Ensure your success with this 70-640 question bank
The best way to get accomplishment in the Microsoft 70-640 exam is that you ought to acquire dependable preliminary materials. We guarantee that killexams.com is the most direct pathway towards certifying Microsoft Windows Server 2008 Active Directory, Configuring exam. You will be triumphant with full certainty. You can see free questions at killexams.com before you purchase the 70-640 exam items. Our mimicked tests are in different decision the same as the real exam design. The questions and answers made by the confirmed experts. They give you the experience of taking the real test. 100% assurance to pass the 70-640 real test.
killexams.com Microsoft Certification contemplate guides are setup by IT experts. Bunches of understudies have been whining that there are excessively numerous questions in such huge numbers of training exams and study aides, and they are quite recently tired to manage the cost of any more. Seeing killexams.com specialists work out this extensive form while still certification that all the information is secured after profound research and examination. Everything is to make comfort for competitors on their street to accreditation.
We have Tested and Approved 70-640 Exams. killexams.com gives the most exact and most recent IT exam materials which practically contain all information focuses. With the guide of our 70-640 exam materials, you don't have to squander your opportunity on perusing main part of reference books and simply need to burn through 10-20 hours to ace our 70-640 real questions and answers. Also, we furnish you with PDF Version and Software Version exam questions and answers. For Software Version materials, It's offered to give the hopefuls reproduce the Microsoft 70-640 exam in a real environment.
We give free refresh. Inside legitimacy period, if 70-640 exam materials that you have bought updated, we will intimate you by email to download most recent version of Q&A. In the event that you don't pass your Microsoft Windows Server 2008 Active Directory, Configuring exam, We will give you full refund. You have to send the checked duplicate of your 70-640 examination report card to us. Subsequent to affirming, we will rapidly give you FULL REFUND.
In the event that you get ready for the Microsoft 70-640 exam utilizing our testing software. It is anything but difficult to prevail for all confirmations in the main endeavor. You don't need to manage all dumps or any free downpour/rapidshare all stuff. We offer free demo of every IT Certification Dumps. You can look at the interface, question quality and convenience of our training exams before you choose to purchase.
Killexams.com Huge Discount Coupons and Promo Codes are as under;
WC2017 : 60% Discount Coupon for all exams on website
PROF17 : 10% Discount Coupon for Orders greater than $69
DEAL17 : 15% Discount Coupon for Orders greater than $99
DECSPECIAL : 10% Special Discount Coupon for All Orders
were given no hassle! 3 days training of 70-640 ultra-modern Braindumps is required.
killexams.com absolutely you are maximum top notch mentor ever, the manner you train or guide is unmatchable with any other service. I were given tremendous help from you in my try to try 70-640. i used to be now not sure approximatelymy success but you made it in simplest 2 weeks thats simply notable. i'm very thankful to you for presenting such richhelp that these days i have been capable of rating exceptional grade in 70-640 exam. If i'm successful in my discipline its due to you.
What are blessings of 70-640 certification?
some awesome news is that I passed 70-640 check the previous day... I thank whole killexams.com team. I truly respect the exceptional paintings that you All do... Your schooling material is extraordinary. maintain doing proper paintings. i'm able to virtually use your product for my next exam. Regards, Emma from ny
Try out these real 70-640 questions.
I was so much upset in those days because I didnt any time to prepare for 70-640 exam prep because of my some daily routine work I have to spend most time on the way, a long distance from my home to my work place. I was so much worried about 70-640 exam, because time is so near, then one day my friend told about killexams, that was the turn to my life, the solution of my all problems. I could do my 70-640 exam prep on the way easily by using my laptop and killexams.com is so reliable and outstanding.
I want to pass 70-640 exam fast, What should I do?
I surpassed, and really delighted to document that Killexams adhere to the claims they make. They offer actualexamination questions and the checking out engine works flawlessly. The bundle contains the entirety they promise, and their customer support works well (I needed to get in touch with them since first my online fee would no longer undergo, however it turned out to be my fault). in any case, that is a very good product, a whole lot better than I had predicted. I passed 70-640 examination with nearly pinnacle rating, something I by no means notion i used to be able to. thanks.
located an accurate source for actual 70-640 Questions.
Hello there fellows, just to tell you that I passed 70-640 exam a day or two ago with 88% marks. Yes, the exam is hard and killexams.com Q&A and Exam Simulator does make life simpler - a great deal! I think this unit is the unrivaled reason I passed the exam. As a matter of first importance, their exam simulator is a gift. I generally adored the inquiry and-answer organization and tests of different types in light of the fact that this is the most ideal approach to learn.
in which can i am getting assist to put together and clear 70-640 examination?
I managd to complete 70-640 examination utilizing killexams.com dumps. identification want to hold in holds with you ever. identity take this as a danger to a great deal obliged yet again for this inspire. I got the dumps for 70-640. killexams.com Q&A and exam Simulator actually supportive and appallingly elaborative. identification higher endorse your website online in display of the nice connection ever for certificate exams.
Belive me or now not! This resource of 70-640 questions works.
It was very good experience with the killexams.com team. they guided me a lot for progress. i appreciate their effort.
Take benefit of 70-640 exam Q&A and get certified.
It was in reality very beneficial. Your accurate query bank helped me clean 70-640 in first attempt with 78.seventy five% marks. My score was 90% but due to poor marking it got here to seventy eight.75%. great activity killexams.com team..may also you achieve all the achievement. thank you.
Right place to find 70-640 Actual Questions paper.
Overall impression was very good but i failed in one assignment but succeeded in 70-640 second assignment with killexams.com team very fast. exam simulator is good.
How many days required for 70-640 preparation?
i used to be trapped in the complex subjects handiest 12 earlier days the examination 70-640. Whats greater it becomeextremely useful, as the quick solutions may be effortlessly remembered inside 10 days. I scored 91%, endeavoring all inquiries in due time. To store my planning, i was energetically looking down a few speedy reference. It aided me a top notch deal. by no means thought it can be so compelling! At that point, by means of one method or some other I came to consider killexams.com Dumps.
You are the systems administrator of a large organization that has recently implemented Windows Server 2008 R2. You have a few remote sites that do not have very tight security. You have decided to implement read-only domain controllers (RODC).
What forest functional levels does the network need for you to do the install? (Choose Three)
Ensure that the forest functional level is Windows Server 2003 or higher.
Deploy at least one writable domain controller running Windows Server 2008 or Windows Server 2008 R2 in the same domain as the RODC and ensure that the writable domain controller is also a DNS server that has registered a name server (NS) resource record for the relevant DNS zone. An RODC must replicate domain updates from a writable domain controller running Windows Server 2008 or Windows Server 2008 R2.
Your network contains an Active Directory domain. The domain contains several domain controllers. All domain controllers run Windows Server 2008 R2. You need to restore the Default Domain Policy Group Policy object (GPO) to the Windows Server 2008 R2 default settings. What should you do?
Run dcgpofix.exe /target:dc.
Run dcgpofix.exe /target:domain.
Delete the link for the Default Domain Controllers Policy, and then run gpupdate.exe
Delete the link for the Default Domain Controllers Policy, and then run gpupdate.exe
Your network contains an Active Directory forest named contoso.com. The domain contains two domain controllers named DC1 and DC2 that run Windows Server 2008 R2. DC2 holds the PDC emulator role.
The power supply on DC2 fails.
You seize the PDC emulator role to DC1. You replace the power supply on DC2.
You need to bring DC2 back online as the PDC emulator as soon as possible. The solution must minimize the disruption of services for users.
What should you do?
Connect DC2 to the network. Turn on DC2, and then transfer the PDC emulator role.
Reinstall Windows Server 2008 on DC2 and promote DC2 to a domain controller. Transfer the PDC emulator role.
Reinstall Windows Server 2008 on DC2 and promote DC2 to a domain controller. Seize the PDC emulator role.
Disconnect DC2 from the network. Turn on DC2, and then seize the PDC emulator role. Connect DC2 to the network.
Your network contains a single Active Directory domain. The domain contains five read- only domain controllers (RODCs) and five writable domain controllers. All servers run Windows Server 2008.
You plan to install a new RODC that runs Windows Server 2008 R2.
You need to ensure that you can add the new RODC to the domain. You want to achieve this goal by using the minimum amount of administrative effort.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
From Active Directory Domains and Trusts, raise the functional level of the domain.
At the command prompt, run adprep.exe /forestprep.
From Active Directory Users and Computers, pre-stage the RODC computer account.
At the command prompt, run adprep.exe /domainprep.
At the command prompt, run adprep.exe /rodcprep.
Answer: C, D
During the first stage of the installation, the wizard records all the data about the RODC
that will be stored in the distributed Active Directory database, including the read-only domain controller account name and the site in which it will be placed. This stage must be performed by a member of the Domain Admins group.
To create an RODC account by using the Windows interface
Click Start, click Administrative Tools, and then click Active Directory Users and Computers.
Double-click the domain container, then you can either right-click the Domain Controllers container or click the Domain Controllers container, and then click Action.
Your network contains an Active Directory domain named contoso.com. All domain controllers run a Server Core installation of Windows Server 2008 R2. You need to identify which domain controller holds the PDC emulator role. Which tool should you run?
Your network contains an Active Directory domain.
You need to activate the Active Directory Recycle Bin in the domain. Which tool should you use?
You can enable Active Directory Recycle Bin by using the following methods:
Enable-ADOptionalFeature Active Directory module cmdlet (This is the recommended method.)
Before you can make the recycle bin available, you must first update Active Directory schema with the required attributes. When you do this, the schema is updated, and then every object in the forest is updated with the recycle bin attributes as well. This process is
irreversible once it is started.
Your network contains 50 domain controllers that runs Windows Server 2008 R2.
You need to create a script that resets the Directory Services Restore Mode (DSRM) password on all of the domain controllers. The solution must NOT maintain passwords in the script.
Which two tools should you use? (Each correct answer presents part of the solution. Choose two.)
Active Directory Users and Computers
Local Users and Groups
Answer: B, D
B: You can also NTDSUTIL command tool to reset DSRM password. In an elevated CMD prompt where you have logged on as a Domain Admin, run:
NTDSUTIL SET DSRM PASSWORD SYNC FROM DOMAIN ACCOUNT <your user
here> Q Q D (not A): There comes a day in nearly every administrator’s life where they will need to boot a domain controller into DS Restore Mode. Whether it’s to perform an authoritative restore or fix database issues, you will need the local administrator password.
A corporate network includes an Active Directory Domain Services (AD DS) forest that contains two domains. All servers run Windows Server 2008 R2. All domain controllers are configured as DNS servers.
A standard primary zone for dev.contoso.com is stored on a member server.
You need to ensure that all domain controllers can resolve names from the dev.contoso.com zone. What should you do?
On one domain controller, create a stub zone. Configure the stub zone to replicate to all DNS servers in the forest.
On one domain controller, create a stub zone. Configure the stub zone to replicate to all DNS servers in the domain.
On one domain controller, create a conditional forwarder. Configure the conditional forwarder to replicate to all DNS servers in the domain.
On the member server, create a secondary zone.
You are the network administrator for an organization that has two locations, New York and London.
Each location has multiple domains but all domains fall under the same tree, Stellacon.com.
Users in the NY.us.stellacon.com domain need to access resources in the London.uk.stellacon.comdomain.
You need to reduce the amount of time it takes for authentication when users from NY.us.stellacon.com access resources in London.uk.stellacon.com. What can you do?
Set up a one-way shortcut trust from London.uk.stellacon.com to NY.us.stellacon.com.
Set up a one-way shortcut trust from NY.us.stellacon.com to London.uk.stellacon.com.
Enable Universal Group Membership Caching in NY.us.stellacon.com.
Enable Universal Group Membership Caching in London.uk.stellacon.com.
Understanding When to Create a Shortcut Trust When to create a shortcut trust
Shortcut trusts are one-way or two-way, transitive trusts that administrators can use to optimize the authentication process.
Authentication requests must first travel a trust path between domain trees. In a complex forest this can take time, which you can reduce with shortcut trusts. A trust path is the series of domain trust relationships that authentication requests must traverse between any two domains. Shortcut trusts effectively shorten the path that authentication requests travel between domains that are located in two separate domain trees.
Shortcut trusts are necessary when many users in a domain regularly log on to other
domains in a forest.
Using the following illustration as an example, you can form a shortcut trust between domain B and domain D, between domain A and domain 1, and so on.
C:\Documents and Settings\usernwz1\Desktop\1.PNG Using one-way trusts
A one-way, shortcut trust that is established between two domains in separate domain trees can reduce the time that is necessary to fulfill authentication requests—but in only one direction. For example, when a oneway, shortcut trust is established between domain A and domain B, authentication requests that are made in domain A to domain B can use the new one-way trust path. However, authentication requests that are made in domain B to domain A must still travel the longer trust path.
Using two-way trusts
A two-way, shortcut trust that is established between two domains in separate domain trees reduces the time that is necessary to fulfill authentication requests that originate in either domain. For example, when a two-way trust is established between domain A and domain B, authentication requests that are made from either domain to the other domain can use the new, two-way trust path.
Microsoft 70-640 Exam (Windows Server 2008 Active Directory, Configuring) Detailed Information
70-640 - Windows Server 2008 Active Directory, Configuring
70-640 Test Objectives
Configuring Domain Name System (DNS) for Active Directory (18%)
Dynamic DNS (DDNS), Non-dynamic DNS (NDDNS), and Secure Dynamic DNS (SDDNS); Time to Live (TTL); GlobalNames; Primary,
Secondary, Active Directory Integrated, Stub; SOA; zone scavenging; forward lookup; reverse lookup
Configure replication scope (forestDNSzone; domainDNSzone); incremental zone transfers; DNS Notify; secure zone transfers;
configure name servers; application directory partitions
Configuring zone properties
Configure a DNS server for use with Active Directory Domain Services
Modify zone transfer settings
Configuring the Active Directory infrastructure (17%)
Configure a forest or a domain
Remove a domain; perform an unattended installation; Active Directory Migration Tool (ADMT); change forest and domain
functional levels; interoperability with previous versions of Active Directory; multiple user principal name (UPN)
suffixes; forestprep; domainprep
Manage computer accounts; configure group membership; account resets; delegation; AGDLP/AGGUDLP; deny domain local
group; local vs. domain; Protected Admin; disabling accounts vs. deleting accounts; deprovisioning; contacts; creating
organizational units (OUs); delegation of control; protecting AD objects from deletion; managed service accounts
Maintaining the Active Directory environment (18%)
Configure backup and recovery
Using Windows Server Backup; back up files and system state data to media; backup and restore by using removable
media; perform an authoritative or non-authoritative restores; linked value replication; Directory Services Recovery
Mode (DSRM); backup and restore GPOs; configure AD recycle bin