web analytics

Latest Posts

Latest Microsoft 70-640 Practice Tests Free Download with PDF & VCE (231-240)

QUESTION 231
You have an enterprise subordinate certification authority (CA). The CA is configured to use a hardware security module. You need to back up Active Directory Certificate Services on the CA. Which command should you run?

A.    certutil.exe backup
B.    certutil.exe backupdb
C.    certutil.exe backupkey
D.    certutil.exe store

(more…)

Latest Microsoft 70-640 Practice Tests Free Download with PDF & VCE (221-230)

QUESTION 221
Your network contains an Active Directory domain. The domain is configured as shown in the exhibit. (Click the Exhibit button.) Each organizational unit (OU) contains over 500 user accounts. The Finance OU and the Human Resources OU contain several user accounts that are members of a universal group named Group1. You have a Group Policy object (GPO) linked to the domain. You need to prevent the GPO from being applied to the members of Group1 only. What should you do?

Latest Microsoft 70-640 Practice Tests Free Download with PDF & VCE (211-220)

QUESTION 211
You have a client computer named Computer1 that runs Windows 7.
On Computer1, you configure a source-initiated subscription.
You configure the subscription to retrieve all events from the Windows logs of a domain controller named DC1. The subscription is configured to use the HTTP protocol.
You discover that events from the Security log of DC1 are not collected on Computer1. Events from the Application log of DC1 and the System log of DC1 are collected on Computer1.
You need to ensure that events from the Security log of DC1 are collected on Computer1.
What should you do?

A.    Add the computer account of Computer1 to the Event Log Readers group on the domain controller.
B.    Add the Network Service security principal to the Event Log Readers group on the domain.
C.    Configure the subscription to use custom Event Delivery Optimization settings.
D.    Configure the subscription to use the HTTPS protocol.

(more…)

Latest Microsoft 70-640 Practice Tests Free Download with PDF & VCE (201-210)

QUESTION 201
Your network contains an Active Directory forest named contoso.com. The functional level of the forest is Windows Server 2008 R2.
The DNS zone for contoso.com is Active Directory-integrated.
You deploy a read-only domain controller (RODC) named R0DC1. You install the DNS Server server role on R0DC1.
You discover that R0DC1 does not have any DNS application directory partitions.
You need to ensure that R0DC1 has a copy of the DNS application directory partition of contoso.com.
What should you do? (Each correct answer presents a complete solution. Choose two.)

A.    From DNS Manager, right-click RODC1 and click Create Default Application Directory Partitions.
B.    Run ntdsutil.exe. From the Partition Management context, run the create nc command.
C.    Run dnscmd.exe and specify the /createbuiltindirectorypartitions parameter.
D.    Run ntdsutil.exe. From the Partition Management context, run the add nc replica command.
E.    Run dnscmd.exe and specify the /enlistdirectorypartition parameter.

(more…)

Latest Microsoft 70-640 Practice Tests Free Download with PDF & VCE (191-200)

QUESTION 191
Your network contains an Active Directory domain. The domain contains five sites. One of the sites contains a read-only domain controller (RODC) named RODC1. You need to identify which user accounts can have their password cached on RODC1. Which tool should you use?

A.    Repadmin
B.    Dcdiag
C.    Get-ADDomainControllerPasswordReplicationPolicyUsage
D.    Adtest

(more…)

Latest Microsoft 70-640 Practice Tests Free Download with PDF & VCE (181-190)

QUESTION 181
Your network contains two Active Directory forests named contoso.com and fabrikam.com. Each forest contains a single domain. A two-way forest trust exists between the forests. Selective authentication is enabled on the trust.
Contoso.com contains a group named Group 1.
Fabrikam.com contains a server named Server1.
You need to ensure that users in Group1 can access resources on Server1.
What should you modify?

A.    the permissions of the Group1 group
B.    the UPN suffixes of the contoso.com forest
C.    the UPN suffixes of the fabrikam.com forest
D.    the permissions of the Server1 computer account

(more…)

Latest Microsoft 70-640 Practice Tests Free Download with PDF & VCE (171-180)

QUESTION 171
You need to ensure that users who enter three successive invalid passwords within 5 minutes are locked out for 5 minutes. Which three actions should you perform? (Each correct answer presents part of the solution.Choose three.)

A.    Set the Minimum password age setting to one day.
B.    Set the Maximum password age setting to one day.
C.    Set the Account lockout duration setting to 5 minutes.
D.    Set the Reset account lockout counter after setting to 5 minutes.
E.    Set the Account lockout threshold setting to 3 invalid logon attempts.
F.    Set the Enforce password history setting to 3 passswords remembered.

(more…)