[Free] 2018(June) Ensurepass Microsoft 70-640 Dumps with VCE and PDF 221-230

Ensurepass.com : Ensure you pass the IT Exams
2018 May Microsoft Official New Released 70-640
100% Free Download! 100% Pass Guaranteed!

Windows Server 2008 Active Directory, Configuring

Question No: 221 – (Topic 3)

Your network contains a domain controller that runs Windows Server 2008 R2. You need to change the location of the Active Directory log files.

Which tool should you use?

  1. Dsamain

  2. Dsmgmt

  3. Dsmove

  4. Ntdsutil

    Answer: D Explanation:

    http://support.microsoft.com/kb/257420 How To Move the Ntds.dit File or Log Files Moving a Database or Log File

    1. Restart the domain controller.

    2. Press F8 at the Startup menu, and then click Directory Services Restore Mode.

    3. Select the appropriate installation if more than one exists, and then log on as an administrator at the logon prompt.

    4. Start a command prompt, and then type ntdsutil.exe.NOTE: To get a list of commands that you can use at the Ntdsutil prompt, type ?

    5. At a Ntdsutil prompt, type files.

    6. At the File Maintenance prompt, use one or both of the following procedures:

  • To move a database, type move db to %s, where %s is the drive and folder where you want the database moved.

  • To move log files, type move logs to %s, where %s is the drive and folder where you want the log files moved.

      1. To view the log files or database, type info. To verify the integrity of the database at its new location, type integrity.

      2. Type quit, and then type quit to return to a command prompt.

      3. Restart the computer in Normal mode.

        NOTE: When you move the database and log files, you must back up the domain controller.

        Question No: 222 – (Topic 3)

        Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1. The Active Directory Federation Services (AD FS) role is installed on Server1. Contoso.com is defined as an account store.

        A partner company has a Web-based application that uses AD FS authentication. The partner company plans to provide users from contoso.com access to the Web application.

        You need to configure AD FS on contoso.com to allow contoso.com users to be authenticated by the partner company.

        What should you create on Server1?

        1. a new application

        2. a resource partner

        3. an account partner

        4. an organization claim

    Answer: D Explanation:

    Since the account store has already been configured, what needs to be done is to use the account store to map an AD DS global security group to an organization claim (called group claim extraction). So that#39;s what we need to create for authentication: an organization claim.

    Creating a resource/account partner is part of setting up the Federation Trust. Reference 1:

    http://technet.microsoft.com/en-us/library/dd378957.aspx

    Configuring the Federation Servers

    [All the steps for setting up an AD FS environment are listed in an extensive step-by-step guide, too long to post here.]

    Reference 2:

    http://technet.microsoft.com/en-us/library/cc732147.aspx

    Add an AD DS Account Store

    If user and computer accounts that require access to a resource that is protected by Active Directory Federation Services (AD FS) are stored in Active Directory Domain Services (AD DS), you must add AD DS as anaccount storeon a federation server in the Federation Service that authenticates the accounts.

    Reference 3:

    http://technet.microsoft.com/en-us/library/cc731719.aspx

    Map an Organization Group Claim to an AD DS Group (Group Claim Extraction) When you use Active Directory Domain Services (AD DS) as the Active Directory

    Federation Services (AD FS)account storefor an account Federation Service, you mapan organization group claimto a security group in AD DS. This mapping is called a group claim extraction.

    Question No: 223 – (Topic 3)

    Your network contains an Active Directory domain. All domain controllers run Windows Server 2008. The functional level of the domain is Windows Server 2003. All client computers run Windows 7.

    You install Windows Server 2008 R2 on a server named Server1. You need to perform an offline domain join of Server1.

    Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

    1. From Server1, run djoin.exe.

    2. From Server1, run netdom.exe.

    3. From a Windows 7 computer, run djoin.exe.

    4. Upgrade one domain controller to Windows Server 2008 R2.

    5. Raise the functional level of the domain to Windows Server 2008.

      Answer: A,C

      Reference:

      MS Press – Self-Paced Training Kit (Exam 70-640) (2nd Edition, July 2012) pages 217, 218 Offline Domain Join

      Offline domain join is also useful when a computer is deployed in a lab or other disconnected environment.

      When the computer is connected to the domain network and started for the first time, it will already be a member of the domain. This also helps to ensure that Group Policy settings are applied at the first startup.

      Four major steps are required to join a computer to the domain by using offline domain join:

      1. Log on to a computer in the domain that is running Windows Server 2008 R2 or Windows 7 with an account that has permissions to join computers to the domain.

      2. Use the DJoin command to provision a computer for offline domain join. This step prepopulates Active Directory with the information that Active Directory needs to join the computer to the domain, and exports the information called a blob to a text file.

      3. At the offline computer that you want to join the domain use DJoin to import the blob into the Windows directory.

      4. When you start or restart the computer, it will be a member of the domain.

        Question No: 224 – (Topic 3)

        Your network contains an Active Directory domain named contoso.com.

        The properties of the contoso.com DNS zone are configured as shown in the exhibit. (Click the Exhibit button.)

        Ensurepass 2018 PDF and VCE

        You need to update all service location (SRV) records for a domain controller in the domain.

        What should you do?

        1. Restart the Netlogon service.

        2. Restart the DNS Client service.

        3. Run sc.exe and specify the triggerinfo parameter.

        4. Run ipconfig.exe and specify the /registerdns parameter.

    Answer: A

    Reference:

    MCTS 70-640 Cert Guide: Windows Server 2008 Active Directory, Configuring (Pearson IT

    Certification, 2010) page 62

    The SRV resource records for a domain controller are important in enabling clients to locate the domain controller. The Netlogon service on domain controllers registers this resource record whenever a domain controller is restarted. You can also re-register a domain controller’s SRV resource records by restarting this service from the Services branch of Server Manager or by typing net start netlogon. An exam question might ask you how to troubleshoot the nonregistration of SRV resource records.

    Question No: 225 – (Topic 3)

    You need to receive an e-mail message whenever a domain user account is locked out. Which tool should you use?

    1. Active Directory Administrative Center

    2. Event Viewer

    3. Resource Monitor

    4. Security Configuration Wizard

    Answer: B Explanation:

    MS Press – Self-Paced Training Kit (Exam 70-642) (2nd Edition, 2011) page 525 Automatically Responding to Events

    One of the most useful ways to use Task Scheduler is to launch a task in response to a specific event type that appears in Event Viewer. You can respond to events in three ways: Start A Program – Launches an application. Often, administrators write a script that carries out a series of tasks that they would otherwise need to manually perform, and automatically run that script when an event appears.

    Send An E-mail – Sends an email by using the Simple Mail Transport Protocol (SMTP) server you specify.

    Often, administrators configure urgent events to be sent to a mobile device.

    Display A Message – Displays a dialog box showing a message. This is typically useful only when a user needs to be notified of something happening on the computer.

    To trigger a task when an event occurs, follow one of these three procedures:

    Find an example of the event in Event Viewer. Then, right-click the event and click Attach Task To This Event. A wizard will guide you through the process.

    Question No: 226 – (Topic 3)

    Your network contains an Active Directory forest. The forest contains one domain. The domain contains two domain controllers named DC1 and DC2 that run Windows Server 2008 R2.

    DC1 was installed before DC2. DC1 fails.

    You need to ensure that you can add 1,000 new user accounts to the domain. What should you do?

    1. Modify the permissions of the DC2 computer account.

    2. Seize the schema master FSMO role.

    3. Configure DC2 as a global catalog server.

    4. Seize the RID master FSMO role.

    Answer: D

    Reference:

    MS Press – Self-Paced Training Kit (Exam 70-640) (2nd Edition, July 2012) pages 536-537 RID master failure

    A failed RID master eventually prevents domain controllers from creating new SIDs and, therefore, prevents you from creating new accounts for users, groups, or computers.

    However, domain controllers receive a sizable pool of RIDs from the RID master, so unless you are generating numerous new accounts, you can often go for some time without the RID master online while it is being repaired. Seizing this role to another domain controller is a significant action. After the RID master role has been seized, the domain controller that had been performing the role cannot be brought back online.

    Question No: 227 – (Topic 3)

    Your network contains two servers named Server1 and Server2 that run Windows Server 2008 R2. Server1 has Active Directory Federation Services (AD FS) 2.0 installed.

    Server1 is a member of an AD FS farm. The AD FS farm is configured to use a configuration database that is stored on a separate Microsoft SQL Server.

    You install AD FS 2.0 on Server2.

    You need to add Server2 to the existing AD FS farm. What should you do?

    1. On Server1, run fsconfig.exe.

    2. On Server1, run fsconfigwizard.exe.

    3. On Server2, run fsconfig.exe.

    4. On Server2, run fsconfigwizard.exe.

      Answer: C Explanation:

      http://technet.microsoft.com/en-us/library/adfs2-help-how-to-configure-a-new-federation- server.aspx

      Configure a New Federation Server

      To configure a new federation server using the command line

      1. Open a Command Prompt window.

      2. Change the directory to the path where AD FS 2.0 was installed.

      3. To configure this computer as a federation server, type the applicable syntax using either of the following command parameters, and then press ENTER: fsconfig.exe

        {StandAlone|CreateFarm|

        CreateSQLFarm|JoinFarm|JoinSQLFarm} [deployment specific parameters] Parameter

        JoinSQLFarm Joins this computer to an existing federation server farm that is using SQL Server.

        Question No: 228 – (Topic 3)

        You need to create a Password Settings object (PSO). Which tool should you use?

        1. Active Directory Users and Computers

        2. ADSI Edit

        3. Group Policy Management Console

        4. Ntdsutil

    Answer: B Explanation:

    http://technet.microsoft.com/en-us/library/cc754461.aspx

    You can create Password Settings objects (PSOs): using the Active Directory module for Windows PowerShell using ADSI Edit using ldifde

    Question No: 229 – (Topic 3)

    Your network contains a single Active Directory domain named contoso.com.

    An administrator accidentally deletes the _msdsc.contoso.com zone. You recreate the

    _msdsc.contoso.com zone.

    You need to ensure that the _msdsc.contoso.com zone contains all of the required DNS records.

    What should you do on each domain controller?

    1. Restart the Netlogon service.

    2. Restart the DNS Server service.

    3. Run dcdiag.exe /fix.

    4. Run ipconfig.exe /registerdns.

      Answer: A Explanation:

      Reference 1: http://support.microsoft.com/kb/817470

      To register the required records to the single root domain controller, restart the Net Logon

      service on all the domain controllers. The replication works correctly if the replication window is not less than the default DNS Time to Live (TTL) entry. To restart the Net Logon service, follow these steps:

      1. Click Start, click Run, type cmd in the Open box, and then press ENTER.

      2. At the command prompt, type the following command, and then press ENTER: net stop netlogon

      3. Type net start netlogon, and then press ENTER. Reference 2:

        http://serverfault.com/questions/383915/how-do-i-manually-create-the-msdcs-dns-zone-for- a-domain-that-wascreated-pre-s

        Be sure to restart the Netlogon services on all DC#39;s when the zone has been replicated to them. This forces the DC#39;s to register their SRV records in the _msdcs zone.

        Question No: 230 – (Topic 3)

        You need to purge the list of user accounts that were authenticated on a read-only domain controller (RODC).

        What should you do?

        1. Run the repadmin.exe command and specify the /prp parameter.

        2. From Active Directory Sites and Services, modify the properties of the RODC computer object.

        3. From Active Directory Users and Computers, modify the properties of the RODC computer object.

        4. Run the dsrm.exe command and specify the -u parameter.

    Answer: A

    Reference:

    http://technet.microsoft.com/en-us/library/rodc-guidance-for-administering-the-password- replication-policy.aspx

    Clearing the authenticated accounts list

    In addition to reviewing the list of authenticated users, you may decide to periodically clean

    up the list of accounts that are authenticated to the RODC. Cleaning up this list may help you more easily determine the new accounts that have authenticated through the RODC.

    Membership in the Domain Admins group of the domain in which the RODC is a member, or equivalent, is the minimum required to complete this procedure.

    To clear all entries from the list, run the command repadmin /prp delete lt;hostnamegt; auth2

    /all.

    Substitute the actual host name of the RODC that you want to clear. For example, if you want to clear the list of authenticated accounts for RODC2, type repadmin /prp delete rodc2 auth2 /all, and then press ENTER.

    100% Ensurepass Free Download!
    Download Free Demo:70-640 Demo PDF
    100% Ensurepass Free Guaranteed!
    Download 2018 EnsurePass 70-640 Full Exam PDF and VCE

    EnsurePass ExamCollection Testking
    Lowest Price Guarantee Yes No No
    Up-to-Dated Yes No No
    Real Questions Yes No No
    Explanation Yes No No
    PDF VCE Yes No No
    Free VCE Simulator Yes No No
    Instant Download Yes No No


    Leave a Reply

    Your email address will not be published. Required fields are marked *

  • Categories

  • Tags

  • Hot Exams

  • Hot Exams

  • Hot Catageories

  • microsoft dumps

    62-193 Dumps
    70-243 Dumps
    70-246 Dumps
    70-247 Dumps
    70-331 Dumps
    70-332 Dumps
    70-333 Dumps
    70-334 Dumps
    70-339 Dumps
    70-341 Dumps
    70-342 Dumps
    70-345 Dumps
    70-346 Dumps
    70-347 Dumps
    70-348 Dumps
    70-354 Dumps
    70-355 Dumps
    70-357 Dumps
    70-383 Dumps
    70-384 Dumps
    70-385 Dumps
    70-398 Dumps
    70-410 Dumps
    70-411 Dumps
    70-412 Dumps
    70-413 Dumps
    70-414 Dumps
    70-417 Dumps
    70-461 Dumps
    70-462 Dumps
    70-463 Dumps
    70-464 Dumps
    70-465 Dumps
    70-466 Dumps
    70-467 Dumps
    70-469 Dumps
    70-470 Dumps
    70-473 Dumps
    70-475 Dumps
    70-480 Dumps
    70-481 Dumps
    70-482 Dumps
    70-483 Dumps
    70-484 Dumps
    70-485 Dumps
    70-486 Dumps
    70-487 Dumps
    70-488 Dumps
    70-489 Dumps
    70-490 Dumps
    70-491 Dumps
    70-492 Dumps
    70-494 Dumps
    70-496 Dumps
    70-497 Dumps
    70-498 Dumps
    70-499 Dumps
    70-517 Dumps
    70-532 Dumps
    70-533 Dumps
    70-534 Dumps
    70-535 Dumps
    70-537 Dumps
    70-640 Dumps
    70-642 Dumps
    70-646 Dumps
    70-673 Dumps
    70-680 Dumps
    70-681 Dumps
    70-682 Dumps
    70-684 Dumps
    70-685 Dumps
    70-686 Dumps
    70-687 Dumps
    70-688 Dumps
    70-689 Dumps
    70-692 Dumps
    70-694 Dumps
    70-695 Dumps
    70-696 Dumps
    70-697 Dumps
    70-698 Dumps
    70-703 Dumps
    70-705 Dumps
    70-713 Dumps
    70-734 Dumps
    70-735 Dumps
    70-740 Dumps
    70-741 Dumps
    70-742 Dumps
    70-743 Dumps
    70-744 Dumps
    70-745 Dumps
    70-761 Dumps
    70-762 Dumps
    70-764 Dumps
    70-765 Dumps
    70-767 Dumps
    70-768 Dumps
    70-773 Dumps
    70-774 Dumps
    70-775 Dumps
    70-776 Dumps
    70-778 Dumps
    70-779 Dumps
    70-980 Dumps
    70-981 Dumps
    70-982 Dumps
    74-343 Dumps
    74-344 Dumps
    74-409 Dumps
    74-678 Dumps
    74-697 Dumps
    77-418 Dumps
    77-419 Dumps
    77-420 Dumps
    77-421 Dumps
    77-422 Dumps
    77-423 Dumps
    77-424 Dumps
    77-425 Dumps
    77-426 Dumps
    77-427 Dumps
    77-428 Dumps
    77-600 Dumps
    77-601 Dumps
    77-602 Dumps
    77-603 Dumps
    77-604 Dumps
    77-605 Dumps
    77-725 Dumps
    77-726 Dumps
    77-727 Dumps
    77-728 Dumps
    77-729 Dumps
    77-730 Dumps
    77-731 Dumps
    77-853 Dumps
    77-881 Dumps
    77-882 Dumps
    77-883 Dumps
    77-884 Dumps
    77-885 Dumps
    77-886 Dumps
    77-887 Dumps
    77-888 Dumps
    77-891 Dumps
    98-349 Dumps
    98-361 Dumps
    98-362 Dumps
    98-363 Dumps
    98-364 Dumps
    98-365 Dumps
    98-366 Dumps
    98-367 Dumps
    98-368 Dumps
    98-369 Dumps
    98-372 Dumps
    98-373 Dumps
    98-374 Dumps
    98-375 Dumps
    98-379 Dumps
    98-380 Dumps
    98-381 Dumps
    98-382 Dumps
    98-383 Dumps
    98-388 Dumps
    AZ-100 Dumps
    AZ-101 Dumps
    AZ-102 Dumps
    INF-203x Dumps
    INF-204x Dumps
    INF-205x Dumps
    INF-206x Dumps
    MB2-700 Dumps
    MB2-701 Dumps
    MB2-702 Dumps
    MB2-703 Dumps
    MB2-704 Dumps
    MB2-706 Dumps
    MB2-707 Dumps
    MB2-708 Dumps
    MB2-709 Dumps
    MB2-710 Dumps
    MB2-711 Dumps
    MB2-712 Dumps
    MB2-713 Dumps
    MB2-714 Dumps
    MB2-715 Dumps
    MB2-716 Dumps
    MB2-717 Dumps
    MB2-718 Dumps
    MB2-719 Dumps
    MB2-877 Dumps
    MB5-705 Dumps
    MB6-700 Dumps
    MB6-701 Dumps
    MB6-702 Dumps
    MB6-703 Dumps
    MB6-704 Dumps
    MB6-705 Dumps
    MB6-884 Dumps
    MB6-885 Dumps
    MB6-886 Dumps
    MB6-889 Dumps
    MB6-890 Dumps
    MB6-892 Dumps
    MB6-893 Dumps
    MB6-894 Dumps
    MB6-895 Dumps
    MB6-896 Dumps
    MB6-897 Dumps
    MB6-898 Dumps