web analytics

Latest Microsoft 70-640 Practice Tests Free Download with PDF & VCE (341-350)

QUESTION 341
Your network contains an Active Directory domain named contoso.com. Contoso.com contains a member server that runs Windows Server 2008 R2 Standard.
You need to create an enterprise subordinate certification authority (CA) that can issue certificates based on version 3 certificate templates.
You must achieve this goal by using the minimum amount of administrative effort.
What should you do first?

A.    Run the certutil.exe – addenrollmentserver command.
B.    Install the Active Directory Certificate Services (AD CS) role on the member server.
C.    Upgrade the member server to Windows Server 2008 R2 Enterprise.
D.    Run the certutil.exe – installdefaulttemplates command.

Answer: C

QUESTION 342
Your network contains a server named Server1. The Active Directory Rights Management Services (AD RMS) server role is installed on Server1.
An administrator changes the password of the user account that is used by AD RMS. You need to update AD RMS to use the new password.
Which console should you use?

A.    Active Directory Rights Management Services
B.    Active Directory Users and Computers
C.    Local Users and Groups
D.    Services

Answer: A

QUESTION 343
Your company, Contoso, Ltd., has a main office and a branch office. The offices are connected by a WAN link. Contoso has an Active Directory forest that contains a single domain named ad.contoso.com.
The ad.contoso.com domain contains one domain controller named DC1 that is located in the main office. DC1 is configured as a DNS server for the ad.contoso.com DNS zone. This zone is configured as a standard primary zone.
You install a new domain controller named DC2 in the branch office. You install DNS on DC2.
You need to ensure that the DNS service can update records and resolve DNS queries in the event that a WAN link fails.
What should you do?

A.    Create a new secondary zone named ad.contoso.com on DC2.
B.    Create a new stub zone named ad.contoso.com on DC2.
C.    Configure the DNS server on DC2 to forward requests to DC1.
D.    Convert the ad.contoso.com zone on DC1 to an Active Directory-integrated zone.

Answer: D

QUESTION 344
Your network contains an enterprise certification authority (CA) that runs Windows Server 2008 R2 Enterprise.
You enable key archival on the CA. The CA is configured to use custom certificate templates for Encrypted File System (EFS) certificates.
You need to archive the private key for all new EFS certificates.
Which snap-in should you use?

A.    Active Directory Users and Computers
B.    Authorization Manager
C.    Group Policy Management
D.    Enterprise PKI
E.    Security Templates
F.    TPM Management
G.    Certificates
H.    Certification Authority
I.    Certificate Templates

Answer: H

QUESTION 345
Your network contains an enterprise certification authority (CA) that runs Windows Server 2008 R2 Enterprise.
You need to ensure that all of the members of a group named Group1 can view the event log entries for Certificate Services.
Which snap-in should you use?

A.    Certificate Templates
B.    Certification Authority
C.    Authorization Manager
D.    Active Directory Users and Computers
E.    TPM Management
F.    Security Templates
G.    Group Policy Management
H.    Enterprise PKI
I.    Certificates

Answer: D

QUESTION 346
Your network contains an enterprise certification authority (CA) that runs Windows Server 2008 R2 Enterprise.
You need to ensure that users can enroll for certificates that use the IPSEC (Offline request) certificate template
Which snap-in should you use?

A.    Enterprise PKI
B.    TPM Management
C.    Certificates
D.    Active Directory Users and Computers
E.    Authorization Manager
F.    Certification Authority
G.    Group Policy Management
H.    Security Templates
I.    Certificate Templates

Answer: I

QUESTION 347
Your network contains an enterprise certification authority (CA) that runs Windows Server 2008 R2 Enterprise.
You have a custom certificate template named Template 1. Template1 is published to the CA.
You need to ensure that all of the members of a group named Group1 can enroll for certificates that use Template1.
Which snap-in should you use?

A.    Security Templates
B.    Enterprise PKI
C.    Certification Authority
D.    Certificate Templates
E.    Certificates
F.    TPM Management
G.    Authorization Manager
H.    Group Policy Management
I.    Active Directory Users and Computers

Answer: D

QUESTION 348
Your network contains an enterprise certification authority (CA) that runs Windows Server 2008 R2 Enterprise.
You need to approve a pending certificate request.
Which snap-in should you use?

A.    Active Directory Users and Computers
B.    Authorization Manager
C.    Certification Authority
D.    Group Policy Management
E.    Certificate Templates
F.    TPM Management
G.    Certificates
H.    Enterprise PKI
I.    Security Templates

Answer: C

QUESTION 349
Your network contains an Active Directory domain. The domain contains a domain controller named DC1 that runs windows Server 2008 R2 Service Pack 1 (SP1).
You need to implement a central store for domain policy templates.
What should you do?
To answer, select the source content that should be copied to the destination folder in the answer area.
3491

Answer:
3492

QUESTION 350
Your network contains an Active Directory forest named contoso.com.
You plan to migrate all user accounts to a new forest named litwareinc.com.
The functional level of the contoso.com forest is Windows Server 2003. Contoso.com contains four servers. The servers are configured as shown in the following table.
3501
The functional level of the litwareinc.com forest is Windows Server 2008. Litwareinc.com contains four servers. The servers are configured as shown in the following table.
3502
You need to identify on which server in the litwareinc.com forest you must install Active Directory Migration Tool version 3.2 (ADMT v3.2).
Which server should you identify?

A.    Litw_Srv4
B.    Litw_Srv1
C.    Litw_Srv2
D.    Litw_Srv3

Answer: D

Latest Microsoft 70-640 Practice Tests Free Download with PDF & VCE