    70-485 Dumps
    70-486 Dumps
    70-487 Dumps
    70-488 Dumps
    70-489 Dumps
    70-490 Dumps
    70-491 Dumps
    70-492 Dumps
    70-494 Dumps
    70-496 Dumps
    70-497 Dumps
    70-498 Dumps
    70-499 Dumps
    70-517 Dumps
    70-532 Dumps
    70-533 Dumps
    70-534 Dumps
    70-535 Dumps
    70-537 Dumps
    70-640 Dumps
    70-642 Dumps
    70-646 Dumps
    70-673 Dumps
    70-680 Dumps
    70-681 Dumps
    70-682 Dumps
    70-684 Dumps
    70-685 Dumps
    70-686 Dumps
    70-687 Dumps
    70-688 Dumps
    70-689 Dumps
    70-692 Dumps
    70-694 Dumps
    70-695 Dumps
    70-696 Dumps
    70-697 Dumps
    70-698 Dumps
    70-703 Dumps
    70-705 Dumps
    70-713 Dumps
    70-734 Dumps
    70-735 Dumps
    70-740 Dumps
    70-741 Dumps
    70-742 Dumps
    70-743 Dumps
    70-744 Dumps
    70-745 Dumps
    70-761 Dumps
    70-762 Dumps
    70-764 Dumps
    70-765 Dumps
    70-767 Dumps
    70-768 Dumps
    70-773 Dumps
    70-774 Dumps
    70-775 Dumps
    70-776 Dumps
    70-778 Dumps
    70-779 Dumps
    70-980 Dumps
    70-981 Dumps
    70-982 Dumps
    74-343 Dumps
    74-344 Dumps
    74-409 Dumps
    74-678 Dumps
    74-697 Dumps
    77-418 Dumps
    77-419 Dumps
    77-420 Dumps
    77-421 Dumps
    77-422 Dumps
    77-423 Dumps
    77-424 Dumps
    77-425 Dumps
    77-426 Dumps
    77-427 Dumps
    77-428 Dumps
    77-600 Dumps
    77-601 Dumps
    77-602 Dumps
    77-603 Dumps
    77-604 Dumps
    77-605 Dumps
    77-725 Dumps
    77-726 Dumps
    77-727 Dumps
    77-728 Dumps
    77-729 Dumps
    77-730 Dumps
    77-731 Dumps
    77-853 Dumps
    77-881 Dumps
    77-882 Dumps
    77-883 Dumps
    77-884 Dumps
    77-885 Dumps
    77-886 Dumps
    77-887 Dumps
    77-888 Dumps
    77-891 Dumps
    98-349 Dumps
    98-361 Dumps
    98-362 Dumps
    98-363 Dumps
    98-364 Dumps
    98-365 Dumps
    98-366 Dumps
    98-367 Dumps
    98-368 Dumps
    98-369 Dumps
    98-372 Dumps
    98-373 Dumps
    98-374 Dumps
    98-375 Dumps
    98-379 Dumps
    98-380 Dumps
    98-381 Dumps
    98-382 Dumps
    98-383 Dumps
    98-388 Dumps
    AZ-100 Dumps
    AZ-101 Dumps
    AZ-102 Dumps
    INF-203x Dumps
    INF-204x Dumps
    INF-205x Dumps
    INF-206x Dumps
    MB2-700 Dumps
    MB2-701 Dumps
    MB2-702 Dumps
    MB2-703 Dumps
    MB2-704 Dumps
    MB2-706 Dumps
    MB2-707 Dumps
    MB2-708 Dumps
    MB2-709 Dumps
    MB2-710 Dumps
    MB2-711 Dumps
    MB2-712 Dumps
    MB2-713 Dumps
    MB2-714 Dumps
    MB2-715 Dumps
    MB2-716 Dumps
    MB2-717 Dumps
    MB2-718 Dumps
    MB2-719 Dumps
    MB2-877 Dumps
    MB5-705 Dumps
    MB6-700 Dumps
    MB6-701 Dumps
    MB6-702 Dumps
    MB6-703 Dumps
    MB6-704 Dumps
    MB6-705 Dumps
    MB6-884 Dumps
    MB6-885 Dumps
    MB6-886 Dumps
    MB6-889 Dumps
    MB6-890 Dumps
    MB6-892 Dumps
    MB6-893 Dumps
    MB6-894 Dumps
    MB6-895 Dumps
    MB6-896 Dumps
    MB6-897 Dumps
    MB6-898 Dumps