Microsoft.testKing.70 640.v2012!02!07.by.redaxium ExamP

14
 Exam P QUESTION 1 Your network contains an enterprise certification authority (CA) that runs Windows Server 2008 R2 Enterprise. You need to ensure that all of the members of a group named Group1 can view the event log entries for Certificate Services. Which snap-in should you use?  A. Certificate Templates B. Cer tif ica tio n Aut hor ity C. Aut hor izati on Manager D. Acti ve Dir ectory Users and Computers E. TPM Management F. Sec uri ty Templates G. Gro up Pol icy Management H. Enterpri se PKI I. Cer tif ic at es Answer: C Section: Cooper Exam D Explanation/Reference: Explanation: QUESTION 2 Your network contains an enterprise certification authority (CA) that runs Windows Server 2008 R2 Enterprise. You need to ensure that users can enroll for certificates that use the IPSEC (Offline request) certificate template Which snap-in should you use?  A. Enterprise PKI B. TPM Management C. Cert if icat es D. Acti ve Dir ectory Users and Computers E. Aut horizati on Manager F. Cer tif ica tio n Authori ty G. Gro up Pol icy Management H. Sec uri ty T emp lat es I. Cert if icat e Templates Answer: I Section: Cooper Exam D Explanation/Reference: Explanation: QUESTION 3

Transcript of Microsoft.testKing.70 640.v2012!02!07.by.redaxium ExamP

5/17/2018 Microsoft.testKing.70 640.v2012!02!07.by.redaxium ExamP - slidepdf.com

http://slidepdf.com/reader/full/microsofttestking70-640v20120207byredaxium-examp 1/14

Exam P

QUESTION 1Your network contains an enterprise certification authority (CA) that runs Windows Server 2008 R2 Enterprise.

You need to ensure that all of the members of a group named Group1 can view the event log entries for Certificate Services.

Which snap-in should you use?

 A. Certificate Templates

B. Certification Authority

C. Authorization Manager 

D. Active Directory Users and Computers

E. TPM Management

F. Security Templates

G. Group Policy Management

H. Enterprise PKI

I. Certificates

Answer: CSection: Cooper Exam D

Explanation/Reference:Explanation:

QUESTION 2Your network contains an enterprise certification authority (CA) that runs Windows Server 2008 R2 Enterprise.

You need to ensure that users can enroll for certificates that use the IPSEC (Offline request) certificate

template

Which snap-in should you use?

 A. Enterprise PKI

B. TPM Management

C. Certificates

D. Active Directory Users and Computers

E. Authorization Manager 

F. Certification Authority

G. Group Policy Management

H. Security Templates

I. Certificate Templates

Answer: ISection: Cooper Exam D

Explanation/Reference:Explanation:

QUESTION 3

5/17/2018 Microsoft.testKing.70 640.v2012!02!07.by.redaxium ExamP - slidepdf.com

http://slidepdf.com/reader/full/microsofttestking70-640v20120207byredaxium-examp 2/14

Your network contains an enterprise certification authority (CA) that runs Windows Server 2008 R2 Enterprise.

You have a custom certificate template named Template 1. Template1 is published to the CA.

You need to ensure that all of the members of a group named Group1 can enroll for certificates that useTemplate1.

Which snap-in should you use?

 A. Security Templates

B. Enterprise PKI

C. Certification Authority

D. Certificate Templates

E. Certificates

F. TPM Management

G. Authorization Manager 

H. Group Policy Management

I. Active Directory Users and Computers

Answer: DSection: Cooper Exam D

Explanation/Reference:Explanation:

QUESTION 4Your network contains an enterprise certification authority (CA) that runs Windows Server 2008 R2 Enterprise.

You need to approve a pending certificate request.

Which snap-in should you use?

 A. Active Directory Users and Computers

B. Authorization Manager 

C. Certification Authority

D. Group Policy Management

E. Certificate Templates

F. TPM Management

G. Certificates

H. Enterprise PKI

I. Security Templates

Answer: CSection: Cooper Exam D

Explanation/Reference:Explanation:

QUESTION 5Your network contains an Active Directory domain named adatum.com.

5/17/2018 Microsoft.testKing.70 640.v2012!02!07.by.redaxium ExamP - slidepdf.com

http://slidepdf.com/reader/full/microsofttestking70-640v20120207byredaxium-examp 3/14

You need to ensure that IP addresses can be resolved to fully qualified domain names (FQDNs).

Under which node in the DNS snap-in should you add a zone?

 A. Reverse Lookup Zones

B. adatum.com

C. Forward Lookup Zones

D. Conditional Forwarders

E. _msdcs.adatum.com

Answer: ASection: Cooper Exam D

Explanation/Reference:Explanation:

QUESTION 6Your network contains an Active Directory domain named adatum.com. The domain contains a domain

controller named DC1. DC1 has an IP address of 192.168.200.100.

You need to identify the zone that contains the Pointer (PTR) record for 0C1.

Which zone should you identify?

 A. adatum.com

B. _msdcs.adatum.com

C. 100.168.192.in-addr.arpa

D. 200.168.192.in-addr.arpa

Answer: D

Section: Cooper Exam D

Explanation/Reference:Explanation:

QUESTION 7Your network contains an Active Directory forest named adatum.com.

The DNS infrastructure fails.

You rebuild the DNS infrastructure.You need to force the registration of the Active Directory Service Locator (SRV) records in DNS.

Which service should you restart on the domain controllers?

 A. Netlogon

B. DNS Server 

C. Network Location Awareness

D. Network Store Interface Service

E. Online Responder Service

Answer: A

5/17/2018 Microsoft.testKing.70 640.v2012!02!07.by.redaxium ExamP - slidepdf.com

http://slidepdf.com/reader/full/microsofttestking70-640v20120207byredaxium-examp 4/14

Section: Cooper Exam D

Explanation/Reference:Explanation:

QUESTION 8

Your network contains an Active Directory domain named adatum.com.

The password policy of the domain requires that the passwords for all user accounts be changed every 50days.

You need to create several user accounts that will be used by services. The passwords for these accountsmust be changed automatically every 50 days.

Which tool should you use to create the accounts?

 A. Active Directory Administrative Center 

B. Active Directory Users and Computers

C. Active Directory Module for Windows PowerShell

D. ADSI Edit

E. Active Directory Domains and Trusts

Answer: CSection: Cooper Exam D

Explanation/Reference:Explanation:

QUESTION 9Your network contains an Active Directory domain. The domain contains several domain controllers. You need

to modify the Password Replication Policy on a read-only domain controller (RODC).Which tool should you use?

 A. Group Policy Management

B. Active Directory Domains and Trusts

C. Active Directory Users and Computers

D. Computer Management

E. Security Configuration Wizard

Answer: CSection: Cooper Exam D

Explanation/Reference:Explanation:

QUESTION 10Your network contains an Active Directory forest. The forest contains domain controllers that run WindowsServer 2008 R2. The functional level of the forest is Windows Server 2003. The functional level of the domainis Windows Server 2008.

From a domain controller, you need to perform an authoritative restore of an organizational unit (OU).

5/17/2018 Microsoft.testKing.70 640.v2012!02!07.by.redaxium ExamP - slidepdf.com

http://slidepdf.com/reader/full/microsofttestking70-640v20120207byredaxium-examp 5/14

What should you do first?

 A. Raise the functional level of the forest

B. Modify the tombstone lifetime of the forest.

C. Restore the system state.

D. Raise the functional level of the domain.

Answer: CSection: Cooper Exam D

Explanation/Reference:Explanation:

QUESTION 11Your network contains an Active Directory forest. The forest contains two domains named contoso.com andwoodgrovebank.com.

You have a custom attribute named Attribute 1 in Active Directory. Attribute 1 is associated to User objects.

You need to ensure that Attribute1 is included in the global catalog.

What should you do?

 A. From the Active Directory Schema snap-in, modify the properties of the Attribute 1 attributeSchema object.

B. In Active Directory Users and Computers, configure the permissions on the Attribute 1 attribute for User objects.

C. From the Active Directory Schema snap-in, modify the properties of the User classSchema object.

D. In Active Directory Sites and Services, configure the Global Catalog settings for all domain controllers in theforest.

Answer: ASection: Cooper Exam D

Explanation/Reference:Explanation:

QUESTION 12Your network contains a server named Server1. Server1 runs Windows Server 2008 R2 and has the ActiveDirectory Lightweight Directory Services (AD LDS) role installed. Server1 hosts two AD LDS instances namedInstance1 and Instance2.

You need to remove Instance2 from Server1 without affecting Instance1.

Which tool should you use?

 A. NTDSUtil

B. Dsdbutil

C. Programs and Features in the Control Panel

D. Server Manager 

Answer: CSection: Cooper Exam D

5/17/2018 Microsoft.testKing.70 640.v2012!02!07.by.redaxium ExamP - slidepdf.com

http://slidepdf.com/reader/full/microsofttestking70-640v20120207byredaxium-examp 6/14

Explanation/Reference:Explanation:

QUESTION 13Your network contains an Active Directory domain. All domain controllers run Windows Server 2008 R2.

You need to compact the Active Directory database.

What should you do?

 A. Run the Get-ADForest cmdlet.

B. Configure subscriptions from Event Viewer.

C. Run the eventcreate.exe command.

D. Configure the Active Directory Diagnostics Data Collector Set (OCS).

E. Create a Data Collector Set (DCS).

F. Run the repadmin.exe command.

G. Run the ntdsutil.exe command.

H. Run the dsquery.exe command.

I. Run the dsamain.exe command.

J. Create custom views from Event Viewer.

Answer: GSection: Cooper Exam D

Explanation/Reference:Explanation:

QUESTION 14

Your network contains an Active Directory domain. All domain controllers run Windows Server 2008 R2.

You need to collect all of the Directory Services events from all of the domain controllers and store the eventsin a single central computer.

What should you do?

 A. Run the ntdsutil.exe command.

B. Run the repodmin.exe command.

C. Run the Get-ADForest cmdlet.

D. Run the dsamain.exe command.

E. Create custom views from Event Viewer.

F. Run the dsquery.exe command.G. Configure the Active Directory Diagnostics Data Collector Set (DCS),

H. Configure subscriptions from Event Viewer.

I. Run the eventcreate.exe command.

J. Create a Data Collector Set (DCS).

Answer: HSection: Cooper Exam D

5/17/2018 Microsoft.testKing.70 640.v2012!02!07.by.redaxium ExamP - slidepdf.com

http://slidepdf.com/reader/full/microsofttestking70-640v20120207byredaxium-examp 7/14

Explanation/Reference:Explanation:

QUESTION 15Your network contains an Active Directory domain. All domain controllers run Windows Server 2008 R2. Youneed to receive a notification when more than 100 Active Directory objects are deleted per second.

What should you do?

 A. Create custom views from Event Viewer.

B. Run the Get-ADForest cmdlet.

C. Run the ntdsutil.exe command.

D. Configure the Active Directory Diagnostics Data Collector Set (DCS).

E. Create a Data Collector Set (DCS).

F. Run the dsamain.exe command.

G. Run the dsquery.exe command.

H. Run the repadmin.exe command.

I. Configure subscriptions from Event Viewer.J. Run the eventcreate.exe command.

Answer: ESection: Cooper Exam D

Explanation/Reference:Explanation:

QUESTION 16Your network contains an Active Directory domain. All domain controllers run Windows Server 2008 R2.

You need to create a snapshot of Active Directory.

What should you do?

 A. Run the dsquery.exe command.

B. Run the dsamain.exe command.

C. Create custom views from Event Viewer.

D. Configure subscriptions from Event Viewer.

E. Create a Data Collector Set (DCS).

F. Configure the Active Directory Diagnostics Data Collector Set (DCS).

G. Run the repadmin.exe command.

H. Run the ntdsutil.exe command.I. Run the Get-ADForest cmdlet.

J. Run the eventcreate.exe command.

Answer: HSection: Cooper Exam D

Explanation/Reference:Explanation:

5/17/2018 Microsoft.testKing.70 640.v2012!02!07.by.redaxium ExamP - slidepdf.com

http://slidepdf.com/reader/full/microsofttestking70-640v20120207byredaxium-examp 8/14

QUESTION 17Your network contains an Active Directory domain. All domain controllers run Windows Server 2008 R2.

You mount an Active Directory snapshot.

You need to ensure that you can query the snapshot by using LDAP.

What should you do?

 A. Run the dsamain.exe command.

B. Create custom views from Event Viewer.

C. Run the ntdsutil.exe command.

D. Configure subscriptions from Event Viewer.

E. Run the Get-ADForest cmdlet.

F. Create a Data Collector Set (DCS).

G. Run the eventcreate.exe command.

H. Configure the Active Directory Diagnostics Data Collector Set (DCS).

I. Run the repadmin.exe command.J. Run the dsquery.exe command.

Answer: ASection: Cooper Exam D

Explanation/Reference:Explanation:

QUESTION 18DRAG DROP

Your network contains an Active Directory domain named adatum.com.

You need to use Group Policies to deploy the line-of-business applications shown in the following table.

What should you do?

To answer, drag the appropriate deployment method to the correct application in the answer area.

5/17/2018 Microsoft.testKing.70 640.v2012!02!07.by.redaxium ExamP - slidepdf.com

http://slidepdf.com/reader/full/microsofttestking70-640v20120207byredaxium-examp 9/14

Answer:

Section: Cooper Exam D

Explanation/Reference:

QUESTION 19HOTSPOT

Your network contains an Active Directory forest named contoso.com. All client computers run Windows 7Enterprise.

5/17/2018 Microsoft.testKing.70 640.v2012!02!07.by.redaxium ExamP - slidepdf.com

http://slidepdf.com/reader/full/microsofttestking70-640v20120207byredaxium-examp 10/1

You need automatically to create a local group named PowerManagers on each client computer that containsa battery. The solution must minimize the amount of administrative effort.

Which node in Group Policy Management Editor should you use?

To answer, select the appropriate node in the answer area.

Answer:

Section: Cooper Exam D

Explanation/Reference:

QUESTION 20DRAG DROP

Your network contains two forests named contoso.com and fabrikam.com. The functional level of all thedomains is Windows Server 2003. The functional level of both forests is Windows 2000.

You need to create a trust between contoso.com and fabrikam.com. The solution must ensure that users from

5/17/2018 Microsoft.testKing.70 640.v2012!02!07.by.redaxium ExamP - slidepdf.com

http://slidepdf.com/reader/full/microsofttestking70-640v20120207byredaxium-examp 11/1

contoso.com can only access the servers in fabrikam.com that have the Allowed to Authenticate permissionset.

What should you do?

To answer, move the appropriate actions from the Possible Actions list to the Necessary Actions area andarrange them in the correct order.

Answer:

Section: Cooper Exam D

5/17/2018 Microsoft.testKing.70 640.v2012!02!07.by.redaxium ExamP - slidepdf.com

http://slidepdf.com/reader/full/microsofttestking70-640v20120207byredaxium-examp 12/1

Explanation/Reference:

QUESTION 21DRAG DROP

Your network contains an Active Directory forest named contoso.com.

You need to create an Active Directory Rights Management Services (AD RMS) licensing-only cluster.

What should you do?

To answer, move the appropriate actions from the Possible Actions list to the Necessary Actions area andarrange them in the correct order.

Answer:

5/17/2018 Microsoft.testKing.70 640.v2012!02!07.by.redaxium ExamP - slidepdf.com

http://slidepdf.com/reader/full/microsofttestking70-640v20120207byredaxium-examp 13/1

Section: Cooper Exam D

Explanation/Reference:

QUESTION 22DRAG DROP

Your company has a main office and a branch office. All servers are located in the main office.

The network contains an Active Directory forest named adatum.com. The forest contains a domain controller named MainDC that runs Windows Server 2008 R2 Enterprise and a member server named FileServer thatruns Windows Server 2008 R2 Standard.

You have a kiosk computer named Public_Computer that runs Windows 7. Public_Computer is not connectedto the network.

You need to join Public_Computer to the adatum.com domain.

What should you do?

To answer, move the appropriate actions from the Possible Actions list to the Necessary Actions area andarrange them in the correct order.

5/17/2018 Microsoft.testKing.70 640.v2012!02!07.by.redaxium ExamP - slidepdf.com

http://slidepdf.com/reader/full/microsofttestking70-640v20120207byredaxium-examp 14/1

Answer:

Section: Cooper Exam D

Explanation/Reference: