Online Access Free 70-640 Exam Questions

Your company asks you to implement Windows Cardspace in the domain.
You want to use Windows Cardspace at your home.
Your home and office computers run Windows Vista Ultimate.
What should you do to create a backup copy of Windows Cardspace cards to be used at home?

• A.Log on with your administrator account and copy \Windows\ServiceProfiles folder to your USB drive
• B.None of the above
• C.Back up the system state data by using backup status tool on your USB drive
• D.Employ Windows Cardspace application to backup the data on your USB drive.
• E.Backup \Windows\Globalization folder by using backup status and save the folder on your USB drive
• F.Reformat the C: Drive

Your network contains an Active Directory forest. The forest contains one domain named contoso.com.
You attempt to run adprep /domainprep and the operation fails.
You discover that the first domain controller deployed to the forest failed.
You need to run adprep /domainprep successfully.
What should you do?

• A.Move the RID master role.
• B.Move the bridgehead server.
• C.Restart the Active Directory Domain Services (AD DS) service.
• D.Move the infrastructure master role.
• E.Install a read-only domain controller (RODC).
• F.Move the PDC emulator role.
• G.Move the schema master role.
• H.Deploy an additional global catalog server.
• I.Move the domain naming master role.
• J.Move the global catalog server.

Your network contains an Active Directory domain named contoso.com.
You need to create a central store for the Group Policy Administrative templates.
What should you do?

• A.Run dfsrmig.exe /createglobalobjects.
• B.Run adprep.exe /domainprep /gpprep.
• C.Copy the %SystemRoot%\PolicyDefinitions folder to the \\contoso.com\SYSVOL\contoso.com\Policies folder.
• D.Copy the %SystemRoot%\System32\GroupPolicy folder to the \\contoso.com\SYSVOL\contoso.com \Policies folder.

Your company Datum Corporation, has a single Active Directory domain named intranet.adatum.com. The domain has two domain controllers that run Windows Server 2008 R2 operating system. The domain controllers also run DNS servers.
The intranet.adatum.com DNS zone is configured as an Active Directory-integrated zone with the Dynamic updates setting configured to Secure only.
A new corporate security policy requires that the intranet.adatum.com DNS zone must be updated only by domain controllers or member servers.
You need to configure the intranet.adatum.com zone to meet the new security policy requirement.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

• A.Assign the server computer accounts the Allow on Write All Properties permission on the Security tab of the intranet.adatum.com DNS zone properties.
• B.Assign the SELF Account Deny on Write permission on the Security tab of the intranet.adatum.com DNS zone properties.
• C.Remove the Authenticated Users account from the Security tab of the intranet.adatum.com DNS zone properties.
• D.Assign the server computer accounts the Allow on Create All Child Objects permission on the Security tab of the intranet.adatum.com DNS zone properties.

Your network contains a server that runs Windows Server 2008 R2. The server is configured as an enterprise root certification authority (CA).
You have a Web site that uses x.509 certificates for authentication. The Web site is configured to use a manyto-one mapping.
You revoke a certificate issued to an external partner. You need to prevent the external partner from accessing the Web site.
What should you do?

• A.From Active Directory Users and Computers, modify the membership of the IIS_IUSRS group.
• B.From Active Directory Users and Computers, modify the Contact object for the external partner.
• C.Run certutil.exe -delkey.
• D.Run certutil.exe -crl.