Online Access Free 070-640 Exam Questions

Your network contains an Active Directory domain named contoso.com.
The domain contains an enterprise certification authority (CA).
You plan to delegate certificate enrollment for Smartcard Logon certificates to a user
named User1. User1 is the member of a group named CONTOSO\DelegatedAdmins.
You need to recommend a solution to provide User1 with the ability to enroll for Smartcard Logon certificates on behalf of other domain users.
What should you include in the recommendation?

• A.Duplicate the Smartcard Logon certificate template. Modify the Extensions settings and the Request Handling settings of the new template.
• B.Modify the Issuance Requirements settings and the Security settings of the Smartcard Logon certificate template.
• C.Duplicate the Smartcard Logon certificate template. Modify the Issuance Requirements settings and the Security settings of the new template.
• D.Modify the Extensions settings and the Request Handling settings of the Smartcard Logon certificate template.

Your network contains an Active Directory domain named contoso.com. The network contains client computers that run either Windows Vista or Windows 7. Active Directory Rights Management Services (AD RMS) is deployed on the network.
You create a new AD RMS template that is distributed by using the AD RMS pipeline. The template is updated every month.
You need to ensure that all the computers can use the most up-to-date version of the AD RMS template.
You want to achieve this goal by using the minimum amount of administrative effort.
What should you do?

• A.Upgrade all of the Windows Vista computers to Windows 7.
• B.Upgrade all of the Windows Vista computers to Windows Vista Service Pack 2 (SP2).
• C.Assign the Microsoft Windows Rights Management Services (RMS) Client Service Pack 2 (SP2) to all computers by using a Software Installation extension of Group Policy.
• D.Assign the Microsoft Windows Rights Management Services (RMS) Client Service Pack 2 (SP2) to all users by using a Software Installation extension of Group Policy.

Your network contains an Active Directory domain. The domain contains five sites. One of the sites contains a read-only domain controller (RODC) named RODC1.
You need to identify which user accounts can have their password cached on RODC1.
Which tool should you use?

• A.Adtest
• B.Dcdiag
• C.Get-ADDomainControllerPasswordReplicationPolicyUsage
• D.Repadmin

Your network contains an Active Directory domain that has two sites.
You need to identify whether logon scripts are replicated to all domain controllers.
Which folder should you verify?

• A.GroupPolicy
• B.NTDS
• C.SoftwareDistribution
• D.SYSVOL

Your network contains an Active Directory forest named contoso.com. The forest contains two domains. All domain controllers are configured as global catalog servers.
The forest root domain contains five domain controllers. The domain controllers are configured as shown in the following table.

You plan to create a custom attribute in Active Directory that will replicate to all of the global catalog servers.
You need to identify which domain controller must be online to perform the planned action.
Which domain controller should you identify?

• A.DC5
• B.DC2
• C.DC3
• D.DC4
• E.DC1