Online Access Free 70-640 Exam Questions

A corporate network includes a single Active Directory Domain Services (AD DS) domain. The AD DS infrastructure is shown in the following graphic.

When the Montreal site domain controller is offline, authentication requests for Montreal branch office users are sent to the Toronto site domain controller.
You need to ensure that when the Montreal Site domain controller is offline, authentication requests forMontreal branch office users are sent to the Quebec City site domain controller.
What should you do?

• A.Create a site link bndge between the Montreal site and the Quebec City site.
• B.Enable the global catalog role on the Montreal site domain controller.
• C.Modify the Default Domain Policy Group Policy Object.
• D.Delete the Toronto-Montreal Site Link

Your network contains an Active Directory domain named adatum.com. All servers run
Windows Server 2008 R2 Enterprise. All client computers run Windows 7 Professional.
The network contains an enterprise certification authority (CA).
You have a custom certificate template named Sales_Temp. Sales_Temp is published to the CA.
You need to ensure that all of the members of a group named Sales can enroll for certificates that use Sales_Temp.
Which snap-in should you use?

• A.Active Directory Administrative Center
• B.Certificates
• C.Enterprise PKI
• D.Group Policy Management
• E.Security Configuration Wizard
• F.Share and storage Management
• G.Authorization Manager
• H.Certificate Templates
• I.Certification Authority

Your company, Contoso Ltd has a main office and a branch office. The offices are connected by a WAN link. Contoso has an Active Directory forest that contains a single domain named ad.contoso.com.
The ad.contoso.com domain contains one domain controller named DC1 that is located in the main office. DC1 is configured as a DNS server for the ad.contoso.com DNS zone. This zone is configured as a standard primary zone.
You install a new domain controller named DC2 in the branch office. You install DNS on DC2.
You need to ensure that the DNS service can update records and resolve DNS queries in the event that aWAN link fails.
What should you do?

• A.Configure the DNS server on DC2 to forward requests to DC1.
• B.Create a new stub zone named ad.contoso.com on DC2.
• C.Create a new standard secondary zone named ad.contoso.com on DC2.
• D.Convert the ad.contoso.com zone on DC1 to an Active Directory-integrated zone.

All consultants belong to a global group named TempWorkers. You place three file servers in a new organizational unit named SecureServers. The three file servers contain confidential data located in shared folders.
You need to record any failed attempts made by the consultants to access the confidential data.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

• A.Create and link a new GPO to the SecureServers organizational unit. Configure the Deny access to this computer from the network user rights setting for the TempWorkers global group.
• B.On each shared folder on the three file servers, add the TempWorkers global group to the Auditing tab. Configure the Failed Full control setting in the Auditing Entry dialog box.
• C.Create and link a new GPO to the SecureServers organizational unit. Configure the Audit privilege use Failure audit policy setting.
• D.On each shared folder on the three file servers, add the three servers to the Auditing tab. Configure the Failed Full control setting in the Auditing Entry dialog box.
• E.Create and link a new GPO to the SecureServers organizational unit. Configure the Audit object access Failure audit policy setting.

DRAG DROP
Your network contains an Active Directory forest named contoso.com. You need to create an Active Directory Rights Management Services (AD RMS) licensing-only cluster.
What should you do?
To answer, move the appropriate actions from the Possible Actions list to the Necessary Actions area and arrange them in the correct order.

Correct Answer: