[Free] 2018(June) Ensurepass Microsoft 70-640 Dumps with VCE and PDF 21-30

Ensurepass.com : Ensure you pass the IT Exams
2018 May Microsoft Official New Released 70-640
100% Free Download! 100% Pass Guaranteed!

Windows Server 2008 Active Directory, Configuring

Question No: 21 – (Topic 1)

You create 200 new user accounts. The users are located in six different sites. New users report that they receive the following error message when they try to log on: quot;The username or password is incorrect.quot; You confirm that the user accounts exist and are enabled. You also confirm that the user name and password information supplied are correct.

You need to identify the cause of the failure. You also need to ensure that the new users are able to log on.

Which utility should you run?

  1. Active Directory Domains and Trusts

  2. Repadmin

  3. Rstools

  4. Rsdiag

Answer: B

Explanation: Repadmin allows us to check the replication status and also allows us to force a replication between domain controllers.

Reference:

http://technet.microsoft.com/en-us/library/cc770963.aspx Repadmin /replsummary

Identifies domain controllers that are failing inbound replication or outbound replication, and summarizes the results in a report.

Repadmin /showrepl

Displays the replication status when the specified domain controller last attempted to perform inbound replication on Active Directory partitions.

Repadmin /syncall Synchronizes a specified domain controller with all replication partners.

Question No: 22 – (Topic 1)

Your company has an Active Directory domain. All servers run Windows Server 2008 R2. Your company uses an Enterprise Root certification authority (CA) and an Enterprise Intermediate CA.

The Enterprise Intermediate CA certificate expires.

You need to deploy a new Enterprise Intermediate CA certificate to all computers in the domain.

What should you do?

  1. Import the new certificate into the Intermediate Certification Store on the Enterprise Root CA server.

  2. Import the new certificate into the Intermediate Certification Store on the Enterprise Intermediate CA server.

  3. Import the new certificate into the Intermediate Certification Store in the Default Domain Controllers group policy object.

  4. Import the new certificate into the Intermediate Certification Store in the Default Domain group policy object.

Answer: B Explanation:

http://technet.microsoft.com/en-us/library/cc962065.aspx Certification Authority Trust Model

Certification Authority Hierarchies

The Windows 2000 public key infrastructure supports a hierarchical CA trust model, called the certification hierarchy, to provide scalability, ease of administration, and compatibility with a growing number of commercial third-party CA services and public key-aware products. In its simplest form, a certification hierarchy consists of a single CA. However, the hierarchy usually contains multiple CAs that have clearly defined parent-child relationships. Figure 16.5 shows some possible CA hierarchies.

Ensurepass 2018 PDF and VCE

C:\Documents and Settings\usernwz1\Desktop\1.PNG

You can deploy multiple CA hierarchies to meet your needs. The CA at the top of the hierarchy is called a root CA . Root CAs are self-certified by using a self-signed CA certificate. Root CAs are the most trusted CAs in the organization and it is recommended that they have the highest security of all. There is no requirement that all CAs in an enterprise share a common top-level CA parent or root. Although trust for CAs depends on each domain#39;s CA trust policy, each CA in the hierarchy can be in a different domain.

Child CAs are called subordinate CAs. Subordinate CAs are certified by the parent CAs. A parent CA certifies the subordinate CA by issuing and signing the subordinate CA certificate. A subordinate CA can be either an intermediate or an issuing CA. An intermediate CA issues certificates only to subordinate CAs. An issuing CA issues certificates to users, computers, or services.

http://social.technet.microsoft.com/Forums/en-US/winserversecurity/thread/605dbf9d-2694- 4783-8002-c08b9c7d4149

Question No: 23 – (Topic 1)

Your company has a main office and a branch office that are configured as a single Active Directory forest. The functional level of the Active Directory forest is Windows Server 2003. There are four Windows Server 2003 domain controllers in the main office.

You need to ensure that you are able to deploy a read-only domain controller (RODC) at the branch office.

Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

  1. Raise the functional level of the forest to Windows Server 2008.

  2. Deploy a Windows Server 2008 domain controller at the main office.

  3. Raise the functional level of the domain to Windows Server 2008.

  4. Run the adprep/rodcprep command.

    Answer: B,D Explanation:

    http://technet.microsoft.com/en-us/library/cc731243(v=ws.10).aspx Prerequisites for Deploying an RODC

    Complete the following prerequisites before you deploy a read-only domain controller (RODC):

    Ensure that the forest functional level is Windows Server 2003 or higher

    Run Adprep.exe commands to prepare your existing forest and domains for domain controllers that run Windows Server 2008 or Windows Server 2008 R2. The adprep commands extend the Active Directory schema and update security descriptors so that you can add the new domain controllers. There are different versions of Adprep.exe for Windows Server 2008 and Windows Server 2008 R2.

    1. Prepare the forest and domains. There are three adprep commands to complete and have the changes replicate throughout the forest. Run the three commands as follows:

      • Prepare the forest by running adprep /forestprep on the server that holds the schema master operations master (also known as flexible single master operations or FSMO) role to update the schema.

      • Prepare the domain by running adprep /domainprep /gpprep on the server that holds the infrastructure operations master role.

      • If you are installing an RODC in an existing Windows Server 2003 domain, you must also run adprep /rodcprep.

    2. Install Active Directory Domain Services (AD DS). You can install AD DS by using a wizard, the command line, or an answer file.

      Deploy at least one writable domain controller running Windows Server 2008 or Windows Server 2008 R2 in the same domain as the RODC and ensure that the writable domain controller is also a DNS server that has registered a name server (NS) resource record for

      the relevant DNS zone. An RODC must replicate domain updates from a writable domain controller running Windows Server 2008 or Windows Server 2008 R2.

      Question No: 24 – (Topic 1)

      Your company has an Active Directory forest that contains client computers that run Windows Vista andMicrosoft Windows XP.

      You need to ensure that users are able to install approved application updates on their computers.

      Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

      1. Set up Automatic Updates through Control Panel on the client computers.

      2. Create a GPO and link it to the Domain Controllers organizational unit. Configure the GPO to automatically search for updates on the Microsoft Update site.

      3. Create a GPO and link it to the domain. Configure the GPO to direct the client computers to the Windows Server Update Services (WSUS) server for approved updates.

      4. Install the Windows Server Update Services (WSUS). Configure the server to search for new updates on the Internet. Approve all required updates.

Answer: C,D Explanation:

http://technet.microsoft.com/en-us/library/cc720539(v=ws.10).aspx Configure Automatic Updates by Using Group Policy

When you configure the Group Policy settings for WSUS, use a Group Policy object (GPO) linked to an Active Directory container appropriate for your environment.

Question No: 25 – (Topic 1)

Your company has an Active Directory domain. You install a new domain controller in the domain. Twenty users report that they are unable to log on to the domain.

You need to register the SRV records.

Which command should you run on the new domain controller?

  1. Run the netsh interface reset command.

  2. Run the ipconfig /flushdns command.

  3. Run the dnscmd /EnlistDirectoryPartition command.

  4. Run the sc stop netlogon command followed by the sc start netlogon command.

Answer: D Explanation:

MCTS 70-640 Cert Guide: Windows Server 2008 Active Directory, Configuring (Pearson IT Certification, 2010) page 62

The SRV resource records for a domain controller are important in enabling clients to locate the domain controller. The Netlogon service on domain controllers registers this resource record whenever a domain controller is restarted. You can also re-register a domain controller’s SRV resource records by restarting this service from the Services branch of Server Manager or by typing net start netlogon. An exam

Question might ask you how to troubleshoot the nonregistration of SRV resource records.

Question No: 26 – (Topic 1)

You need to relocate the existing user and computer objects in your company to different organizational units.

What are two possible ways to achieve this goal? (Each correct answer presents a complete solution. Choose two.)

  1. Run the move-item command in the Microsoft Windows PowerShell utility.

  2. Run the Active Directory Users and Computers utility.

  3. Run the Dsmove utility.

  4. Run the Active Directory Migration Tool (ADMT).

Answer: B,C Explanation: Personal note:

You can simply drag and drop objects when using the Active Directory Users and

Computers utility or use the dsmove command. http://technet.microsoft.com/en-us/library/cc731094(v=ws.10).aspx

Dsmove Moves a single object, within a domain, from its current location in the directory to a new location, or renames a single object without moving it in the directory tree.

Question No: 27 – (Topic 1)

Your company, Contoso Ltd, has offices in North America and Europe. Contoso has an Active Directory forest that has three domains.

You need to reduce the time required to authenticate users from the labs.eu.contoso.com domain when they access resources in the eng.na.contoso.com domain.

What should you do?

  1. Decrease the replication interval for all Connection objects.

  2. Decrease the replication interval for the DEFAULTIPSITELINK site link.

  3. Set up a one-way shortcut trust from eng.na.contoso.com to labs.eu.contoso.com.

  4. Set up a one-way shortcut trust from labs.eu.contoso.com to eng.na.contoso.com.

Answer: C Explanation:

http://technet.microsoft.com/en-us/library/cc754538.aspx Understanding When to Create a Shortcut Trust

When to create a shortcut trust

Shortcut trusts are one-way or two-way, transitive trusts that administrators can use to optimize the authentication process.

Authentication requests must first travel a trust path between domain trees. In a complex forest this can take time, which you can reduce with shortcut trusts. A trust path is the series of domain trust relationships that authentication requests must traverse between any two domains. Shortcut trusts effectively shorten the path that authentication requests travel between domains that are located in two separate domain trees.

Shortcut trusts are necessary when many users in a domain regularly log on to other domains in a forest.

Using the following illustration as an example, you can form a shortcut trust between domain B and domain D, between domain A and domain 1, and so on.

Ensurepass 2018 PDF and VCE

C:\Documents and Settings\usernwz1\Desktop\1.PNG

Using one-way trusts

A one-way, shortcut trust that is established between two domains in separate domain trees can reduce the time that is necessary to fulfill authentication requests-but in only one direction. For example, when a oneway, shortcut trust is established between domain A and domain B, authentication requests that are made in domain A to domain B can use the new one-way trust path. However, authentication requests that are made in domain B to domain A must still travel the longer trust path.

Using two-way trusts

A two-way, shortcut trust that is established between two domains in separate domain trees reduces the time that is necessary to fulfill authentication requests that originate in either domain. For example, when a two-way trust is established between domain A and domain B, authentication requests that are made from either domain to the other domain can use the new, two-way trust path.

Question No: 28 – (Topic 1)

Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2.

You need to identify the Lightweight Directory Access Protocol (LDAP) clients that are using the largest amount of available CPU resources on a domain controller.

What should you do?

  1. Review performance data in Resource Monitor.

  2. Review the Hardware Events log in the Event Viewer.

  3. Run the Active Directory Diagnostics Data Collector Set. Review the Active Directory Diagnostics report.

  4. Run the LAN Diagnostics Data Collector Set. Review the LAN Diagnostics report.

Answer: C Explanation:

http://servergeeks.wordpress.com/2012/12/31/active-directory-diagnostics/ Active Directory Diagnostics

Prior to Windows Server 2008, troubleshooting Active Directory performance issues often required the installation of SPA. SPA is helpful because the Active Directory data set collects performance data and it generates XML based diagnostic reports that make analyzing AD performance issues easier by identifying the IP addresses of the highest volume callers and the type of network traffic that is placing the most loads on the CPU. Download SPA tool:http://www.microsoft.com/en-us/download/details.aspx?id=15506 Now the same functionality has been built into Windows Server 2008 and Windows Server 2008 R2 and you don’t have to install SPA anymore.

This performance feature is located in the Server Manager snap-in under the Diagnostics node and when the Active Directory Domain Services Role is installed the Active Directory Diagnostics data collector set is automatically created under System as shown here.

Ensurepass 2018 PDF and VCE

C:\Documents and Settings\usernwz1\Desktop\1.PNG

When you will check the properties of the collector you will notice that the data is stored under %systemdrive %\perflogs, only now it is under the \ADDS folder and when a data collection is run it creates a new subfolder called YYYYMMDD-#### where YYYY = Year, MM = Month and DD=Day and #### starts with 0001 . Active Directory Diagnostics data collector set runs for a default of 5 minutes. This duration period cannot be modified for the built-in collector. However, the collection can be stopped manually by clicking the Stop button or from the command line.

Ensurepass 2018 PDF and VCE

C:\Documents and Settings\usernwz1\Desktop\1.PNG

To start the data collector set, you just have to right click on Active Directory Diagnostics data collector set and select Start. Data will be stored at %systemdrive%\perflogs location.

Ensurepass 2018 PDF and VCE

C:\Documents and Settings\usernwz1\Desktop\1.PNG

Ensurepass 2018 PDF and VCE

Once you’ve gathered your data, you will have these interesting and useful reports under Report section, to aid in your troubleshooting and server performance trending.

C:\Documents and Settings\usernwz1\Desktop\1.PNG Further information:

http://technet.microsoft.com/en-us/library/dd736504(v=ws.10).aspx Monitoring Your Branch Office Environment

http://blogs.technet.com/b/askds/archive/2010/06/08/son-of-spa-ad-data-collector-sets-in- win2008-andbeyond.aspx

Son of SPA: AD Data Collector Sets in Win2008 and beyond

Question No: 29 – (Topic 1)

Your company has two domain controllers that are configured as internal DNS servers. All zones on the DNS servers are Active Directory-integrated zones. The zones allow all dynamic updates.

You discover that the contoso.com zone has multiple entries for the host names of computers that do not exist.

You need to configure the contoso.com zone to automatically remove expired records. What should you do?

  1. Enable only secure updates on the contoso.com zone,

  2. Enable scavenging and configure the refresh interval on the contoso.com zone.

  3. From the Start of Authority tab, decrease the default refresh interval on the contoso.com zone.

  4. From the Start of Authority tab, increase the default expiration interval on the contoso.com zone

Answer: B Explanation:

http://www.it-support.com.au/configure-aging-and-scavenging-of-a-dns-server/2012/12/ Configure aging and scavenging of a DNS Server

Resource records that are either outdated or decayed from DNS zone data are removed through the use of the Server aging and scavenging feature in Windows Server 2008.

Issues develop if decayed resource records are not dealt with, such as:

Zone transfers take longer as the DNS server disk space contains a large number of stale records

The accumulation of stale records degrades the DNS server performance and response time

Potential conflicts can occur, if an IP address in a dynamic DNS environment is assigned to a different host. By default, the aging and scavenging feature is disabled. In order to use this particular feature, the user is required to enable the operations on the zone and at the DNS server.

In addition, a user is able to manually enable individual resource records to be aged and scavenged. This process involves permitting the records to use the current (non-zero)

timestamp value.

The aging and scavenging operation figures out when the records should be cleared by reviewing their timestamps. The DNS Server uses a simple equation when setting a time value on a record: current server time refresh interval.

Procedure:

Navigate to Start – Administrative Tools – DNS Manager. Right click the relevant DNS server and select Set Aging/Scavenging for All Zones from the drop down list.

Ensurepass 2018 PDF and VCE

C:\Documents and Settings\usernwz1\Desktop\1.PNG

The Server Aging/Scavenging Properties dialog box opens. Tick the option Scavenge stale resource records.

Under the No-refresh interval heading, specify the duration for which the server must not refresh its records.

Configuring this setting reduces replication traffic as unnecessary updates to existing records are prevented.

Under the Refresh interval heading, specify the duration for which the server must refresh its records. The fresh interval is the time required between when a no-refresh interval expires and when a record is considered stale.

When you have configured these settings, click OK to continue.

Ensurepass 2018 PDF and VCE

C:\Documents and Settings\usernwz1\Desktop\1.PNG

A confirmation box appears showing a summary of your settings. Tick the Apply these settings to the existing Active Directory-integrated zones option and click OK.

Ensurepass 2018 PDF and VCE

C:\Documents and Settings\usernwz1\Desktop\1.PNG

The Aging and Scavenging intervals have now been configured for all zones managed by the DNS server.

http://blogs.technet.com/b/networking/archive/2008/03/19/don-t-be-afraid-of-dns- scavenging-just-bepatient.aspx

Don#39;t be afraid of DNS Scavenging. Just be patient. http://social.technet.microsoft.com/Forums/en-US/winserverNIS/thread/bb556cfb-3217- 4dcf-af4f-460366faa1b8Answered Best Practices configuration for DNS server on Windows 2008 R2 Server (aging/scavenging, etc.)

Question No: 30 – (Topic 1)

You need to validate whether Active Directory successfully replicated between two domain controllers.What should you do?

  1. Run the DSget command.

  2. Run the Dsquery command.

  3. Run the RepAdmin command.

  4. Run the Windows System Resource Manager.

Answer: C Explanation:

http://technet.microsoft.com/en-us/library/cc794749.aspx

You can use the repadmin /showrepl command to verify successful replication to a specific domain controller.

100% Ensurepass Free Download!
Download Free Demo:70-640 Demo PDF
100% Ensurepass Free Guaranteed!
Download 2018 EnsurePass 70-640 Full Exam PDF and VCE

EnsurePass ExamCollection Testking
Lowest Price Guarantee Yes No No
Up-to-Dated Yes No No
Real Questions Yes No No
Explanation Yes No No
PDF VCE Yes No No
Free VCE Simulator Yes No No
Instant Download Yes No No


Leave a Reply

Your email address will not be published. Required fields are marked *

  • Categories

  • Tags

  • Hot Exams

  • Hot Exams

  • Hot Catageories

  • microsoft dumps

    62-193 Dumps
    70-243 Dumps
    70-246 Dumps
    70-247 Dumps
    70-331 Dumps
    70-332 Dumps
    70-333 Dumps
    70-334 Dumps
    70-339 Dumps
    70-341 Dumps
    70-342 Dumps
    70-345 Dumps
    70-346 Dumps
    70-347 Dumps
    70-348 Dumps
    70-354 Dumps
    70-355 Dumps
    70-357 Dumps
    70-383 Dumps
    70-384 Dumps
    70-385 Dumps
    70-398 Dumps
    70-410 Dumps
    70-411 Dumps
    70-412 Dumps
    70-413 Dumps
    70-414 Dumps
    70-417 Dumps
    70-461 Dumps
    70-462 Dumps
    70-463 Dumps
    70-464 Dumps
    70-465 Dumps
    70-466 Dumps
    70-467 Dumps
    70-469 Dumps
    70-470 Dumps
    70-473 Dumps
    70-475 Dumps
    70-480 Dumps
    70-481 Dumps
    70-482 Dumps
    70-483 Dumps
    70-484 Dumps
    70-485 Dumps
    70-486 Dumps
    70-487 Dumps
    70-488 Dumps
    70-489 Dumps
    70-490 Dumps
    70-491 Dumps
    70-492 Dumps
    70-494 Dumps
    70-496 Dumps
    70-497 Dumps
    70-498 Dumps
    70-499 Dumps
    70-517 Dumps
    70-532 Dumps
    70-533 Dumps
    70-534 Dumps
    70-535 Dumps
    70-537 Dumps
    70-640 Dumps
    70-642 Dumps
    70-646 Dumps
    70-673 Dumps
    70-680 Dumps
    70-681 Dumps
    70-682 Dumps
    70-684 Dumps
    70-685 Dumps
    70-686 Dumps
    70-687 Dumps
    70-688 Dumps
    70-689 Dumps
    70-692 Dumps
    70-694 Dumps
    70-695 Dumps
    70-696 Dumps
    70-697 Dumps
    70-698 Dumps
    70-703 Dumps
    70-705 Dumps
    70-713 Dumps
    70-734 Dumps
    70-735 Dumps
    70-740 Dumps
    70-741 Dumps
    70-742 Dumps
    70-743 Dumps
    70-744 Dumps
    70-745 Dumps
    70-761 Dumps
    70-762 Dumps
    70-764 Dumps
    70-765 Dumps
    70-767 Dumps
    70-768 Dumps
    70-773 Dumps
    70-774 Dumps
    70-775 Dumps
    70-776 Dumps
    70-778 Dumps
    70-779 Dumps
    70-980 Dumps
    70-981 Dumps
    70-982 Dumps
    74-343 Dumps
    74-344 Dumps
    74-409 Dumps
    74-678 Dumps
    74-697 Dumps
    77-418 Dumps
    77-419 Dumps
    77-420 Dumps
    77-421 Dumps
    77-422 Dumps
    77-423 Dumps
    77-424 Dumps
    77-425 Dumps
    77-426 Dumps
    77-427 Dumps
    77-428 Dumps
    77-600 Dumps
    77-601 Dumps
    77-602 Dumps
    77-603 Dumps
    77-604 Dumps
    77-605 Dumps
    77-725 Dumps
    77-726 Dumps
    77-727 Dumps
    77-728 Dumps
    77-729 Dumps
    77-730 Dumps
    77-731 Dumps
    77-853 Dumps
    77-881 Dumps
    77-882 Dumps
    77-883 Dumps
    77-884 Dumps
    77-885 Dumps
    77-886 Dumps
    77-887 Dumps
    77-888 Dumps
    77-891 Dumps
    98-349 Dumps
    98-361 Dumps
    98-362 Dumps
    98-363 Dumps
    98-364 Dumps
    98-365 Dumps
    98-366 Dumps
    98-367 Dumps
    98-368 Dumps
    98-369 Dumps
    98-372 Dumps
    98-373 Dumps
    98-374 Dumps
    98-375 Dumps
    98-379 Dumps
    98-380 Dumps
    98-381 Dumps
    98-382 Dumps
    98-383 Dumps
    98-388 Dumps
    AZ-100 Dumps
    AZ-101 Dumps
    AZ-102 Dumps
    INF-203x Dumps
    INF-204x Dumps
    INF-205x Dumps
    INF-206x Dumps
    MB2-700 Dumps
    MB2-701 Dumps
    MB2-702 Dumps
    MB2-703 Dumps
    MB2-704 Dumps
    MB2-706 Dumps
    MB2-707 Dumps
    MB2-708 Dumps
    MB2-709 Dumps
    MB2-710 Dumps
    MB2-711 Dumps
    MB2-712 Dumps
    MB2-713 Dumps
    MB2-714 Dumps
    MB2-715 Dumps
    MB2-716 Dumps
    MB2-717 Dumps
    MB2-718 Dumps
    MB2-719 Dumps
    MB2-877 Dumps
    MB5-705 Dumps
    MB6-700 Dumps
    MB6-701 Dumps
    MB6-702 Dumps
    MB6-703 Dumps
    MB6-704 Dumps
    MB6-705 Dumps
    MB6-884 Dumps
    MB6-885 Dumps
    MB6-886 Dumps
    MB6-889 Dumps
    MB6-890 Dumps
    MB6-892 Dumps
    MB6-893 Dumps
    MB6-894 Dumps
    MB6-895 Dumps
    MB6-896 Dumps
    MB6-897 Dumps
    MB6-898 Dumps