70-640 Windows Server 2008 Active Directory - Exam A

Question 1 of 10

Your company has a main office and a branch office. The network contains an Active Directory domain that runs Windows Server 2008 servers. The main office contains a writable domain controller named S1. The branch office contains a read-only domain controller (RODC) named B2. You discover that the password of an administrator named Jake is cached on B2. You need to prevent Jake's password from being cached on DC2. What should you do?

Select one of the following:

Modify the properties of the domain
Create a Password Setting object (PSO)
Modify the properties of B2's computer account
Modify the NTDS Site Settings

Explanation

Question 2 of 10

Your company has file servers located in an organizational unit named Payroll. The file servers contain payroll files located in a folder named Payroll. You create a GPO. You need to track which employees access the Payroll files on the file servers. What do you do?

Select one of the following:

Enable the Audit object access option. Link the GPO to the domain. On the domain controllers, configure Auditing for the Authenticated users group in the Payroll folder
Enable the Audit process tracking option. Link the GPO to the Domain Controllers organizational unit. On the file servers configure Auditing for the Authenticated User group in the Payroll folder
Enable the Audit object access option. Link the GPO to the Payroll OU. On the file servers, configure Auditing of the Everyone group in the Payroll folder
Enable the Audit process tracking option. Link the GPO to the Payroll OIU. On the file servers configure Auditing for the Everyone group in the Payroll folder

Explanation

Question 3 of 10

You are the network administrator for TechSkills. The network consists of a single Active Directory domain named TechSkills.com All network servers run Windows Server 2008, and all client computers run Windows XP Professional.

A user named Patricia has just left the company. A replacement will be hired in one month. The replacement will need the same access to network resources that Patricia currently has. The replacement will also need ownership of all files that currently res Patricia's home folder.

You need to minimize the administrative effort that will be required when the replacement is hired. You also need to ensure that no one can use Patricia's user account to log on to the domain until the replacement is hired.

What should you do?

Select one of the following:

Delete Patricia's user account
Configure Patricia's user account to require a change in password at next logon
Move Patricia's user account to the LostAndFound organizational unit (OU)
Disable Patricia's user account

Explanation

Question 4 of 10

Your company network consists of a single Windows 2008 Active Directory domain. You are a member of the Domain Admins group. The network includes three member servers running Windows Server 2003 and two domain controllers running Windows Server 2008. The 50 client computers all run Windows XP Professional.

The user accounts for employees in the Finance department are located in an Organizational Unit (OU) named Finance. The Finance OU also contains a Global Security group named FinanceUsers. All Finance employees are members of FinanceUsers.

An employee named Sandy works in the Finance department. Sandy reports that she cannot log in the domain. She receives the error message.

"Unable to log you on because your account has been locked out. Please see your system administrator."

You need to enable Sandy to log in to the domain. What should you do?

Select one of the following:

Perform an authoritative restore of Sandy's user account
Use the DSMOD USER command line tool to enable Sandy's user account
Use Active Directory Users and Computers to add Sandy's user account to the Domain Users group
Use the NET ACCOUNTS command line tool to enable Sandy's user account
Use Active Directory Users and Computers to add Sandy's user account to the Guests group

Explanation

Question 5 of 10

Your company has a network with Active Directory Forest with a single domain. Windows Server 2008 installed on all domain controllers and they are configured as DNS servers. The domain has an Active Directory-integrated zone with two Active Directory sites. Each site contains three domain controllers. You added a new NS record to the zone. What should you do to make sure all domain controllers immediately receive the new NS record?

Select one of the following:

Execute repadmin /syncall from the command prompt
Shutdown and then restart the DNS server service from services snap-in
Reload the zone from the DNS Manager console
Create an SOA record from the DNS Manager console

Explanation

Question 6 of 10

You are the network administrator for the RealApps network. You want to export all Active Directory information. What command do you use?

Select one of the following:

ldifde -f c:\allparameters.ldf
ldifde -p c:\allparameters.ldf
ldifde -p c:\allparameters.csv
ldifde -f c:\allparameters.csv

Explanation

Question 7 of 10

You need to relocate the existing user and computer objects in your company to different organizational units. What are two possible ways to achieve this goal? (Each correct answer presents a complete solution. Choose two)

Select one or more of the following:

Run the Dsmove utility
Run the Active Directory Migration Tool (ADMT)
Run the Active Directory Users and Computers utility
Run the move-item command in the Microsoft Windows PowerShell utility

Explanation

Question 8 of 10

Rick is creating the backup strategy for Active Directory Lightweight Directory Services (AD LDS) to ensure that data and log files are backed up regularly. This will also ensure the continued availability of data to applications and users in the event of failure. Rick only has limited media resources. What he can he do to backup only a specific AD LDS instance instead of backing up the entire volume?

Select one of the following:

Use Windows Server backup utility and enable the checkbox to take only the backup of the database and log files of AD LDS
Use dsdbutil.exe to create installation media that corresponds only to the AD LDS instance
Move the AD LDS database and log files on a separate volume and use the Windows Server backup utility
Purchase a third party software to take care of the backup process

Explanation

Question 9 of 10

You are the network administrator for TechSkills.com. The network consists of a single Active Directory forest that contains two domains. The functional level of the forest is Windows 2000 native servers run Windows 2008.

You create a group named Marketing. The Marketing group includes users from both domains.

You need to use the Marketing group to assign permissions to resources in both domains. However, when you attempt to assign permissions to a shared folder by using the Marketing group, you receive an error message that states that an object named "Marketing" cannot be found.

You need to ensure that Marketing group can be used to assign permissions to shared resources in both domains.

What should you do?

Select one of the following:

Upgrade the forest functional level to Windows Server 2003
Modify the group properties to make the group a domain local security group
Modify the group properties to make the group a universal security group
Modify the group properties to make the group a global distribution group
Upgrade the domain functional level for both domains to Windows Server 2008

Explanation

Question 10 of 10

You are the network administrator for TechSkills. The network consists of a single Active Directory domain named TechSkills.com. TechSkills also uses a DNS namespace named 2K8Techlabs.local. Users in the sales department log on by using their e-mail addresses. A user named Barbara Jones works for the sales department. She reports that when she attempts to log on using bjones@TechSkills.com, she receives the error message saying: "The system could not log you on. Make sure your user name and domain are correct, and then try typing your password again. Letters in passwords must be typed using the correct case." You need to ensure the Barbara can log on by using a username that matches her e-mail address. What should you do?

Select one of the following:

Configure Barbara's user account to require a smart card for interactive logon
Under the "User logon name" option, change the User Principal Name (UPN) for Barbara's account
Configure Barbara's user account to be trusted for delegation
Change the "Log On To" option for Barbara's account

Explanation

	Created by marklherrmann3 over 9 years ago

Quiz on 70-640 Windows Server 2008 Active Directory - Exam A, created by marklherrmann3 on 19/05/2015.

70-640 Windows Server 2008 Active Directory - Exam A

Question 1 of 10

Select one of the following:

Explanation

Question 2 of 10

Your company has file servers located in an organizational unit named Payroll. The file servers contain payroll files located in a folder named Payroll. You create a GPO. You need to track which employees access the Payroll files on the file servers. What do you do?

Select one of the following:

Explanation

Question 3 of 10

Select one of the following:

Explanation

Question 4 of 10

Select one of the following:

Explanation

Question 5 of 10

Select one of the following:

Explanation

Question 6 of 10

You are the network administrator for the RealApps network. You want to export all Active Directory information. What command do you use?

Select one of the following:

Explanation

Question 7 of 10

You need to relocate the existing user and computer objects in your company to different organizational units. What are two possible ways to achieve this goal? (Each correct answer presents a complete solution. Choose two)

Select one or more of the following:

Explanation

Question 8 of 10

Select one of the following:

Explanation

Question 9 of 10

Select one of the following:

Explanation

Question 10 of 10

Select one of the following:

Explanation