aiotestking uk

70-640 Exam Questions - Online Test


70-640 Premium VCE File

Learn More 100% Pass Guarantee - Dumps Verified - Instant Download
150 Lectures, 20 Hours

Q1. You have a domain controller that runs the DHCP service. 

You need to perform an offline defragmentation of the Active Directory database on the domain controller. 

You must achieve this goal without affecting the availability of the DHCP service. 

What should you do? 

A. Restart the domain controller in Directory Services Restore Mode. Run the Disk Defragmenter utility. 

B. Restart the domain controller in Directory Services Restore Mode. Run the Ntdsutil utility. 

C. Stop the Active Directory Domain Services service. Run the Ntdsutil utility. 

D. Stop the Active Directory Domain Services service. Run the Disk Defragmenter utility. 

Answer:

Explanation: 

We don't need to restart the server to defragment the AD database. We do need to stop 

AD DS in order to defragment the database. 

Explanation: 

http://technet.microsoft.com/en-us/library/cc794920.aspx 

To perform offline defragmentation of the directory database 

1. Open a Command Prompt as an administrator: On the Start menu, right-click Command Prompt, and then click Run as administrator. If the User Account Control dialog box appears, provide credentials, if required, and then click Continue. 

2. At the command prompt, type the following command, and then press ENTER: net stop ntds 

3. Type Y to agree to stop additional services, and then press ENTER. 

4. At the command prompt, type ntdsutil, and then press ENTER. 

Q2. Your company has a domain controller server that runs the Windows Server 2008 R2 operating system. The server is a backup server. The server has a single 500-GB hard disk that has three partitions for the operating system, applications, and data. You perform daily backups of the server. 

The hard disk fails. You replace the hard disk with a new hard disk of the same capacity. You restart the computer on the installation media. You select the Repair your computer option. 

You need to restore the operating system and all files. 

What should you do? 

A. Select the System Image Recovery option. 

B. Run the Imagex utility at the command prompt. 

C. Run the Wbadmin utility at the command prompt. 

D. Run the Rollback utility at the command prompt. 

Answer:

Explanation: 

Old Answer: Run the Wbadmin utility at the command prompt. Answer: Select the System Image Recovery option. 

http://technet.microsoft.com/en-us/library/cc755163.aspx Recover the Operating System or Full Server Applies To: Windows Server 2008 R2 You can recover your server operating system or full server by using Windows Recovery Environment and a backup that you created earlier with Windows Server Backup. You can access the recovery and troubleshooting tools in Windows Recovery Environment through the System Recovery Options dialog box in the Install Windows Wizard. In Windows Server 2008 R2, to launch this wizard, use the Windows Setup disc or start/restart the computer, press F8, and then select Repair Your Computer from the list of startup options. 

To recover your operating system or full server using a backup created earlier and Windows Setup disc 

1. Insert the Windows Setup disc that has the same architecture of the system that you are trying to recover into the CD or DVD drive and start or restart the computer. If needed, press the required key to boot from the disc. The Install Windows Wizard should appear. 

2. In Install Windows, specify language settings, and then click Next. 

3. Click Repair your computer. 

4. Setup searches the hard disk drives for an existing Windows installation and then displays the results in System Recovery Options. If you are recovering the operating system onto separate hardware, the list should be empty (there should be no operating system on the computer). Click Next. 

5. On the System Recovery Options page, click System Image Recovery. This opens the Re-image your computer page. 

http://technet.microsoft.com/en-us/magazine/dd767786.aspx Use the Wbadmin Backup Command Line Utility in Windows Server 2008 Wbadmin is the command-line counterpart to Windows Server Backup. You use Wbadmin to manage all aspects of backup configuration that you would otherwise manage in Windows Server Backup. This means that you can typically use either tool to manage backup and recovery. After you’ve installed the Backup Command-Line Tools feature, you can use Wbadmin to manage backup and recovery. Wbadmin is located in the %SystemRoot%\System32\ directory. As this directory is in your command path by default, you do not need to add this directory to your command path. Further information: http://technet.microsoft.com/en-us/library/cc754015%28v=ws.10%29.aspx 

Wbadmin Enables you to back up and restore your operating system, volumes, files, folders, and applications from a command prompt. 

C:\Documents and Settings\usernwz1\Desktop\1.PNG 

Remarks The wbadmin command replaces the ntbackup command that was released with previous versions of Windows. You cannot recover backups that you created with ntbackup by using wbadmin. However, a version of ntbackup is available as a download for Windows Server 2008, Windows Vista, Windows Server 2008 R2, or Windows 7 users who want to recover backups that they created using ntbackup. This downloadable version of ntbackup enables you to perform recoveries only of legacy backups, and it cannot be used on computers running Windows Server 2008, Windows Vista, Windows Server 2008 R2, or Windows 7 to create new backups. http://technet.microsoft.com/en-us/library/dd979562%28v=ws.10%29.aspx Backup and Recovery Overview for Windows Server 2008 R2 Windows Server 2008 R2 contains features to help you create backups and, if needed, perform a recovery of your operating system, applications, and data. By using these features appropriately and implementing good operational practices, you can improve your organization's ability to recover from damaged or lost data, hardware failures, and disasters. For Windows Server 2008 R2, there are new features that expand what you can back up, where you can store backups, and how you can perform recoveries. 

This table summarizes the tools you can use to perform the following backup or recovery tasks for your computers running Windows Server 2008 R2: 

C:\Documents and Settings\usernwz1\Desktop\1.PNG 

What is Windows Recovery Environment? 

You can access the recovery and troubleshooting tools in Windows Recovery Environment through the System Recovery Options dialog box in the Install Windows Wizard. In Windows Server 2008 R2, to launch this wizard, use the Windows Setup disc or start/restart the computer, press F8, and then select Repair Your Computer from the list of startup options. Features in Windows Recovery Environment The tools in Windows Recovery Environment include: System Image Recovery. You can use this tool and a backup that you created earlier with Windows Server Backup to restore your operating system or full server. Windows Memory Diagnostic. You can use this tool (which is a memory diagnostic schedule) to check your computer's RAM. Doing this requires a restart. In addition, this tool requires a valid Windows Server 2008, Windows Vista, Windows Server 2008 R2, or Windows 7 installation to function. Command Prompt. This opens a command prompt window with Administrator privileges that provides full access to your file system and volumes. In addition, certain Wbadmin commands are only available from this command window. 

Q3. You have a single Active Directory domain. All domain controllers run Windows Server 2008 and are configured as DNS servers. 

The domain contains one Active Directory-integrated DNS zone. 

You need to ensure that outdated DNS records are automatically removed from the DNS zone. 

What should you do? 

A. From the properties of the zone, modify the TTL of the SOA record. 

B. From the properties of the zone, enable scavenging. 

C. From the command prompt, run ipconfig /flushdns. 

D. From the properties of the zone, disable dynamic updates. 

Answer:

Explanation: 

http://technet.microsoft.com/en-us/library/cc753217.aspx Set Aging and Scavenging Properties for the DNS Server The DNS Server service supports aging and scavenging features. These features are provided as a mechanism for performing cleanup and removal of stale resource records, which can accumulate in zone data over time. You can use this procedure to set the default aging and scavenging properties for the zones on a server. Further information: http://technet.microsoft.com/en-us/library/cc771677.aspx Understanding Aging and Scavenging 

Q4. Your company has a single Active Directory domain named intranet.contoso.com. All domain controllers run Windows Server 2008 R2. The domain functional level is Windows 2000 native and the forest functional level is Windows 2000. 

You need to ensure the UPN suffix for contoso.com is available for user accounts. 

What should you do first? 

A. Raise the intranet.contoso.com forest functional level to Windows Server 2003 or higher. 

B. Raise the intranet.contoso.com domain functional level to Windows Server 2003 or higher. 

C. Add the new UPN suffix to the forest. 

D. Change the Primary DNS Suffix option in the Default Domain Controllers Group Policy Object (GPO) to contoso.com. 

Answer:

Explanation: 

http://support.microsoft.com/kb/243629 

HOW TO: Add UPN Suffixes to a Forest 

Adding a UPN Suffix to a Forest 

Open Active Directory Domains and Trusts. 

Right-click Active Directory Domains and Trusts in the Tree window pane, and then click Properties. 

On the UPN Suffixes tab, type the new UPN suffix that you would like to add to the forrest. Click Add, and then click OK. 

Now when you add users to the forest, you can select the new UPN suffix to complete the user's logon name. 

APPLIES TO 

Microsoft Windows 2000 Server 

Microsoft Windows 2000 Advanced Server 

Microsoft Windows 2000 Datacenter Server 

Q5. Your network contains an Active Directory domain named contoso.com. Contoso.com contains two domain controllers. The domain controllers are configured as shown in the following table. 

All client computers have IP addresses in the 10.1.2.1 to 10.1.2.240 range. 

You need to minimize the number of client authentication requests sent to DC2. 

What should you do? 

A. Create a new site named Site1. Create a new subnet object that has the 10.1.1.0/24 prefix and assign the subnet to Site1. Move DC1 to Site1. 

B. Create a new site named Site1. Create a new subnet object that has the 10.1.1.1/32 prefix and assign the subnet to Site1. Move DC1 to Site1. 

C. Create a new site named Site1. Create a new subnet object that has the 10.1.1.2/32 prefix and assign the subnet to Site1. Move DC2 to Site1. 

D. Create a new site named Site1. Create a new subnet object that has the 10.1.2.0/24 prefix and assign the subnet to Site1. Move DC2 to Site1. 

Answer:

Explanation: 

Creating a new site and assigning a subnet of 10.1.1.2 with subnet mask of 255.255.255.255, it means only ONE ip (the DC2 ip) will be included on the site1 subnet coverage. Therefore all the request will be processed from the DC1 in the default-first-site and dc2 will authenticate only itself. 

Q6. Your company has an Active Directory forest. Each branch office has an organizational unit and a child organizational unit named Sales. 

The Sales organizational unit contains all users and computers of the sales department. 

You need to install an Office 2007 application only on the computers in the Sales organizational unit. 

You create a GPO named SalesApp GPO. 

What should you do next? 

A. Configure the GPO to assign the application to the computer account. Link the SalesAPP GPO to the Sales organizational unit in each location. 

B. Configure the GPO to assign the application to the computer account. Link the SalesAPP GPO to the domain. 

C. Configure the GPO to publish the application to the user account. Link the SalesAPP GPO to the Sales organizational unit in each location. 

D. Configure the GPO to assign the application to the user account. Link the SalesAPP GPO to the Sales organizational unit in each location. 

Answer:

Q7. Your network contains an Active Directory forest. All domain controllers run Windows Server 2008 R2 and are configured as DNS servers. 

You have an Active Directory-integrated zone for contoso.com. 

You have a Unix-based DNS server. 

You need to configure your Windows Server 2008 R2 environment to allow zone transfers 

of the contoso.com zone to the Unix-based DNS server. 

What should you do in the DNS Manager console? 

A. Enable BIND secondaries 

B. Create a stub zone 

C. Disable recursion 

D. Create a secondary zone 

Answer:

Explanation: 

http://skibbz.com/understanding-of-advance-properties-settings-in-window-server-2003-and-2008-dns-serverbind-secondaries/ Understanding Of Advance Properties Settings In Window Server 2003 And 2008 DNS Server (BIND Secondaries) BIND Secondaries controls the zone transfer between different vendor DNS server. It help verifies the type of format used zone transfer, whether it is fast or slow transfer (zone transfer). The full mean of BIND is Berkeley Internet Name domain (BIND). BIND is a based on UNIX operating system. Two window servers do not required BIND. BIND is only required when transfer dns zone between two different dns server vendors (UNIX and Microsoft Window). If you are using only Window server for dns and zone transfer you will have to disable this option in the window dns server. However if you want the server to perform a slow zone transfer and uncompressed data transfer then you will have to enable BIND in the dns server. To reiterate, BIND only provide slow dns zone transfer and data compression mechanism for DNS server. BIND is understood to have been introduced in window server to support UNIX. System admin will normally disable this option if they want the data in their dns zone transfer to between primary and secondary dns server to be transfer faster in order to improve dns queries efficiency within their network environment Bind is used in a DNS window server, when the needs to configured zone transfer between window server and UNIX server or operative system. Bind is enabled when a window server is configured as a primary dns server and a UNIX computer is configured as a secondary dns server for zone transfer. BIND Secondaries need to be configured to mitigate, the problem of interoperability between the two server operating system since they are from different vendors. Note that old version of the BIND was noted to be very slow and uses an uncompressed zone transfer format. However, BIND in window server 2008 and later has improved this problem. This is because it was noted that BIND in window server 2008 and later uses faster, compressed format during zone transfer between primary and secondary DNS server configured in for different server operating system (UNIX and Window server). 

Q8. Your company has an Active Directory forest. The forest includes organizational units corresponding to the following four locations: 

. London 

. Chicago 

. New York 

. Madrid 

Each location has a child organizational unit named Sales. The Sales organizational unit contains all the users and computers from the sales department. 

The offices in London, Chicago, and New York are connected by T1 connections. The office in Madrid is connected by a 256-Kbps ISDN connection. 

You need to install an application on all the computers in the sales department. 

Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.) 

A. Create a Group Policy Object (GPO) named OfficeInstall that assigns the application to 

users. 

Link the GPO to each Sales organizational unit. 

B. Disable the slow link detection setting in the Group Policy Object (GPO). 

C. Configure the slow link detection threshold setting to 1,544 Kbps (T1) in the Group 

Policy Object (GPO). 

D. Create a Group Policy Object (GPO) named OfficeInstall that assigns the application to 

the computers. Link the GPO to each Sales organizational unit. 

Answer: B,D 

Explanation: 

http://technet.microsoft.com/en-us/library/cc781031%28v=ws.10%29.aspx Specifying Group Policy for Slow Link Detection Administrators can partially control which Group Policy extensions are processed over a slow link. By default, when processing over a slow link, not all components of Group Policy are processed. Table 2.6 shows the default settings for processing Group Policy over slow links. 

C:\Documents and Settings\usernwz1\Desktop\1.PNG 

Administrators can use a Group Policy setting to define a slow link for the purposes of applying and updating Group Policy. The default value defines a rate slower than 500 Kbps as a slow link. http://technet.microsoft.com/en-us/library/cc783635%28v=ws.10%29.aspx Assigning and Publishing Software 

Assigning software to computers After you assign a software package to computers in a site, domain, or OU, the software is installed the next time the computer restarts or the user logs on. Further information: http://technet.microsoft.com/en-us/library/cc978717.aspx Group Policy slow link detection 

Q9. Your network contains an Active Directory forest. All domain controllers run Windows 

Server 2008 Standard. 

The functional level of the domain is Windows Server 2003. 

You have a certification authority (CA). 

The relevant servers in the domain are configured as shown below: 

You need to ensure that you can install the Active Directory Certificate Services (AD CS) Certificate Enrollment Web Service on the network. 

What should you do? 

A. Upgrade Server1 to Windows Server 2008 R2. 

B. Upgrade Server2 to Windows Server 2008 R2. 

C. Raise the functional level of the domain to Windows Server 2008. 

D. Install the Windows Server 2008 R2 Active Directory Schema updates. 

Answer:

Explanation: 

http://technet.microsoft.com/en-us/library/dd759243.aspx 

Installation requirements 

Before installing the certificate enrollment Web services, ensure that your environment 

meets these requirements: 

A host computer as a domain member running Windows Server 2008 R2. 

An Active Directory forest with a Windows Server 2008 R2 schema. 

An enterprise certification authority (CA) running Windows Server 2008 R2, Windows 

Server 2008, or 

Windows Server 2003. 

Q10. Your network contains an Active Directory forest. The forest schema contains a custom attribute for user objects. 

You need to modify the custom attribute value of 500 user accounts. 

Which tool should you use? 

A. Csvde 

B. Dsmod 

C. Dsrm 

D. Ldifde 

Answer:

Explanation: 

We cannot use Dsmod here, because it supports only a subset of commonly used object 

class attributes. 

Csvde can only import and export data. 

Dsrm is used to delete objects from the directory. 

Explanation: 

http://technet.microsoft.com/en-us/library/cc731033.aspx 

Ldifde 

Creates, modifies, and deletes directory objects.