Microsoft Windows Server 2008 Active Directory. Configuring (70-640) Free Practice Test
Question 1
A corporate network includes a single Active Directory Domain Services (AD DS} domain.
The HR department has a dedicated organization unit (OU) named HR. The HR OU has two sub-OUs: HR Users and HR Computers. User accounts for the HR department reside in the HR Users OU. Computer accounts for the HR department reside in the HR Computers OU. All HR department employees belong to a security group named HR Employees. All HR department computers belong to a security group named HR PCs.
Company policy requires that passwords are a minimum of six characters.
You need to ensure that, the next time HR department employees change their passwords, the passwords are required to have at least eight characters. The password length requirement should not change for employees of any other department.
What should you do?
The HR department has a dedicated organization unit (OU) named HR. The HR OU has two sub-OUs: HR Users and HR Computers. User accounts for the HR department reside in the HR Users OU. Computer accounts for the HR department reside in the HR Computers OU. All HR department employees belong to a security group named HR Employees. All HR department computers belong to a security group named HR PCs.
Company policy requires that passwords are a minimum of six characters.
You need to ensure that, the next time HR department employees change their passwords, the passwords are required to have at least eight characters. The password length requirement should not change for employees of any other department.
What should you do?
Correct Answer: C
Question 2
Your network contains an Active Directory forest named contoso.com.
You need to identify whether a fine-grained password policy is applied to a specific group.
Which tool should you use?
You need to identify whether a fine-grained password policy is applied to a specific group.
Which tool should you use?
Correct Answer: C
Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).
Question 3
Your network contains an Active Directory domain named contoso.com.
You need to ensure that when computers are joined manually to the domain by using the System Properties, the computer account of the computers is created automatically in an organizational unit (OU) named NewComputers.
Which command should you run?
You need to ensure that when computers are joined manually to the domain by using the System Properties, the computer account of the computers is created automatically in an organizational unit (OU) named NewComputers.
Which command should you run?
Correct Answer: A
Question 4
You are one of two network administrators for your organization.
Your IT partner does most of the work in Active Directory.
While working in Active Directory, your partner accidently deleted a user from the Sales OU.
You recover the user from tape backup but you want to help prevent this from happening again in the future.
What can you do?
Your IT partner does most of the work in Active Directory.
While working in Active Directory, your partner accidently deleted a user from the Sales OU.
You recover the user from tape backup but you want to help prevent this from happening again in the future.
What can you do?
Correct Answer: D
Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).
Question 5
DRAG DROP
Your network contains an Active Directory forest named contoso.com. The forest contains four child domains named east.contoso.com, west.contoso.com, south.contoso.com, and north.contoso.com.
You need to create four new groups in the forest root domain. The groups must be configured as shown in the following table.
What should you do?
To answer, drag the appropriate group type to the correct group name in the answer area.
Your network contains an Active Directory forest named contoso.com. The forest contains four child domains named east.contoso.com, west.contoso.com, south.contoso.com, and north.contoso.com.
You need to create four new groups in the forest root domain. The groups must be configured as shown in the following table.
What should you do?
To answer, drag the appropriate group type to the correct group name in the answer area.
Correct Answer:
Question 6
Your network contains an Active Directory domain. The domain contains four domain controllers.
You create a new application directory partition.
You need to ensure that the new application directory partition replicates to only three of the domain controllers.
Which tool should you use?
You create a new application directory partition.
You need to ensure that the new application directory partition replicates to only three of the domain controllers.
Which tool should you use?
Correct Answer: D
Question 7
Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1. DC1 has the DNS Server server role installed and hosts the zone for contoso.com.
All host (A) records are registered in DNS by using dynamic updates.
You deploy a new server named dns.contoso.com.
You install the DNS Server server role on dns.contoso.com.
The Name Servers list is shown in the Name Server exhibit. (Click the Exhibit button.)
The Zone Transfers settings are shown in the Zone Transfers exhibit. (Click the Exhibit button.)
On dns.contoso.com, you create a secondary zone for contoso.com and you specify DC1 as the master server.
You discover that the zone fails to transfer to dns.contoso.com.
You open DNS Manager as shown in the DNS Manager exhibit. (Click the Exhibit button.)
You need to ensure that dns.contoso.com can transfer the contoso.com zone.
What should you do?
All host (A) records are registered in DNS by using dynamic updates.
You deploy a new server named dns.contoso.com.
You install the DNS Server server role on dns.contoso.com.
The Name Servers list is shown in the Name Server exhibit. (Click the Exhibit button.)
The Zone Transfers settings are shown in the Zone Transfers exhibit. (Click the Exhibit button.)
On dns.contoso.com, you create a secondary zone for contoso.com and you specify DC1 as the master server.
You discover that the zone fails to transfer to dns.contoso.com.
You open DNS Manager as shown in the DNS Manager exhibit. (Click the Exhibit button.)
You need to ensure that dns.contoso.com can transfer the contoso.com zone.
What should you do?
Correct Answer: E
Question 8
You configure and deploy a Group Policy object (GPO) that contains AppLocker settings. You need to identify whether a specific application file is allowed to run on a computer.
Which Windows PowerShell cmdlet should you use?
Which Windows PowerShell cmdlet should you use?
Correct Answer: D
Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).
Question 9
HOTSPOT
Your network contains an Active Directory domain named contoso.com.
The domain contains a domain controller named DC1. DC1 has the DNS namespaces configured as shown in the following table.
In the table below, identify which queries will have an authoritative or non-authoritative response from DC1. Make only one selection in each row.
Your network contains an Active Directory domain named contoso.com.
The domain contains a domain controller named DC1. DC1 has the DNS namespaces configured as shown in the following table.
In the table below, identify which queries will have an authoritative or non-authoritative response from DC1. Make only one selection in each row.
Correct Answer:
Question 10
Your network consists of a single Active Directory domain. You have a domain controller and a member server that run Windows Server 2008 R2. Both servers are configured as DNS servers. Client computers run either Windows XP Service Pack 3 or Windows 7.
You have a standard primary zone on the domain controller. The member server hosts a secondary copy of the zone.
You need to ensure that only authenticated users are allowed to update host (A) records in the DNS zone.
What should you do first?
You have a standard primary zone on the domain controller. The member server hosts a secondary copy of the zone.
You need to ensure that only authenticated users are allowed to update host (A) records in the DNS zone.
What should you do first?
Correct Answer: D
Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).
Question 11
HOTSPOT
Your network contains an Active Directory domain that has the password policy shown in the following exhibit. (Click the Exhibit button.)
To answer, complete each statement according to the information presented in the exhibit.
Your network contains an Active Directory domain that has the password policy shown in the following exhibit. (Click the Exhibit button.)
To answer, complete each statement according to the information presented in the exhibit.
Correct Answer:
Question 12
You work for an organization with a single Windows Server 2008 R2 Active Directory domain.
The domain has OUs for Sales, Marketing, Admin, R&D and Finance.
You need only the users in the Finance OU to get Windows Office 2010 installed automatically onto their computers.
You create a GPO named OfficeApp.
What is the next step in getting all the Finance users Office 2010?
The domain has OUs for Sales, Marketing, Admin, R&D and Finance.
You need only the users in the Finance OU to get Windows Office 2010 installed automatically onto their computers.
You create a GPO named OfficeApp.
What is the next step in getting all the Finance users Office 2010?
Correct Answer: B
Question 13
HOTSPOT
Your network contains an Active Directory domain named contoso.com.
Members of the sales department are issued laptops that have wireless network cards.
You need to ensure that when users connect to an unidentified network from their laptop,
the network is configured as a Public network.
Which node in Group Policy Management Editor should you use?To answer, select the
appropriate node in the answer area.
Your network contains an Active Directory domain named contoso.com.
Members of the sales department are issued laptops that have wireless network cards.
You need to ensure that when users connect to an unidentified network from their laptop,
the network is configured as a Public network.
Which node in Group Policy Management Editor should you use?To answer, select the
appropriate node in the answer area.
Correct Answer:
Question 14
Your company has a main office and five branch offices that are connected by WAN links. The company has an Active Directory domain named contoso.com.
Each branch office has a member server configured as a DNS server. All branch office DNS servers host a secondary zone for contoso.com.
You need to configure the contoso.com zone to ensure that clients cache records from the zone for 4 days.
What should you do?
Each branch office has a member server configured as a DNS server. All branch office DNS servers host a secondary zone for contoso.com.
You need to configure the contoso.com zone to ensure that clients cache records from the zone for 4 days.
What should you do?
Correct Answer: C