显示标签为“70-640”的博文。显示所有博文
显示标签为“70-640”的博文。显示所有博文

2014年5月27日星期二

Dernières Microsoft 70-484 70-503-Csharp 70-640 de la pratique de l'examen questions et réponses téléchargement gratuit

Vous n'avez besoin que de faire les exercices à propos du test Microsoft 70-484 offertes par Pass4Test, vous pouvez réussir le test sans aucune doute. Et ensuite, vous aurez plus de chances de promouvoir avec le Certificat. Si vous ajoutez le produit au panier, nous vous offrirons le service 24h en ligne.

Vous pouvez comparer un peu les Q&As dans les autres sites web que lesquelles de Pass4Test, c'est pas difficile à trouver que la Q&A Microsoft 70-503-Csharp est plus complète. Vous pouvez télécharger le démo gratuit à prendre un essai de la qualité de Pass4Test. La raison de la grande couverture des questions et la haute qualité des réponses vient de l'expérience riche et la connaissances professionnelles des experts de Pass4Test. La nouvelle Q&A de Microsoft 70-503-Csharp lancée par l'équipe de Pass4Test sont bien populaire par les candidats.

Votre vie changera beaucoup après d'obtenir le Certificat de Microsoft 70-640. Tout va améliorer, la vie, le boulot, etc. Après tout, Microsoft 70-640 est un test très important dans la série de test Certification Microsoft. Mais c'est pas facile à réussir le test Microsoft 70-640.

On peut voir que beaucoup de candidats ratent le test Microsoft 70-484 quand même avec l'effort et beaucoup de temps dépensés. Cest une bonne preuve que le test Microsoft 70-484 est difficile à réussir. Pass4Test offre le guide d'étude bien fiable. Sauf le test Microsoft 70-484, Pass4Test peut offrir les Q&As des autres test Certification IT.

Code d'Examen: 70-484
Nom d'Examen: Microsoft (Essentials of Developing Windows Store Apps using C#)
Questions et réponses: 64 Q&As

Code d'Examen: 70-503-Csharp
Nom d'Examen: Microsoft (TS: MS.NET Frmwrk 3.5, Wndws Commun Fndtion App Dev)
Questions et réponses: 75 Q&As

Code d'Examen: 70-640
Nom d'Examen: Microsoft (Windows Server 2008 Active Directory. Configuring)
Questions et réponses: 575 Q&As

Dans cette société de plus en plus intense, nous vous proposons à choisir une façon de se former plus efficace : moins de temps et d'argent dépensé. Pass4Test peut vous offrir une bonne solution avec une plus grande space à développer.

Un bon choix de l'outil à se former est le point essentiel à passer le test Microsoft 70-640, et les documentations à propos de rechercher le test Microsoft 70-640 est toujours une part plus importante pendant la préparation de test Certification. Les Q&As offertes par les experts de Pass4Test sont presque même que les tests réels. Pass4Test est un site web particulièrement en apportant les facilités aux gens qui veulent passer le test Certification.

70-503-Csharp Démo gratuit à télécharger: http://www.pass4test.fr/70-503-Csharp.html

NO.1 You create a Windows Communication Foundation service by using Microsoft .NET Framework 3.5.
You create the following service contract.
[ServiceContract]
public interface IMath
{
[OperationContract]
int Add(int num1, int num2);
}
You need to add an operation contract to perform the Add operation asynchronously.
Which operation contract should you use?
A. [OperationContract(AsyncPattern=true)]
IAsyncResult BeginAdd(int num1, int num2);
int EndAdd(IAsyncResult res);
B. [OperationContract]
int BeginAdd(int num1, int num2, AsyncCallback cb, object state);
IAsyncResult EndAdd();
C. [OperationContract]
IAsyncResult BeginAdd(int num1, int num2);
[OperationContract]
int EndAdd(IAsyncResult res);
D. [OperationContract(AsyncPattern=true)]
IAsyncResult BeginAdd(int num1, int num2, AsyncCallback cb, object
state);
int EndAdd(IAsyncResult res);
Answer: D

Microsoft   70-503-Csharp   certification 70-503-Csharp

NO.2 You are creating a Windows Communication Foundation service by using Microsoft .NET Framework
3.5.
You write the following code segment. (Line numbers are included for reference only.)
01 Uri baseAddress=
02 new Uri ( http://localhost:8000/ExamService );
03 Uri mexAddress=new Uri("");
04 ServiceHost serviceHost=new ServiceHost(typeof(
05 ?ExamService), baseAddress);
06 ServiceMetadataBehavior smb=
07 serviceHost.Description.Behaviors.
08 Find<ServiceMetadataBehavior>();
09 if (smb != null)
10 {
11
12 }
13 else
14 {
15 smb=new ServiceMetadataBehavior();
16 serviceHost.Description.Behaviors.Add(smb);

NO.3 You are creating a Windows Communication Foundation service by using Microsoft .NET Framework
3.5.
You write the following code segment.
namespace MyServices
{
[ServiceContract()]
interface IManageOrders
{
...
}
}
The service metadata must be exposed at the relative address named meta.
You need to add an endpoint element to the app.config file of the service host.
Which code fragment should you add?
A. <endpoint address="meta" binding="wsHttpBinding"
contract="IManageOrders" />
B. <endpoint address="meta" binding="wsHttpBinding"
contract="MyServices.IMetadataExchange" />
C. <endpoint address="meta" binding="mexHttpBinding"
contract="IMetadataExchange" />
D. <endpoint address="meta" binding="mexHttpBinding"
contract="MyServices.IManageOrders" />
Answer: C

certification Microsoft   certification 70-503-Csharp   certification 70-503-Csharp   certification 70-503-Csharp

NO.4 You are creating a Windows Communication Foundation service by using Microsoft .NET Framework
3.5.
You need to ensure that the service can send data in the following format to the client applications.
<Account Id="">
<Name> </Name>
<Balance Currency=""> </Balance>
</Account>
Which code segment should you use?
A. [Serializable]
public class Account
{
[XmlAttribute]
public string Id;
[XmlElement]
public string Name;
[XmlAttribute]
public string Currency;
[XmlElement]
public double Balance;
}
B. [DataContract]
public class Account
{
[DataMember(Order=0)]
public string Id;
[DataMember(Order=1)]
public string Name;
[DataMember(Order=0)]
public double Balance;
[DataMember(Order=1)]
public string Currency;
}
C. [Serializable]
public class Account
{
[XmlAttribute]
public string Id;
public string Name;
[XmlElement("Balance")]
public BalanceVal Balance;
}
[Serializable]
public class BalanceVal
{
[XmlText]
public double Amount;
[XmlAttribute]
public string Currency;
}
D. [DataContract]
public class Account
{
[DataMember(Order=0)]
public string Id;
[DataMember(Order=1)]
public string Name;
[DataMember(Name="Balance", Order=2)]
public BalanceVal Balance;
}
[DataContract]
public struct BalanceVal
{
[DataMember(Order=0)]
public double Balance;
[DataMember(Order=1)]
public string Currency;
}
Answer: C

certification Microsoft   70-503-Csharp examen   certification 70-503-Csharp   70-503-Csharp

NO.5 You create a Windows Communication Foundation service by using Microsoft .NET Framework 3.5.
The service contains the following code segment.
[DataContract]
public class Person
{
}
[DataContract]
public class Customer : Person
{
}
You need to create a service contract that meets the following requirements:
` The service contract must have an operation contract named GetPerson that returns an object of type
Person.
` The GetPerson operation must be able to return an object of type Customer.
Which code segment should you use?
A. [ServiceContract]
[ServiceKnownType("GetPerson")]
public interface IMyService
{
[OperationContract]
Person GetPerson();
}
B. [ServiceContract]
public interface IMyService
{
[OperationContract]
[ServiceKnownType("Customer")]
Person GetPerson();
}
C. [ServiceContract]
[ServiceKnownType(typeof(Customer))]
public interface IMyService
{
[OperationContract]
Person GetPerson();
}
D. [ServiceContract]
[ServiceKnownType("GetPerson",typeof(Customer))]
public interface IMyService
{
[OperationContract]
Person GetPerson();
}
Answer: C

Microsoft examen   70-503-Csharp   certification 70-503-Csharp   70-503-Csharp examen

NO.6 You create a Windows Communication Foundation (WCF) service by using Microsoft .NET Framework
3.5.
The WCF service contains two operations named ProcessSimpleOrder and ProcessComplexOrder.
You need to expose the ProcessSimpleOrder operation to all the client applications. You also need to
expose the ProcessComplexOrder operation only to specific client applications.
Which code segment should you use?
A. [ServiceContract]
public interface IOrderManager
{
[OperationContract(Action="*")]
void ProcessSimpleOrder();
[OperationContract]
void ProcessComplexOrder();
}
B. [ServiceContract]
public interface IOrderManager
{
[OperationContract(Name="http: //contoso.com/Simple")]
void ProcessSimpleOrder();
[OperationContract(Name="http: //contoso.com/Complex")]
void ProcessComplexOrder();
}
C. [ServiceContract]
public interface ISimpleOrderManager
{
[OperationContract]
void ProcessSimpleOrder();
}
[ServiceContract]
public interface IComplexOrderManager: ISimpleOrderManager
{
[OperationContract]
void ProcessComplexOrder();
}
D. [ServiceContract]
public interface ISimpleOrderManager
{
[OperationContract(Name="http: //contoso.com/Simple")]
void ProcessSimpleOrder();
}
public interface IComplexOrderManager: ISimpleOrderManager
{
[OperationContract(Name="http: //contoso.com/Complex")]
void ProcessComplexOrder();
}
Answer: C

Microsoft   70-503-Csharp   70-503-Csharp examen   certification 70-503-Csharp

NO.7 smb.HttpGetUrl=mexAddress;

NO.8 You are creating a Windows Communication Foundation service by using Microsoft .NET Framework

2014年5月13日星期二

Meilleur Microsoft 70-640 70-669 70-432 test formation guide

Le test simulation Microsoft 70-640 sorti par les experts de Pass4Test est bien proche du test réel. Nous sommes confiant sur notre produit qui vous permet à réussir le test Microsoft 70-640 à la première fois. Si vous ne passe pas le test, votre argent sera tout rendu.

Vous n'avez besoin que de faire les exercices à propos du test Microsoft 70-669 offertes par Pass4Test, vous pouvez réussir le test sans aucune doute. Et ensuite, vous aurez plus de chances de promouvoir avec le Certificat. Si vous ajoutez le produit au panier, nous vous offrirons le service 24h en ligne.

Différentes façons peuvent atteindre le même but, ça dépend laquelle que vous prenez. Beaucoup de gens choisissent le test Microsoft 70-432 pour améliorer la vie et la carrière. Mais tous les gens ont déjà participé le test Microsoft 70-432, ils savent qu'il est difficile à réussir le test. Il y a quelques dépensent le temps et l'argent, mais ratent finalement.

Le produit de Pass4Test est réputée par une bonne qualité et fiabilité. Vous pouvez télécharger le démo grantuit pour prendre un essai, nons avons la confiance que vous seriez satisfait. Vous n'aurez plus de raison à s'hésiter en face d'un aussi bon produit. Ajoutez notre Q&A au panier, vous aurez une meilleure préparation avant le test.

Code d'Examen: 70-640
Nom d'Examen: Microsoft (Windows Server 2008 Active Directory. Configuring)
Questions et réponses: 575 Q&As

Code d'Examen: 70-669
Nom d'Examen: Microsoft (TS:Windows Server 2008 R2, Desktop Virtualiazation)
Questions et réponses: 56 Q&As

Code d'Examen: 70-432
Nom d'Examen: Microsoft (TS:MS SQL Server 2008,Implementation and Maintenance)
Questions et réponses: 232 Q&As

Si vous êtes intéressé par l'outil formation Microsoft 70-669 étudié par Pass4Test, vous pouvez télécharger tout d'abord le démo. Le service de la mise à jour gratuite pendant un an est aussi offert pour vous.

70-640 Démo gratuit à télécharger: http://www.pass4test.fr/70-640.html

NO.1 You have two servers named Server1 and Server2. Both servers run Windows Server 2008 R2. Server1
is configured as an enterprise root certification authority (CA). You install the Online Responder role
service on Server2. You need to configure Server1 to support the Online Responder. What should you
do?
A. Import the enterprise root CA certificate.
B. Configure the Certificate Revocation List Distribution Point extension.
C. Configure the Authority Information Access (AIA) extension.
D. Add the Server2 computer account to the CertPublishers group.
Answer: C

Microsoft   certification 70-640   certification 70-640   certification 70-640   70-640 examen

NO.2 Your company uses a Windows 2008 Enterprise certificate authority (CA) to issue certificates. You
need to implement key archival. What should you do?
A. Configure the certificate for automatic enrollment for the computers that store encrypted files.
B. Install an Enterprise Subordinate CA and issue a user certificate to users of the encrypted files.
C. Apply the Hisecdc security template to the domain controllers.
D. Archive the private key on the server.
Answer: D

certification Microsoft   certification 70-640   70-640 examen

NO.3 Your company has a single Active Directory domain named intranet.adatum.com. The domain
controllers run Windows Server 2008 and the DNS server role. All computers, including non-domain
members, dynamically register their DNS records. You need to configure the intranet.adatum.com zone to
allow only domain members to dynamically register DNS records.
What should you do?
A. Set dynamic updates to Secure Only.
B. Remove the Authenticated Users group.
C. Enable zone transfers to Name Servers.
D. Deny the Everyone group the Create All Child Objects permission.
Answer: A

certification Microsoft   70-640 examen   certification 70-640   70-640 examen

NO.4 You network consists of a single Active Directory domain. All domain controllers run Windows Server
2008 R2. You need to reset the Directory Services Restore Mode (DSRM) password on a domain
controller.
What tool should you use?
A. Active Directory Users and Computers snap-in
B. ntdsutil
C. Local Users and Groups snap-in
D. dsmod
Answer: B

certification Microsoft   70-640   70-640 examen   certification 70-640

NO.5 Your network consists of a single Active Directory domain. All domain controllers run Windows Server
2008 R2. The Audit account management policy setting and Audit directory services access setting are
enabled for the entire domain. You need to ensure that changes made to Active Directory objects can be
logged. The logged changes must include the old and new values of any attributes.
What should you do.?
A. Run auditpol.exe and then configure the Security settings of the Domain Controllers OU.
B. From the Default Domain Controllers policy, enable the Audit directory service access setting and
enable directory service changes.
C. Enable the Audit account management policy in the Default Domain Controller Policy.
D. Run auditpol.exe and then enable the Audit directory service access setting in the Default Domain
policy.
Answer: B

certification Microsoft   70-640 examen   70-640 examen   70-640 examen   70-640 examen   certification 70-640

NO.6 Your company has an Active Directory domain. A user attempts to log on to a computer that was turned
off for twelve weeks. The administrator receives an error message that authentication has failed. You
need to ensure that the user is able to log on to the computer. What should you do?
A. Run the netsh command with the set and machine options.
B. Reset the computer account. Disjoin the computer from the domain, and then rejoin the computer to
the domain.
C. Run the netdom TRUST /reset command.
D. Run the Active Directory Users and Computers console to disable, and then enable the computer
account.
Answer: B

Microsoft examen   certification 70-640   70-640 examen   70-640   70-640 examen

NO.7 You are decommissioning domain controllers that hold all forest-wide operations master roles. You
need to transfer all forest-wide operations master roles to another domain controller. Which two roles
should you transfer? (Each correct answer presents part of the solution. Choose two.)
A. Domain naming master
B. Infrastructure master
C. RID master
D. PDC emulator
E. Schema master
Answer: AE

certification Microsoft   70-640 examen   70-640   70-640 examen   certification 70-640

NO.8 You have a single Active Directory domain. All domain controllers run Windows Server 2008 and are
configured as DNS servers. The domain contains one Active Directory-integrated DNS zone. You need to
ensure that outdated DNS records are automatically removed from the DNS zone.
What should you do?
A. From the properties of the zone, modify the TTL of the SOA record.
B. From the properties of the zone, enable scavenging.
C. From the command prompt, run ipconfig /flushdns.
D. From the properties of the zone, disable dynamic updates.
Answer: B

Microsoft   70-640 examen   70-640 examen

2014年3月1日星期六

Microsoft 70-640, de formation et d'essai

La solution offerte par Pass4Test comprenant un test simulation bien proche de test réel Microsoft 70-640 peut vous assurer à réussir 100% le test Microsoft 70-640. D'ailleur, le service de la mise à jour gratuite est aussi pour vous. Maintenant, vous pouvez télécharger le démo gratuit pour prendre un essai.

Vous pouvez s'exercer en Internet avec le démo gratuit. Vous allez découvrir que la Q&A de Pass4Test est laquelle le plus complète. C'est ce que vous voulez.

Pass4Test vous permet à réussir le test Certification sans beaucoup d'argents et de temps dépensés. La Q&A Microsoft 70-640 est recherchée par Pass4Test selon les résumés de test réel auparavant, laquelle est bien liée avec le test réel.

Code d'Examen: 70-640
Nom d'Examen: Microsoft (Windows Server 2008 Active Directory. Configuring)
Questions et réponses: 575 Q&As

Le Certificat Microsoft 70-640 est un passport rêvé par beaucoup de professionnels IT. Le test Microsoft 70-640 est une bonne examination pour les connaissances et techniques professionnelles. Il demande beaucoup de travaux et efforts pour passer le test Microsoft 70-640. Pass4Test est le site qui peut vous aider à économiser le temps et l'effort pour réussir le test Microsoft 70-640 avec plus de possibilités. Si vous êtes intéressé par Pass4Test, vous pouvez télécharger la partie gratuite de Q&A Microsoft 70-640 pour prendre un essai.

Quand vous hésitez même à choisir Pass4Test, le démo gratuit dans le site Pass4Test est disponible pour vous à essayer avant d'acheter. Nos démos vous feront confiant à choisir Pass4Test. Pass4Test est votre meilleur choix à passer l'examen de Certification Microsoft 70-640, et aussi une meilleure assurance du succès du test 70-640. Vous choisissez Pass4Test, vous choisissez le succès.

Si vous choisissez notre l'outil formation, Pass4Test peut vous assurer le succès 100% du test Microsoft 70-640. Votre argent sera tout rendu si vous échouez le test.

70-640 Démo gratuit à télécharger: http://www.pass4test.fr/70-640.html

NO.1 Your company has an Active Directory forest that runs at the functional level of Windows Server 2008.
You implement Active Directory Rights Management Services (AD RMS).
You install Microsoft SQL Server 2005. When you attempt to open the AD RMS administration Web site,
you receive the following error message: "SQL Server does not exist or access denied."
You need to open the AD RMS administration Web site.
Which two actions should you perform? (Each correct answer presents part of the solution.
Choose two.)
A. Restart IIS.
B. Manually delete the Service Connection Point in AD DS and restart AD RMS.
C. Install Message Queuing.
D. Start the MSSQLSVC service.
Answer: AD

certification Microsoft   70-640   70-640

NO.2 Your company has a single Active Directory domain named intranet.adatum.com. The domain
controllers run Windows Server 2008 and the DNS server role. All computers, including non-domain
members, dynamically register their DNS records. You need to configure the intranet.adatum.com zone to
allow only domain members to dynamically register DNS records.
What should you do?
A. Set dynamic updates to Secure Only.
B. Remove the Authenticated Users group.
C. Enable zone transfers to Name Servers.
D. Deny the Everyone group the Create All Child Objects permission.
Answer: A

Microsoft   70-640 examen   certification 70-640

NO.3 Your network consists of a single Active Directory domain. All domain controllers run Windows Server
2008 R2. The Audit account management policy setting and Audit directory services access setting are
enabled for the entire domain. You need to ensure that changes made to Active Directory objects can be
logged. The logged changes must include the old and new values of any attributes.
What should you do.?
A. Run auditpol.exe and then configure the Security settings of the Domain Controllers OU.
B. From the Default Domain Controllers policy, enable the Audit directory service access setting and
enable directory service changes.
C. Enable the Audit account management policy in the Default Domain Controller Policy.
D. Run auditpol.exe and then enable the Audit directory service access setting in the Default Domain
policy.
Answer: B

certification Microsoft   70-640   70-640 examen

NO.4 You have two servers named Server1 and Server2. Both servers run Windows Server 2008 R2. Server1
is configured as an enterprise root certification authority (CA). You install the Online Responder role
service on Server2. You need to configure Server1 to support the Online Responder. What should you
do?
A. Import the enterprise root CA certificate.
B. Configure the Certificate Revocation List Distribution Point extension.
C. Configure the Authority Information Access (AIA) extension.
D. Add the Server2 computer account to the CertPublishers group.
Answer: C

Microsoft examen   certification 70-640   70-640 examen   certification 70-640

NO.5 Your company has file servers located in an organizational unit named Payroll. The file servers contain
payroll files located in a folder named Payroll. You create a GPO. You need to track which employees
access the Payroll files on the file servers. What should you do?
A. Enable the Audit process tracking option. Link the GPO to the Domain Controllers organizational unit.
On the file servers, configure Auditing for the Authenticated Users group in the Payroll folder.
B. Enable the Audit object access option. Link the GPO to the Payroll organizational unit. On the file
servers, configure Auditing for the Everyone group in the Payroll folder.
C. Enable the Audit process tracking option. Link the GPO to the Payroll organizational unit. On the file
servers, configure Auditing for the Everyone group in the Payroll folder.
D. Enable the Audit object access option. Link the GPO to the domain. On the domain controllers,
configure Auditing for the Authenticated Users group in the Payroll folder.
Answer: B

Microsoft   70-640   70-640 examen

NO.6 Your company has a main office and a branch office. You deploy a read-only domain controller (RODC)
that runs Microsoft Windows Server 2008 to the branch office. You need to ensure that users at the
branch office are able to log on to the domain by using the RODC. What should you do?
A. Add another RODC to the branch office.
B. Configure a new bridgehead server in the main office.
C. Decrease the replication interval for all connection objects by using the Active Directory Sites and
Services console.
D. Configure the Password Replication Policy on the RODC. Answer: D

Microsoft   70-640   certification 70-640   70-640 examen

NO.7 Your company uses a Windows 2008 Enterprise certificate authority (CA) to issue certificates. You
need to implement key archival. What should you do?
A. Configure the certificate for automatic enrollment for the computers that store encrypted files.
B. Install an Enterprise Subordinate CA and issue a user certificate to users of the encrypted files.
C. Apply the Hisecdc security template to the domain controllers.
D. Archive the private key on the server.
Answer: D

Microsoft examen   70-640   70-640 examen   70-640

NO.8 Your company, Contoso Ltd has a main office and a branch office. The offices are connected by a WAN
link. Contoso has an Active Directory forest that contains a single domain named ad.contoso.com.
The ad.contoso.com domain contains one domain controller named DC1 that is located in the main office.
DC1 is configured as a DNS server for the ad.contoso.com DNS zone. This zone is configured as a
standard primary zone.
You install a new domain controller named DC2 in the branch office. You install DNS on DC2.
You need to ensure that the DNS service can update records and resolve DNS queries in the event that a
WAN link fails.
What should you do?
A. Create a new stub zone named ad.contoso.com on DC2.
B. Create a new standard secondary zone named ad.contoso.com on DC2.
C. Configure the DNS server on DC2 to forward requests to DC1.
D. Convert the ad.contoso.com zone on DC1 to an Active Directory-integrated zone.
Answer: D

Microsoft   70-640   70-640 examen

NO.9 Your company has an Active Directory domain. A user attempts to log on to a computer that was turned
off for twelve weeks. The administrator receives an error message that authentication has failed. You
need to ensure that the user is able to log on to the computer. What should you do?
A. Run the netsh command with the set and machine options.
B. Reset the computer account. Disjoin the computer from the domain, and then rejoin the computer to
the domain.
C. Run the netdom TRUST /reset command.
D. Run the Active Directory Users and Computers console to disable, and then enable the computer
account.
Answer: B

Microsoft   70-640   70-640 examen   certification 70-640   70-640

NO.10 You have a single Active Directory domain. All domain controllers run Windows Server 2008 and are
configured as DNS servers. The domain contains one Active Directory-integrated DNS zone. You need to
ensure that outdated DNS records are automatically removed from the DNS zone.
What should you do?
A. From the properties of the zone, modify the TTL of the SOA record.
B. From the properties of the zone, enable scavenging.
C. From the command prompt, run ipconfig /flushdns.
D. From the properties of the zone, disable dynamic updates.
Answer: B

Microsoft   70-640 examen   70-640   70-640   certification 70-640   70-640 examen

NO.11 You are decommissioning domain controllers that hold all forest-wide operations master roles. You
need to transfer all forest-wide operations master roles to another domain controller. Which two roles
should you transfer? (Each correct answer presents part of the solution. Choose two.)
A. Domain naming master
B. Infrastructure master
C. RID master
D. PDC emulator
E. Schema master
Answer: AE

Microsoft examen   70-640   70-640   certification 70-640   70-640 examen   certification 70-640

NO.12 Your company has a server that runs an instance of Active Directory Lightweight Directory Service (AD
LDS). You need to create new organizational units in the AD LDS application directory partition. What
should you do?
A. Use the dsmod OU <OrganizationalUnitDN> command to create the organizational units.
B. Use the Active Directory Users and Computers snap-in to create the organizational units on the AD
LDS application directory partition.
C. Use the dsadd OU <OrganizationalUnitDN> command to create the organizational units.
D. Use the ADSI Edit snap-in to create the organizational units on the AD LDS application directory
partition.
Answer: D

Microsoft   certification 70-640   70-640   certification 70-640

NO.13 Your network consists of an Active Directory forest that contains one domain named contoso.com. All
domain controllers run Windows Server 2008 R2 and are configured as DNS servers. You have two
Active Directory-integrated zones: contoso.com and nwtraders.com. You need to ensure a user is able to
modify records in the contoso.com zone. You must prevent the user from modifying the SOA record in the
nwtraders.com zone. What should you do?
A. From the Active Directory Users and Computers console, run the Delegation of Control Wizard.
B. From the Active Directory Users and Computers console, modify the permissions of the Domain
Controllers organizational unit (OU).
C. From the DNS Manager console, modify the permissions of the contoso.com zone.
D. From the DNS Manager console, modify the permissions of the nwtraders.com zone.
Answer: C

certification Microsoft   70-640   70-640 examen

NO.14 Your company has an Active Directory forest that contains a single domain. The domain member
server has an Active Directory Federation Services (AD FS) role installed. You need to configure AD FS to
ensure that AD FS tokens contain information from the Active Directory domain. What should you do?
A. Add and configure a new account partner.
B. Add and configure a new resource partner.
C. Add and configure a new account store.
D. Add and configure a Claims-aware application.
Answer: C

certification Microsoft   70-640   70-640 examen   70-640

NO.15 Your company has an Active Directory domain. The company has two domain controllers named DC1
and DC2. DC1 holds the Schema Master role.
DC1 fails. You log on to Active Directory by using the administrator account. You are not able to transfer
the Schema Master operations role.
You need to ensure that DC2 holds the Schema Master role.
What should you do?
A. Configure DC2 as a bridgehead server.
B. On DC2, seize the Schema Master role.
C. Log off and log on again to Active Directory by using an account that is a member of the Schema
Administrators group. Start the Active Directory Schema snap-in.
D. Register the Schmmgmt.dll. Start the Active Directory Schema snap-in.
Answer: B

certification Microsoft   certification 70-640   certification 70-640   70-640

NO.16 Your network consists of a single Active Directory domain. All domain controllers run Windows Server
2008 R2 and are configured as DNS servers. A domain controller named DC1 has a standard primary
zone for contoso.com. A domain controller named DC2 has a standard secondary zone for contoso.com.
You need to ensure that the replication of the contoso.com zone is encrypted. You must not lose any zone
data. What should you do?
A. Convert the primary zone into an Active Directory-integrated stub zone. Delete the secondary zone.
B. Convert the primary zone into an Active Directory-integrated zone. Delete the secondary zone.
C. Configure the zone transfer settings of the standard primary zone. Modify the Master Servers lists on
the secondary zone.
D. On both servers, modify the interface that the DNS server listens on.
Answer: B

Microsoft   70-640 examen   70-640   70-640 examen   70-640 examen

NO.17 Your company has an Active Directory domain. All servers run Windows Server 2008 R2. Your company
uses an Enterprise Root certificate authority (CA). You need to ensure that revoked certificate information
is highly available. What should you do?
A. Implement an Online Certificate Status Protocol (OCSP) responder by using an Internet Security and
Acceleration Server array.
B. Publish the trusted certificate authorities list to the domain by using a Group Policy Object (GPO).
C. Implement an Online Certificate Status Protocol (OCSP) responder by using Network Load Balancing.
D. Create a new Group Policy Object (GPO) that allows users to trust peer certificates. Link the GPO to
the domain.
Answer: C

certification Microsoft   70-640 examen   70-640   70-640 examen

NO.18 You network consists of a single Active Directory domain. All domain controllers run Windows Server
2008 R2. You need to reset the Directory Services Restore Mode (DSRM) password on a domain
controller.
What tool should you use?
A. Active Directory Users and Computers snap-in
B. ntdsutil
C. Local Users and Groups snap-in
D. dsmod
Answer: B

Microsoft   70-640   70-640 examen

NO.19 An Active Directory database is installed on the C volume of a domain controller. You need to move the
Active Directory database to a new volume. What should you do?
A. Copy the ntds.dit file to the new volume by using the ROBOCOPY command.
B. Move the ntds.dit file to the new volume by using Windows Explorer.
C. Move the ntds.dit file to the new volume by running the Move-item command in Microsoft Windows
PowerShell.
D. Move the ntds.dit file to the new volume by using the Files option in the Ntdsutil utility.
Answer: D

Microsoft examen   70-640   certification 70-640   70-640 examen

NO.20 Contoso, Ltd. has an Active Directory domain named ad.contoso.com. Fabrikam, Inc. has an Active
Directory domain named intranet.fabrikam.com. Fabrikam's security policy prohibits the transfer of
internal DNS zone data outside the Fabrikam network. You need to ensure that the Contoso users are
able to resolve names from the intranet.fabrikam.com domain.
What should you do?
A. Create a new stub zone for the intranet.fabrikam.com domain.
B. Configure conditional forwarding for the intranet.fabrikam.com domain.
C. Create a standard secondary zone for the intranet.fabrikam.com domain.
D. Create an Active DirectoryCintegrated zone for the intranet.fabrikam.com domain.
Answer: B

Microsoft   70-640 examen   70-640

On peut télécharger quelques parties de Q&A gratuites dans le site Pass4Test à propos de test Certification Microsoft 70-640. Vous pouvez tester notre fiabilité via le démo. Choisir Pass4Test, c'est-à-dire que vous êtes proche d'un pic ensuite de l'Industrie IT.

2014年1月29日星期三

Pass4Test offre de Microsoft 70-640 matériaux d'essai

La Q&A Microsoft 70-640 est étudiée par les experts de Pass4Test qui font tous effort en profitant leurs connaissances professionnelles. La Q&A de Pass4Test est ciblée aux candidats de test IT Certification. Vous voyez peut-être les Q&As similaires dansn les autres site web, mais il n'y a que Pass4Test d'avoir le guide d'étude plus complet. C'est le meilleur choix à s'assurer le succès de test Certification Microsoft 70-640.

Pass4Test peut non seulement vous aider à réussir votre rêve, mais encore vous offre le service gratuit pendand un an après vendre en ligne. Q&A offerte par l'équipe de Pass4Test vous assure à passer 100% le test de Certification Microsoft 70-640.

Code d'Examen: 70-640
Nom d'Examen: Microsoft (Windows Server 2008 Active Directory. Configuring)
Questions et réponses: 575 Q&As

Pass4Test a une grande équipe composée des experts d'expérience dans l'industrie IT. Leurs connaissances professionnelles et les recherches font une bonne Q&A, qui vous permet à passer le test Microsoft 70-640. Dans Pass4Test, vous pouvez trouver une façon plus convenable à se former. Les resources de Pass4Test sont bien fiable. Choisissez Pass4Test, choisissez un raccourci à réussir le test Microsoft 70-640.

Pass4Test est aussi un site d'offrir la ressource des connaissances pour le test Certification IT. Selon les Feedbacks venus de gens qui ont untilié les produits de Pass4Test, Pass4Test est un site fiable comme l'outil de se former. Les Q&As offertes par Pass4Test sont bien précises. Les experts de Pass4Test mettent à jour nos documentations de formation de temps de temps.

Dans cette société de plus en plus intense, nous vous proposons à choisir une façon de se former plus efficace : moins de temps et d'argent dépensé. Pass4Test peut vous offrir une bonne solution avec une plus grande space à développer.

70-640 Démo gratuit à télécharger: http://www.pass4test.fr/70-640.html

NO.1 Your company has an Active Directory domain. All servers run Windows Server 2008 R2. Your company
uses an Enterprise Root certificate authority (CA). You need to ensure that revoked certificate information
is highly available. What should you do?
A. Implement an Online Certificate Status Protocol (OCSP) responder by using an Internet Security and
Acceleration Server array.
B. Publish the trusted certificate authorities list to the domain by using a Group Policy Object (GPO).
C. Implement an Online Certificate Status Protocol (OCSP) responder by using Network Load Balancing.
D. Create a new Group Policy Object (GPO) that allows users to trust peer certificates. Link the GPO to
the domain.
Answer: C

Microsoft   certification 70-640   certification 70-640   certification 70-640   70-640

NO.2 You have a single Active Directory domain. All domain controllers run Windows Server 2008 and are
configured as DNS servers. The domain contains one Active Directory-integrated DNS zone. You need to
ensure that outdated DNS records are automatically removed from the DNS zone.
What should you do?
A. From the properties of the zone, modify the TTL of the SOA record.
B. From the properties of the zone, enable scavenging.
C. From the command prompt, run ipconfig /flushdns.
D. From the properties of the zone, disable dynamic updates.
Answer: B

Microsoft   70-640 examen   70-640   70-640   certification 70-640

NO.3 Your company has a single Active Directory domain named intranet.adatum.com. The domain
controllers run Windows Server 2008 and the DNS server role. All computers, including non-domain
members, dynamically register their DNS records. You need to configure the intranet.adatum.com zone to
allow only domain members to dynamically register DNS records.
What should you do?
A. Set dynamic updates to Secure Only.
B. Remove the Authenticated Users group.
C. Enable zone transfers to Name Servers.
D. Deny the Everyone group the Create All Child Objects permission.
Answer: A

Microsoft   70-640   70-640   certification 70-640

NO.4 You network consists of a single Active Directory domain. All domain controllers run Windows Server
2008 R2. You need to reset the Directory Services Restore Mode (DSRM) password on a domain
controller.
What tool should you use?
A. Active Directory Users and Computers snap-in
B. ntdsutil
C. Local Users and Groups snap-in
D. dsmod
Answer: B

Microsoft   70-640   70-640   70-640   70-640   70-640 examen

NO.5 Your company has a server that runs an instance of Active Directory Lightweight Directory Service (AD
LDS). You need to create new organizational units in the AD LDS application directory partition. What
should you do?
A. Use the dsmod OU <OrganizationalUnitDN> command to create the organizational units.
B. Use the Active Directory Users and Computers snap-in to create the organizational units on the AD
LDS application directory partition.
C. Use the dsadd OU <OrganizationalUnitDN> command to create the organizational units.
D. Use the ADSI Edit snap-in to create the organizational units on the AD LDS application directory
partition.
Answer: D

certification Microsoft   70-640   certification 70-640   70-640   70-640

NO.6 Your company has an Active Directory domain. A user attempts to log on to a computer that was turned
off for twelve weeks. The administrator receives an error message that authentication has failed. You
need to ensure that the user is able to log on to the computer. What should you do?
A. Run the netsh command with the set and machine options.
B. Reset the computer account. Disjoin the computer from the domain, and then rejoin the computer to
the domain.
C. Run the netdom TRUST /reset command.
D. Run the Active Directory Users and Computers console to disable, and then enable the computer
account.
Answer: B

certification Microsoft   70-640   70-640 examen   certification 70-640

NO.7 Your company, Contoso Ltd has a main office and a branch office. The offices are connected by a WAN
link. Contoso has an Active Directory forest that contains a single domain named ad.contoso.com.
The ad.contoso.com domain contains one domain controller named DC1 that is located in the main office.
DC1 is configured as a DNS server for the ad.contoso.com DNS zone. This zone is configured as a
standard primary zone.
You install a new domain controller named DC2 in the branch office. You install DNS on DC2.
You need to ensure that the DNS service can update records and resolve DNS queries in the event that a
WAN link fails.
What should you do?
A. Create a new stub zone named ad.contoso.com on DC2.
B. Create a new standard secondary zone named ad.contoso.com on DC2.
C. Configure the DNS server on DC2 to forward requests to DC1.
D. Convert the ad.contoso.com zone on DC1 to an Active Directory-integrated zone.
Answer: D

Microsoft   70-640   certification 70-640   70-640

NO.8 Your company has an Active Directory domain. The company has two domain controllers named DC1
and DC2. DC1 holds the Schema Master role.
DC1 fails. You log on to Active Directory by using the administrator account. You are not able to transfer
the Schema Master operations role.
You need to ensure that DC2 holds the Schema Master role.
What should you do?
A. Configure DC2 as a bridgehead server.
B. On DC2, seize the Schema Master role.
C. Log off and log on again to Active Directory by using an account that is a member of the Schema
Administrators group. Start the Active Directory Schema snap-in.
D. Register the Schmmgmt.dll. Start the Active Directory Schema snap-in.
Answer: B

Microsoft   certification 70-640   70-640   70-640   70-640 examen

NO.9 Your company has an Active Directory forest that runs at the functional level of Windows Server 2008.
You implement Active Directory Rights Management Services (AD RMS).
You install Microsoft SQL Server 2005. When you attempt to open the AD RMS administration Web site,
you receive the following error message: "SQL Server does not exist or access denied."
You need to open the AD RMS administration Web site.
Which two actions should you perform? (Each correct answer presents part of the solution.
Choose two.)
A. Restart IIS.
B. Manually delete the Service Connection Point in AD DS and restart AD RMS.
C. Install Message Queuing.
D. Start the MSSQLSVC service.
Answer: AD

Microsoft examen   70-640   70-640 examen   70-640   certification 70-640

NO.10 An Active Directory database is installed on the C volume of a domain controller. You need to move the
Active Directory database to a new volume. What should you do?
A. Copy the ntds.dit file to the new volume by using the ROBOCOPY command.
B. Move the ntds.dit file to the new volume by using Windows Explorer.
C. Move the ntds.dit file to the new volume by running the Move-item command in Microsoft Windows
PowerShell.
D. Move the ntds.dit file to the new volume by using the Files option in the Ntdsutil utility.
Answer: D

Microsoft   70-640 examen   70-640

NO.11 Your company has a main office and a branch office. You deploy a read-only domain controller (RODC)
that runs Microsoft Windows Server 2008 to the branch office. You need to ensure that users at the
branch office are able to log on to the domain by using the RODC. What should you do?
A. Add another RODC to the branch office.
B. Configure a new bridgehead server in the main office.
C. Decrease the replication interval for all connection objects by using the Active Directory Sites and
Services console.
D. Configure the Password Replication Policy on the RODC. Answer: D

certification Microsoft   70-640   70-640 examen   certification 70-640

NO.12 You have two servers named Server1 and Server2. Both servers run Windows Server 2008 R2. Server1
is configured as an enterprise root certification authority (CA). You install the Online Responder role
service on Server2. You need to configure Server1 to support the Online Responder. What should you
do?
A. Import the enterprise root CA certificate.
B. Configure the Certificate Revocation List Distribution Point extension.
C. Configure the Authority Information Access (AIA) extension.
D. Add the Server2 computer account to the CertPublishers group.
Answer: C

Microsoft   70-640 examen   70-640

NO.13 Your network consists of a single Active Directory domain. All domain controllers run Windows Server
2008 R2. The Audit account management policy setting and Audit directory services access setting are
enabled for the entire domain. You need to ensure that changes made to Active Directory objects can be
logged. The logged changes must include the old and new values of any attributes.
What should you do.?
A. Run auditpol.exe and then configure the Security settings of the Domain Controllers OU.
B. From the Default Domain Controllers policy, enable the Audit directory service access setting and
enable directory service changes.
C. Enable the Audit account management policy in the Default Domain Controller Policy.
D. Run auditpol.exe and then enable the Audit directory service access setting in the Default Domain
policy.
Answer: B

Microsoft   70-640   70-640 examen   70-640

NO.14 You are decommissioning domain controllers that hold all forest-wide operations master roles. You
need to transfer all forest-wide operations master roles to another domain controller. Which two roles
should you transfer? (Each correct answer presents part of the solution. Choose two.)
A. Domain naming master
B. Infrastructure master
C. RID master
D. PDC emulator
E. Schema master
Answer: AE

Microsoft   70-640 examen   70-640 examen   70-640

NO.15 Your company uses a Windows 2008 Enterprise certificate authority (CA) to issue certificates. You
need to implement key archival. What should you do?
A. Configure the certificate for automatic enrollment for the computers that store encrypted files.
B. Install an Enterprise Subordinate CA and issue a user certificate to users of the encrypted files.
C. Apply the Hisecdc security template to the domain controllers.
D. Archive the private key on the server.
Answer: D

Microsoft examen   70-640   70-640   70-640

NO.16 Your company has file servers located in an organizational unit named Payroll. The file servers contain
payroll files located in a folder named Payroll. You create a GPO. You need to track which employees
access the Payroll files on the file servers. What should you do?
A. Enable the Audit process tracking option. Link the GPO to the Domain Controllers organizational unit.
On the file servers, configure Auditing for the Authenticated Users group in the Payroll folder.
B. Enable the Audit object access option. Link the GPO to the Payroll organizational unit. On the file
servers, configure Auditing for the Everyone group in the Payroll folder.
C. Enable the Audit process tracking option. Link the GPO to the Payroll organizational unit. On the file
servers, configure Auditing for the Everyone group in the Payroll folder.
D. Enable the Audit object access option. Link the GPO to the domain. On the domain controllers,
configure Auditing for the Authenticated Users group in the Payroll folder.
Answer: B

Microsoft examen   70-640 examen   certification 70-640   70-640   70-640

NO.17 Your company has an Active Directory forest that contains a single domain. The domain member
server has an Active Directory Federation Services (AD FS) role installed. You need to configure AD FS to
ensure that AD FS tokens contain information from the Active Directory domain. What should you do?
A. Add and configure a new account partner.
B. Add and configure a new resource partner.
C. Add and configure a new account store.
D. Add and configure a Claims-aware application.
Answer: C

Microsoft   70-640   70-640 examen   70-640   certification 70-640   certification 70-640

NO.18 Your network consists of an Active Directory forest that contains one domain named contoso.com. All
domain controllers run Windows Server 2008 R2 and are configured as DNS servers. You have two
Active Directory-integrated zones: contoso.com and nwtraders.com. You need to ensure a user is able to
modify records in the contoso.com zone. You must prevent the user from modifying the SOA record in the
nwtraders.com zone. What should you do?
A. From the Active Directory Users and Computers console, run the Delegation of Control Wizard.
B. From the Active Directory Users and Computers console, modify the permissions of the Domain
Controllers organizational unit (OU).
C. From the DNS Manager console, modify the permissions of the contoso.com zone.
D. From the DNS Manager console, modify the permissions of the nwtraders.com zone.
Answer: C

Microsoft   70-640 examen   70-640

NO.19 Your network consists of a single Active Directory domain. All domain controllers run Windows Server
2008 R2 and are configured as DNS servers. A domain controller named DC1 has a standard primary
zone for contoso.com. A domain controller named DC2 has a standard secondary zone for contoso.com.
You need to ensure that the replication of the contoso.com zone is encrypted. You must not lose any zone
data. What should you do?
A. Convert the primary zone into an Active Directory-integrated stub zone. Delete the secondary zone.
B. Convert the primary zone into an Active Directory-integrated zone. Delete the secondary zone.
C. Configure the zone transfer settings of the standard primary zone. Modify the Master Servers lists on
the secondary zone.
D. On both servers, modify the interface that the DNS server listens on.
Answer: B

Microsoft   certification 70-640   70-640   70-640 examen   certification 70-640

NO.20 Contoso, Ltd. has an Active Directory domain named ad.contoso.com. Fabrikam, Inc. has an Active
Directory domain named intranet.fabrikam.com. Fabrikam's security policy prohibits the transfer of
internal DNS zone data outside the Fabrikam network. You need to ensure that the Contoso users are
able to resolve names from the intranet.fabrikam.com domain.
What should you do?
A. Create a new stub zone for the intranet.fabrikam.com domain.
B. Configure conditional forwarding for the intranet.fabrikam.com domain.
C. Create a standard secondary zone for the intranet.fabrikam.com domain.
D. Create an Active DirectoryCintegrated zone for the intranet.fabrikam.com domain.
Answer: B

Microsoft examen   70-640   70-640 examen

Nous assurons seulement le succès de test certification, mais encore la mise à jour est gratuite pour vous. Si vous ne pouvez pas passer le test, votre argent sera 100% rendu. Toutefois, cette possibilité n'est presque pas de se produire. Vous pouvez tout d'abord télécharger le démo gratuit pour prendre un essai.

2013年12月1日星期日

Microsoft meilleur examen 70-640, questions et réponses

Le programme de formation Microsoft 70-640 offert par Pass4Test comprend les exercices et les test simulation. Vous voyez aussi les autres sites d'offrir l'outil de formation, mais c'est pas difficile à découvrir une grand écart de la qualité entre Pass4Test et les autres fournisseurs. Celui de Pass4Test est plus complet et convenable pour la préparation dans une courte terme.

Pass4Test peut offrir nombreux de documentations aux candidats de test Microsoft 70-640, et aider les candidats à réussir le test. Les marétiaux visés au test Microsoft 70-640 sont tout recherchés par les experts avec leurs connaissances professionnelles et les expériences. Les charactéristiques se reflètent dans la bonne qualité de Q&A, la vitesse de la mise à jour. Le point plus important est que notre Q&A est laquelle le plus proche du test réel. Pass4Test peut vous permettre à réussir le test Microsoft 70-640 100%.

Beaucoup de travailleurs espèrent obtenir quelques Certificat IT pour avoir une plus grande space de s'améliorer. Certains certificats peut vous aider à réaliser ce rêve. Le test Microsoft 70-640 est un certificat comme ça. Mais il est difficile à réussir. Il y a plusieurs façons pour se préparer, vous pouvez dépenser plein de temps et d'effort, ou vous pouvez choisir une bonne formation en Internet. Pass4Test est un bon fournisseur de l'outil formation de vous aider à atteindre votre but. Selons vos connaissances à propos de Pass4Test, vous allez faire un bon choix de votre formation.

Dans ce monde d'informatique, l'industrie IT est suivi par de plus en plus de ges. Dans ce domaine demandant beaucoup de techniques, il faut des Certificat à se preuver les techniques professionnelle. Les Certificats IT sont improtant pour un interviewé pendant un entretien. C'est pas facile à passer le test Microsoft 70-640, donc c'est pourquoi beaucoup de professionnels qui choisissent ce Certificat pour se preuver.

Nous sommes clairs que ce soit necessaire d'avoir quelques certificats IT dans cette industrie de plus en plus intense. Le Certificat IT est une bonne examination des connaissances démandées. Dans l'Industrie IT, le test Microsoft 70-640 est une bonne examination. Mais c'est difficile à passer le test Microsoft 70-640. Pour améliorer le travail dans le future, c'est intélligent de prendre une bonne formation en coûtant un peu d'argent. Vous allez passer le test 100% en utilisant le Pass4Test. Votre argent sera tout rendu si votre test est raté.

Beaucoup de gens trouvent difficile à passer le test Microsoft 70-640, c'est juste parce que ils n'ont pas bien choisi une bonne Q&A. Vous penserez que le test Microsoft 70-640 n'est pas du tout autant dur que l'imaginer. Le produit de Pass4Test non seulement comprend les Q&As qui sont impressionnées par sa grande couverture des Questions, mais aussi le service en ligne et le service après vendre.

Vous pouvez trouver un meilleur boulot dans l'industrie IT à travers d'obtenir le test Microsoft 70-640, la voie à la réussite de votre professionnel sera ouverte pour vous.

Code d'Examen: 70-640
Nom d'Examen: Microsoft (Windows Server 2008 Active Directory. Configuring)
Questions et réponses: 575 Q&As

70-640 Démo gratuit à télécharger: http://www.pass4test.fr/70-640.html

NO.1 Your company uses a Windows 2008 Enterprise certificate authority (CA) to issue certificates. You
need to implement key archival. What should you do?
A. Configure the certificate for automatic enrollment for the computers that store encrypted files.
B. Install an Enterprise Subordinate CA and issue a user certificate to users of the encrypted files.
C. Apply the Hisecdc security template to the domain controllers.
D. Archive the private key on the server.
Answer: D

Microsoft examen   70-640 examen   70-640 examen   70-640

NO.2 You have a single Active Directory domain. All domain controllers run Windows Server 2008 and are
configured as DNS servers. The domain contains one Active Directory-integrated DNS zone. You need to
ensure that outdated DNS records are automatically removed from the DNS zone.
What should you do?
A. From the properties of the zone, modify the TTL of the SOA record.
B. From the properties of the zone, enable scavenging.
C. From the command prompt, run ipconfig /flushdns.
D. From the properties of the zone, disable dynamic updates.
Answer: B

Microsoft   certification 70-640   70-640   70-640 examen

NO.3 Your network consists of a single Active Directory domain. All domain controllers run Windows Server
2008 R2 and are configured as DNS servers. A domain controller named DC1 has a standard primary
zone for contoso.com. A domain controller named DC2 has a standard secondary zone for contoso.com.
You need to ensure that the replication of the contoso.com zone is encrypted. You must not lose any zone
data. What should you do?
A. Convert the primary zone into an Active Directory-integrated stub zone. Delete the secondary zone.
B. Convert the primary zone into an Active Directory-integrated zone. Delete the secondary zone.
C. Configure the zone transfer settings of the standard primary zone. Modify the Master Servers lists on
the secondary zone.
D. On both servers, modify the interface that the DNS server listens on.
Answer: B

Microsoft   70-640 examen   certification 70-640

NO.4 Your company has a single Active Directory domain named intranet.adatum.com. The domain
controllers run Windows Server 2008 and the DNS server role. All computers, including non-domain
members, dynamically register their DNS records. You need to configure the intranet.adatum.com zone to
allow only domain members to dynamically register DNS records.
What should you do?
A. Set dynamic updates to Secure Only.
B. Remove the Authenticated Users group.
C. Enable zone transfers to Name Servers.
D. Deny the Everyone group the Create All Child Objects permission.
Answer: A

Microsoft   certification 70-640   certification 70-640

NO.5 Your network consists of a single Active Directory domain. All domain controllers run Windows Server
2008 R2. The Audit account management policy setting and Audit directory services access setting are
enabled for the entire domain. You need to ensure that changes made to Active Directory objects can be
logged. The logged changes must include the old and new values of any attributes.
What should you do.?
A. Run auditpol.exe and then configure the Security settings of the Domain Controllers OU.
B. From the Default Domain Controllers policy, enable the Audit directory service access setting and
enable directory service changes.
C. Enable the Audit account management policy in the Default Domain Controller Policy.
D. Run auditpol.exe and then enable the Audit directory service access setting in the Default Domain
policy.
Answer: B

Microsoft   70-640   certification 70-640   70-640

NO.6 Your company has an Active Directory domain. The company has two domain controllers named DC1
and DC2. DC1 holds the Schema Master role.
DC1 fails. You log on to Active Directory by using the administrator account. You are not able to transfer
the Schema Master operations role.
You need to ensure that DC2 holds the Schema Master role.
What should you do?
A. Configure DC2 as a bridgehead server.
B. On DC2, seize the Schema Master role.
C. Log off and log on again to Active Directory by using an account that is a member of the Schema
Administrators group. Start the Active Directory Schema snap-in.
D. Register the Schmmgmt.dll. Start the Active Directory Schema snap-in.
Answer: B

Microsoft   70-640 examen   70-640 examen

NO.7 Your company has an Active Directory domain. All servers run Windows Server 2008 R2. Your company
uses an Enterprise Root certificate authority (CA). You need to ensure that revoked certificate information
is highly available. What should you do?
A. Implement an Online Certificate Status Protocol (OCSP) responder by using an Internet Security and
Acceleration Server array.
B. Publish the trusted certificate authorities list to the domain by using a Group Policy Object (GPO).
C. Implement an Online Certificate Status Protocol (OCSP) responder by using Network Load Balancing.
D. Create a new Group Policy Object (GPO) that allows users to trust peer certificates. Link the GPO to
the domain.
Answer: C

Microsoft   70-640   certification 70-640

NO.8 Contoso, Ltd. has an Active Directory domain named ad.contoso.com. Fabrikam, Inc. has an Active
Directory domain named intranet.fabrikam.com. Fabrikam's security policy prohibits the transfer of
internal DNS zone data outside the Fabrikam network. You need to ensure that the Contoso users are
able to resolve names from the intranet.fabrikam.com domain.
What should you do?
A. Create a new stub zone for the intranet.fabrikam.com domain.
B. Configure conditional forwarding for the intranet.fabrikam.com domain.
C. Create a standard secondary zone for the intranet.fabrikam.com domain.
D. Create an Active DirectoryCintegrated zone for the intranet.fabrikam.com domain.
Answer: B

certification Microsoft   70-640   70-640 examen

NO.9 You network consists of a single Active Directory domain. All domain controllers run Windows Server
2008 R2. You need to reset the Directory Services Restore Mode (DSRM) password on a domain
controller.
What tool should you use?
A. Active Directory Users and Computers snap-in
B. ntdsutil
C. Local Users and Groups snap-in
D. dsmod
Answer: B

Microsoft   70-640   70-640

NO.10 You are decommissioning domain controllers that hold all forest-wide operations master roles. You
need to transfer all forest-wide operations master roles to another domain controller. Which two roles
should you transfer? (Each correct answer presents part of the solution. Choose two.)
A. Domain naming master
B. Infrastructure master
C. RID master
D. PDC emulator
E. Schema master
Answer: AE

Microsoft   certification 70-640   70-640   70-640 examen   70-640

NO.11 Your company has a main office and a branch office. You deploy a read-only domain controller (RODC)
that runs Microsoft Windows Server 2008 to the branch office. You need to ensure that users at the
branch office are able to log on to the domain by using the RODC. What should you do?
A. Add another RODC to the branch office.
B. Configure a new bridgehead server in the main office.
C. Decrease the replication interval for all connection objects by using the Active Directory Sites and
Services console.
D. Configure the Password Replication Policy on the RODC. Answer: D

Microsoft examen   70-640 examen   70-640   70-640   70-640

NO.12 Your network consists of an Active Directory forest that contains one domain named contoso.com. All
domain controllers run Windows Server 2008 R2 and are configured as DNS servers. You have two
Active Directory-integrated zones: contoso.com and nwtraders.com. You need to ensure a user is able to
modify records in the contoso.com zone. You must prevent the user from modifying the SOA record in the
nwtraders.com zone. What should you do?
A. From the Active Directory Users and Computers console, run the Delegation of Control Wizard.
B. From the Active Directory Users and Computers console, modify the permissions of the Domain
Controllers organizational unit (OU).
C. From the DNS Manager console, modify the permissions of the contoso.com zone.
D. From the DNS Manager console, modify the permissions of the nwtraders.com zone.
Answer: C

Microsoft examen   certification 70-640   70-640   70-640 examen

NO.13 Your company has a server that runs an instance of Active Directory Lightweight Directory Service (AD
LDS). You need to create new organizational units in the AD LDS application directory partition. What
should you do?
A. Use the dsmod OU <OrganizationalUnitDN> command to create the organizational units.
B. Use the Active Directory Users and Computers snap-in to create the organizational units on the AD
LDS application directory partition.
C. Use the dsadd OU <OrganizationalUnitDN> command to create the organizational units.
D. Use the ADSI Edit snap-in to create the organizational units on the AD LDS application directory
partition.
Answer: D

Microsoft examen   70-640   70-640   70-640

NO.14 Your company, Contoso Ltd has a main office and a branch office. The offices are connected by a WAN
link. Contoso has an Active Directory forest that contains a single domain named ad.contoso.com.
The ad.contoso.com domain contains one domain controller named DC1 that is located in the main office.
DC1 is configured as a DNS server for the ad.contoso.com DNS zone. This zone is configured as a
standard primary zone.
You install a new domain controller named DC2 in the branch office. You install DNS on DC2.
You need to ensure that the DNS service can update records and resolve DNS queries in the event that a
WAN link fails.
What should you do?
A. Create a new stub zone named ad.contoso.com on DC2.
B. Create a new standard secondary zone named ad.contoso.com on DC2.
C. Configure the DNS server on DC2 to forward requests to DC1.
D. Convert the ad.contoso.com zone on DC1 to an Active Directory-integrated zone.
Answer: D

Microsoft   70-640 examen   70-640   70-640 examen   70-640

NO.15 An Active Directory database is installed on the C volume of a domain controller. You need to move the
Active Directory database to a new volume. What should you do?
A. Copy the ntds.dit file to the new volume by using the ROBOCOPY command.
B. Move the ntds.dit file to the new volume by using Windows Explorer.
C. Move the ntds.dit file to the new volume by running the Move-item command in Microsoft Windows
PowerShell.
D. Move the ntds.dit file to the new volume by using the Files option in the Ntdsutil utility.
Answer: D

Microsoft examen   70-640   70-640 examen

NO.16 You have two servers named Server1 and Server2. Both servers run Windows Server 2008 R2. Server1
is configured as an enterprise root certification authority (CA). You install the Online Responder role
service on Server2. You need to configure Server1 to support the Online Responder. What should you
do?
A. Import the enterprise root CA certificate.
B. Configure the Certificate Revocation List Distribution Point extension.
C. Configure the Authority Information Access (AIA) extension.
D. Add the Server2 computer account to the CertPublishers group.
Answer: C

Microsoft examen   70-640   certification 70-640   70-640 examen

NO.17 Your company has an Active Directory forest that runs at the functional level of Windows Server 2008.
You implement Active Directory Rights Management Services (AD RMS).
You install Microsoft SQL Server 2005. When you attempt to open the AD RMS administration Web site,
you receive the following error message: "SQL Server does not exist or access denied."
You need to open the AD RMS administration Web site.
Which two actions should you perform? (Each correct answer presents part of the solution.
Choose two.)
A. Restart IIS.
B. Manually delete the Service Connection Point in AD DS and restart AD RMS.
C. Install Message Queuing.
D. Start the MSSQLSVC service.
Answer: AD

Microsoft examen   70-640   70-640   70-640

NO.18 Your company has an Active Directory domain. A user attempts to log on to a computer that was turned
off for twelve weeks. The administrator receives an error message that authentication has failed. You
need to ensure that the user is able to log on to the computer. What should you do?
A. Run the netsh command with the set and machine options.
B. Reset the computer account. Disjoin the computer from the domain, and then rejoin the computer to
the domain.
C. Run the netdom TRUST /reset command.
D. Run the Active Directory Users and Computers console to disable, and then enable the computer
account.
Answer: B

Microsoft   70-640   70-640   70-640

NO.19 Your company has file servers located in an organizational unit named Payroll. The file servers contain
payroll files located in a folder named Payroll. You create a GPO. You need to track which employees
access the Payroll files on the file servers. What should you do?
A. Enable the Audit process tracking option. Link the GPO to the Domain Controllers organizational unit.
On the file servers, configure Auditing for the Authenticated Users group in the Payroll folder.
B. Enable the Audit object access option. Link the GPO to the Payroll organizational unit. On the file
servers, configure Auditing for the Everyone group in the Payroll folder.
C. Enable the Audit process tracking option. Link the GPO to the Payroll organizational unit. On the file
servers, configure Auditing for the Everyone group in the Payroll folder.
D. Enable the Audit object access option. Link the GPO to the domain. On the domain controllers,
configure Auditing for the Authenticated Users group in the Payroll folder.
Answer: B

Microsoft   70-640 examen   certification 70-640   70-640 examen

NO.20 Your company has an Active Directory forest that contains a single domain. The domain member
server has an Active Directory Federation Services (AD FS) role installed. You need to configure AD FS to
ensure that AD FS tokens contain information from the Active Directory domain. What should you do?
A. Add and configure a new account partner.
B. Add and configure a new resource partner.
C. Add and configure a new account store.
D. Add and configure a Claims-aware application.
Answer: C

certification Microsoft   certification 70-640   70-640   70-640 examen   70-640

Vous pouvez s'exercer en Internet avec le démo gratuit. Vous allez découvrir que la Q&A de Pass4Test est laquelle le plus complète. C'est ce que vous voulez.