70 649
http://www.TwPass.com
70-649
Microsoft
TS: Upgrading Your MCSE on Windows Server 2003 to Version: TS:
Upgrading Your MCSE on Windows Server 2003 to Windows Server
2008, Technology Specialist
http://www.twpass.com/twpass.com/exam.aspx?eCode= 70-649
The 70-649 practice exam is written and formatted by Certified Senior IT Professionals working in
today's prospering companies and data centers all over the world! The 70-649 Practice Test covers all
the exam topics and objectives and will prepare you for success quickly and efficiently.
The 70-649 exam is very challenging, but with our 70-649 questions and answers practice exam,
you can feel confident in obtaining your success on the 70-649 exam on your FIRST TRY!
Microsoft 70-649 Exam Features
- Detailed questions and answers for 70-649 exam
- Try a demo before buying any Microsoft exam
- 70-649 questions and answers, updated regularly
- Verified 70-649 answers by Experts and bear almost 100% accuracy
- 70-649 tested and verified before publishing
- 70-649 exam questions with exhibits
- 70-649 same questions as real exam with multiple choice options
Acquiring Microsoft certifications are becoming a huge task in the field of I.T. More over
these
exams like 70-649 exam are now continuously updating and accepting this challenge is itself a task.
This 70-649 test is an important part of Microsoft certifications. We have the resources
to
prepare you for this. The 70-649 exam is essential and core part of Microsoft certifications
and
once you clear the exam you will be able to solve the real life problems yourself.Want to take
advantage of the Real 70-649 Test and save time and money while developing your skills to pass
your Microsoft 70-649 Exam? Let us help you climb that ladder of success and pass your 70-649
now!
70-649
QUESTION: 1
You work as the enterprise administrator at ABC.com. ABC.com has a domain named
ABC.com. The ABC.com network servers run Microsoft Windows Server 2008 and the client
computers run Microsoft Windows Vista. ABC.com has a Routing and Remote Access
computer named ABCSR01 running Network Access Protection. How should you configure
ABC-SR01 to ensure Point-to-Point (PP) authentication is used?
A. By using the Microsoft Challenge Handshake Authentication Protocol (MS-CHAP)
protocol.
B. By using the Secure Shell (SSH) protocol.
C. By using the Extensible Authentication Protocol (EAP) protocol.
D. By using the Kerberos v5 protocol.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=1
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 2
You work as the enterprise administrator at ABC.com. ABC.com has a domain named
ABC.com. The ABC.com network servers run Microsoft Windows Server 2008 and the client
computers run Microsoft Windows Vista. ABC.com has a computer named ABC-SR01 using
the default security settings to run Remote Desktop. How would you configure the Remote
Desktop connection to ensure secure connections between ABC-SR01 and accessing clients?
A. By configuring Windows Firewall to block communications via port 110 on the
firewall.
B. By obtaining user certificates from the internal certificate authority. By allowing
connections to Remote Desktop client computers that use Network Level
Authentication only.
C. By configuring Windows Firewall to block communications via port 443 on the
firewall.
D. By obtaining user certificates from the external certificate authority. By allowing
connections to Remote Desktop client computers that use Network Level
Authentication only.
E. By configuring Windows Firewall to block communications via port 1423 on the
firewall.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=2
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 3
You work as the enterprise administrator at ABC.com. ABC.com has a domain named
ABC.com. The ABC.com network servers run Microsoft Windows Server 2008 and the client
computers run Microsoft Windows Vista. ABC.com has a computer named ABC-SR18
configured to host the Internet Information Services (IIS) Web server role and SMTP gateway
role. ABC.com has a Marketing division using ABC-SR18 to send and receive e-mail from the
Internet. The ABC.com Marketing division accesses the Internet using the SMTP gateway on
port 25. How would you configure ABC-SR18 to send e-mail to Internet recipients after
configuring the SMTP gateway to relay messages?
A. By creating an SRV record for the SMTP gateway on an internal DNS server.
B. By creating a host (A) record for the SMTP gateway on an internal DNS server.
C. By configuring the SMTP email feature for the website on ABC-SR18.
D. By creating a CNAME record for the SMTP gateway on an internal DNS server.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=3
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 4
You work as the enterprise administrator at ABC.com. ABC.com has a domain named
ABC.com. The ABC.com network servers run Microsoft Windows Server 2008 and the client
computers run Microsoft Windows Vista. ABC.com has a computer named ABC-SR15
configured to host the Active Directory Lightweight Directory Services (AD LDS) service.
How would you replicate Active Directory Lightweight Directory Services (AD LDS) to a
newly deployed server?
A. By using the ADSI Edit Snap-in to replicate the AD LDS instance.
B. By creating and installing a replica of AD LDS running the AD LDS Setup wizard
on ABC-SR15
C. By using the xcopy command to copy the entire AD LDS instance.
D. By using Active Directory Sites and Services to replicate the AD LDS instance.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=4
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 5
You work as the enterprise administrator at ABC.com. ABC.com has a domain named
ABC.com. The ABC.com network servers run Microsoft Windows Server 2008 and the client
computers run Microsoft Windows Vista. ABC.com has a computer named ABC-SR01
configured to host virtualization role service and virtual machines installed with the KingSales
application. How would you configure the virtual machines to be recovered to the original
state if installation of KingSales fails?
A. By using an Automated System Recovery (ASR) disk on the virtual machine when
the application fails.
B. By installing and configuring third party backup software on Virtual machine.
C. By creating a snapshot of the virtual machine through the Virtualization Management
Console.
D. By using the Windows Backup utility to backup the Virtual machines.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=5
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 6
You work as the enterprise administrator at ABC.com. ABC.com has a domain named
ABC.com. The ABC.com network servers run Microsoft Windows Server 2008 and the client
computers run Microsoft Windows Vista. ABC.com has two computers configured as follows:
�ABC-DC01 � configured as a domain controller. �ABC-DC02 � configured as a ReadOnly Domain Controller (RODC). ABC.com Marketing division members makes use of ABCDC01 to log onto the domain. How would you ensure that ABC-DC02 can be used by the
Marketing division to log onto the domain?
A. By deploying a computer running Active Directory Certificate Services (AD CS).
B. By using a Password Replication Policy on the ROD
C.
C. By installing and configuring an Active Directory Federation Services (AD FS)
front-end server.
D. By deploying a computer running Active Directory Lightweight Directory Services
(AD LDS) and Active Directory Domain Services (AD DS).
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=6
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 7
You work as the enterprise administrator at ABC.com. ABC.com has a domain named
ABC.com. The ABC.com network servers run Microsoft Windows Server 2008 and the client
computers run Microsoft Windows Vista. ABC.com has a computer named ABC-SR21 in the
default Web site running WSUS for updates. How would you configure a group policy with
the port and intranet update location to ensure the Secure Sockets Layer (SSL) is used on
ABC-SR21?
A. By using https://ABC-sr21: 80 to indicate the default port and intranet update
location.
B. By using https://ABC-sr21 to indicate the default port and intranet update location.
C. By using http://ABC-sr21: 1073 to indicate the default port and intranet update
location.
D. By using http://ABC-sr21: 110 to indicate the default port and intranet update
location.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=7
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 8
You are employed as an enterprise administrator at ABC.com. The ABC.com has a domain
named ABC.com. All servers on the domain run Microsoft Windows Server 2008 and all client
computers run Microsoft Windows Vista. ABC.com has a computer named ABC-SR20 that
hosts the Internet Information Services (IIS) Web Server role though being configured not to
utilize the Windows Performance and Reliability Monitor. During the course of the day
ABC.com instructs you to install and configure Reliability Monitor. How can you ensure
ABC-SR20 collects reliability information keeping the system stability share current?
A. By configuring the Remote Access Auto Connection Manager service to start
automatically on the ABC-SR20.
B. By configuring the Net Logon service to start automatically on the ABC-SR20.
C. By configuring the Task scheduler service to start automatically on the ABC-SR20.
D. By configuring the Error Reporting Services service to start automatically on the
ABC-SR20.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=8
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 9
You work as the enterprise administrator at ABC.com. ABC.com has a domain named
ABC.com. The ABC.com network servers run Microsoft Windows Server 2008 and the client
computers run Microsoft Windows Vista. ABC.com has three computers configured as
follows: �ABC-SR11 � configured with Event Log subscription monitoring �ABC-SR12 �
configured as a domain controller. �ABC-SR13 � configured as a domain controller. During
the course of the day ABC.com instructs you to create the subscription using ABC-SR12 or
ABC-SR13 which fails as the operation does not complete. How would you ensure that the
subscription can be created using either ABC-SR12 or ABCSR13? (Choose two)
A. By running the command wecutil cs subscription.xml on ABC-SR11.
B. By creating subscription.xml custom view on ABC-SR11.
C. By running the wecutil qc command on ABC-SR12.
D. By running the winrm connect command on ABC-SR13.
E. By running the winrm allow command on ABC-SR13
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=9
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 10
You work as the enterprise administrator at ABC.com. ABC.com has a domain named
ABC.com. The ABC.com network servers run Microsoft Windows Server 2008 and the client
computers run Microsoft Windows Vista. ABC.com has a computer named ABC-SR11
configured to run Internet Information Services (IIS) Web server role hosting confidential
company information. ABC.com has a Marketing division accessing the confidential
information which loads excessively slow. During the course of the maintenance you
discovered ABC-SR11 uses a high percentage of processor time. How would you gather
information regarding the processor utilizing high percentages of processor time?
A. By using Windows Reliability and Performance Monitor to check percentage of
processor capacity.
B. By using a counter log to track the processor usage.
C. By using the Performance Logs and Alerts.
D. By checking the security log for Performance events.
E. By checking the error log for performance events.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=10
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 11
You are employed as an enterprise administrator at ABC.com. The ABC.com has a domain
named ABC.com. All servers on the domain run Microsoft Windows Server 2008 and all client
computers run Microsoft Windows Vista. ABC.com has a computer named ABC-DC01 which
utilizes Network Monitor 3.0. ABC.com has recently enabled Network Monitor to use P-mode
for capturing traffic to and from the DHCP server. ABC.com has ABC-DC01 and ABCWS123 configured as follows: �ABC-DC01 � Mac Address: 00-15-5E-CD-3E-83, - IP
Address: 192.168.25.84 �ABC-WS123 � Mac Address: 00-15-F2-CD-2A-FB, - IP Address:
169.108.20.1 During the course of the day while using ABC-WS123 you determined that the
IP configuration used is not obtained from ABC-DC01. How would you capture DHCP
related traffic between ABC-DC01 and ABC-WS123? Note: ABC-DC01 is the DHCP server.
A. By using the IPv4. Address == 192.168.25.84 && DHCP to build a filter in Network
Monitor.
B. By using the IPv4 address == 169.108.20.1 && DHCP to build a filter in Network
Monitor.
C. By using the Ethernet Address == 0x00155ECD3E83 & DHCP to build a filter in
Network Monitor.
D. By using the Ethernet Address == 0x0015F2CD2AFB & DHCP to build a filter in
Network Monitor.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=11
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 12
You work as the enterprise administrator at ABC.com. ABC.com has a domain named
ABC.com. The ABC.com network servers run Microsoft Windows Server 2008 and the client
computers run Microsoft Windows Vista. ABC.com has two computers configured as follows:
�ABC-SR01 � configured as a domain File server. �ABC-SR02 � configured as a domain
File server. ABC.com has recently deployed and configured an iSCSI Storage Area Network
(SAN) for ABCSR01 and ABC-SR02 for storage purposes. How would you configure the
iSCSI san to ensure the most secure security solution is used for traffic related to the Storage
Area Network?
A. By implementing IPSec security on the properties of iSCSI Initiator. By configuring
Windows Firewall to use inbound and outbound rules.
B. By using Extensible Authentication Protocol Transport Layer Security (EAP TLS)
authentication in iSCSI Initiator Properties.
C. By implementing Kerberos v5 authentication on the properties of iSCSI Initiator. By
configuring Windows Defender to use inbound and outbound rules.
D. By using Microsoft Challenge Handshake Authentication Protocol (MS-CHAPv2)
authentication in iSCSI Initiator Properties.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=12
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 13
You are employed as the network administrator at ABC.com. The ABC.com network has a
domain named ABC.com. All servers on the domain run Windows Server 2008 and all client
computers run Windows Vista. ABC.com makes use of two WSUS servers named ABC-SR01
and ABC-SR02 configured in a WSUS hierarchy. On ABC-SR01, how can you make sure
that updates can be received from ABC-SR02?
A. By configuring ABC-SR01 in replica mode.
B. By creating a new computer group for ABC-SR01.
C. By opening Control Panel from the Start Menu and configuring Windows Update
Settings on ABC-SR01 in the domain group policy.
D. By opening Control Panel from the Start Menu and configuring Windows Update
Settings on ABC-SR01 in the local group policy.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=13
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 14
You work as an enterprise administrator at ABC.com. The ABC.com network consists has a
domain named ABC.com. All servers on the domain run Microsoft Windows Server 2008 and
all client computers run Microsoft Windows Vista. ABC.com has a computer named ABCSR12 which has a SAN with multiple logical disk drives which use a Data Collector Set. You
are in the process of creating script to archive date whenever free space is running low. How
would you ensure the archiving script executes automatically when free space is below 5%?
A. By using a Resource View to view the free space of the physical disks in Windows
Reliability and Performance Monitor and executing the archiving script.
B. By creating an alert which is triggered when free disk space falls below 30% and
executes the archiving script.
C. By adding the Performance counter alert to the Data Collector Set.
D. By creating a counter log to track disk space usage in Performance console.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=14
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 15
You work as the enterprise administrator at ABC.com. ABC.com has a domain named
ABC.com. The ABC.com network servers run Microsoft Windows Server 2008 and the client
computers run Microsoft Windows Vista. ABC.com has a member server named ABC-SR08
configured to host Active Directory Federation Services (AD FS). ABC.com has a Marketing
division which uses Active Directory Federation Services (ADFS). How would you configure
ABC-SR08 to pass Federation Services tokens with data from the domain?
A. By creating and configuring a new account store.
B. By opening a browser window to type the Federation Service URL for ABC-SR08.
C. By checking Event Viewer applications and Event ID columns for the ID 674 event.
D. By deploying and installing Active Directory Domain Services (AD DS) configured
as a new resource partner.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=15
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 16
You work as an enterprise administrator at ABC.com. The ABC.com has a domain named
ABC.com. All servers on the domain run Microsoft Windows Server 2008 and all client
computers run Microsoft Windows Vista. ABC.com has two computers named ABC-SR22
and ABC-SR23 configured as follows: �ABC-SR22 � hosts the WSUS service �ABCSR23 � hosts the WSUS service During the course of the day you receive instruction to
configure ABC-SR23 to obtain and download updates via ABC-SR22. How can you ensure
that updates are received by ABC-SR23 from ABC-SR22?
A. By configuring ABC-SR22 as a proxy server.
B. By opening Control Panel from the Start Menu and configuring Windows Update
Settings on ABC-SR22 in the domain group policy.
C. By configuring ABC-SR22 as an upstream server.
D. By opening Control Panel from the Start Menu and configuring Windows Update
Settings on ABC-SR22 in the local group policy.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=16
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 17
You work as the enterprise administrator at ABC.com. ABC.com has a domain named
ABC.com. The ABC.com network servers run Microsoft Windows Server 2008 and the client
computers run Microsoft Windows Vista. ABC.com has a computer named ABC-SR02 used
for FTP communications. How would you configure the Windows Firewall to block
communications taking place on port 25?
A. By making use of X.25 protocols communicating on the ports.
B. By creating an outbound rule using the Advanced Security snap-in of Windows
Firewall.
C. By adding an IPv4 address exception.
D. By adding an IPv6 address exception.
E. By creating an inbound rule using the Advanced Security snap-in of Windows
Firewall.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=17
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 18
You work as the enterprise administrator at ABC.com. ABC.com has a domain named
ABC.com. The ABC.com network servers run Microsoft Windows Server 2008 and the client
computers run Microsoft Windows Vista. ABC.com has a computer named ABC-SR10
configured to host the Internet Information Services (IIS) Web server role and a public web
site. ABC.com has a Marketing division which accesses the public web site from the Internet.
How would you configure the web site in IIS to provide traffic statistics?
A. By having the IIS server manager�s website logging enabled to filter the source IP
address logs.
B. By using a third-party traffic analysis utility to view the source IP address of the
traffic.
C. By running the net session � at command on ABC-SR10.
D. By running the net stat/all command to view the traffic statistics
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=18
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 19
You work as the enterprise administrator at ABC.com. ABC.com has a domain named
ABC.com. The ABC.com network servers run Microsoft Windows Server 2008 and the client
computers run Microsoft Windows Vista. ABC.com has a computer named ABC-TS05
running Terminal Services Gateway role. ABC.com has a Marketing division which requires
access to ABC-TS05. How would you determine if a specific network user attempted to access
a network client computer through ABC-TS05?
A. By viewing the Windows Server 2008 Event Viewer for TS Gateway connections.
B. By viewing the Event Viewer system log.
C. By viewing the Event Viewer Terminal Services-gateway log.
D. By viewing the Event Viewer Internet Explorer log.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=19
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 20
You work as the enterprise administrator at ABC.com. ABC.com has a domain named
ABC.com. The ABC.com network servers run Microsoft Windows Server 2008 and the client
computers run Microsoft Windows Vista. ABC.com has a computer named ABC-SR25
configured to host the Internet Information Services (IIS) Web server role and a secure web
site. ABC.com has a Marketing division which accesses the secured web site. How would you
configure ABC-SR25 to ensure the Marketing division use user certificates instead of their
usernames and passwords?
A. By configuring Windows and IIS Manager Credentials using Management Services.
B. By configuring the use of Integrated Windows Authentication (IWA) for the secured
web site.
C. By configuring the Client Certificate settings to Require SSL Settings for the secured
website.
D. By configuring the Authentication feature for the secured website.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=20
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 21
You work as the enterprise administrator at ABC.com. ABC.com has a domain named
ABC.com. The ABC.com network servers run Microsoft Windows Server 2008 and the client
computers run Microsoft Windows Vista. ABC.com has a computer named ABC-SR01
configured to hosts the Web Server role and the secure test.com web site. The ABC.com
Marketing division network users has self-signed certificates to access the secure test.com web
site. How would you configure ABC-SR01 to ensure error messages are not displayed when
accessing the secured test.com web site?
A. By having the anonymous authentication module disabled.
B. By making changes to the Site web.config file.
C. By using the Certificates console to access the certificate. By exporting the selfsigned certificate to a Test.com.cer file and linking the Test.com.cer file via the domain.
D. By using Forms Authentication with the default settings.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=21
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 22
You work as an enterprise administrator at ABC.com. The ABC.com has a domain named
ABC.com. All servers on the domain run Microsoft Windows Server 2008 and all client
computers run Microsoft Windows Vista. ABC.com makes use of two computers named
ABC-DC01 and ABCDC02 configured with a default subscription between the computers.
During the course of the day ABC.com configures the subscription to configure Event
forwarding. How can we view the system event for ABC-DC02?
A. By reviewing the Error log on ABC-DC02
B. By reviewing the Internet Explorer log on ABC-DC01.
C. By using the Forwarded Events log on ABC-DC01.
D. By reviewing the Error log on ABC-DC01.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=22
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 23
You work as an enterprise administrator at ABC.com. The ABC.com has a domain named
ABC.com. All servers on the domain run Microsoft Windows Server 2008 and all client
computers run Microsoft Windows Vista. ABC.com has configured ABC-SR12 and ABCSR13 with event subscription to forward the events to ABC-SR12. During the course of the
day ABC.com configures the event subscription to utilize the HTTP protocol using the normal
delivery optimization settings. How will you ensure that the servers support event collectors?
A. By running the wecutil qc command on ABC-SR12. And then the winrm
quickconfig command on ABC-SR13. By adding the ABC-SR12 account to the
Network Configuration Operators group on ABC-SR12 to ABC-SR13.
B. By running the wecutil qc command on ABC-SR12. By adding the ABC-SR12
account to the Remote Desktop Users group on ABC-SR12 to ABCSR13.
C. By running the wecutil qc command on ABC-SR12. And then the winrm
quickconfig command on ABC-SR13. By adding the ABC-SR12 account to the
administrators group on ABC-SR12 to ABC-SR13.
D. By running the winrm quickconfig command on ABC-SR13. By adding the ABCSR13 account to the administrators group on ABC-SR13 to ABC-SR12.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=23
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 24
You work as the enterprise administrator at ABC.com. ABC.com has a domain named
ABC.com. The ABC.com network servers run Microsoft Windows Server 2008 and the client
computers run Microsoft Windows Vista. ABC.com has a computer named ABC-SR01
configured to host Windows Server virtualization service and hosts a virtual machine using the
physical network interface card (NIC). ABC.com has a Marketing division which uses the
virtual machines to access physical network resources. How would you configure the virtual
host, when unable to access physical network resources using the virtual machine?
A. By installing the Windows Server virtualization Guest Integration Components on
the virtual machine.
B. By installing the Virtual Machine Additions feature installed on ABC-SR01.
C. By installing the MS loopback adapter installed on the virtual machine and ABCSR01.
D. By installing the Virtual Machine Additions feature installed on the virtual machine.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=24
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 25
You work as the enterprise administrator at ABC.com. The ABC.com network servers run
Microsoft Windows Server 2008 and the client computers run Microsoft Windows Vista.
ABC.com has a computer named ABC-SR15 configured as follows: ABC-SR15 �
configured to host the Active Directory Lightweight Directory Services (AD LDS) service.
How would you create Organizational Units for the network divisions in the Active Directory
Lightweight Directory Services (AD LDS) application directory partition?
A. By using Active Directory Sites and Services.
B. By using the ADSI Edit Snap-in on the AD LDS application directory partition.
C. By running the Dsmgmt command.
D. By using Active Directory Domains and Trusts snap-in .
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=25
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 26
You work as the enterprise administrator at ABC.com. ABC.com has a domain named
ABC.com. The ABC.com network servers run Microsoft Windows Server 2008 and the client
computers run Microsoft Windows Vista. ABC.com has a computer named ABC-SR11
configured for the Internet Information Services (IIS) Web server role and multiple Web sites.
How would you configure ABC-SR11 to release consumed memory resources for a particular
website and make sure that other web sites remain unaffected?
A. By modifying the Recycling options of the application pool defaults.
B. By creating a new application pool associated to the website.
C. By configuring bindings for the new web site.
D. By configuring bindings for the existing web site and modifying Recycling options.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=26
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 27
You work as the enterprise administrator at ABC.com. ABC.com has a domain named
ABC.com. The ABC.com network servers run Microsoft Windows Server 2008 and the client
computers run Microsoft Windows Vista. ABC.com has two computers configured as follows:
�ABC-SR01 � configured as an ISA server on the internal network. �ABC-SR02 �
configured to host the Virtual Private Network (VPN) service over the Point-to-Point
Tunneling Protocol (PPTP). During the course of the day the Marketing division members
state the error message below is received when connecting to ABC-SR02. �Error 721: The
remote computer is not responding� How would you configure the Windows Firewall for the
Marketing division members to logon to ABC-SR02?
A. By opening port 439 on the Windows firewall.
B. By opening port 443 on the Windows firewall.
C. By opening port 25 on the Windows firewall.
D. By opening port 1723 on the Windows firewall.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=27
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 28
You work as the enterprise administrator at ABC.com. ABC.com has a domain named
ABC.com. The ABC.com network servers run Microsoft Windows Server 2008 and the client
computers run Microsoft Windows Vista. ABC.com has two computers configured as follows:
�ABC-DC01 - configured as a dedicated Read-Only Domain Controller (RODC) in a separate
site. �ABC-DC02 - configured as a dedicated Read-Only Domain Controller (RODC) in a
separate site. ABC.com has a Marketing division which uses ABC-DC01 and ABC-DC02 to
log onto the domain. How would you configure the remaining Read-Only Domain controller
in the event of a single domain controller experiencing a catastrophic system failure?
A. By using Active Directory Users and Computers snap-in.
B. By using the Dsadd.exe utility.
C. By using Active Directory Rights Management Services to restore the user accounts.
D. By using the Netdom.exe utility.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=28
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 29
You work as the enterprise administrator at ABC.com. ABC.com has a domain named
ABC.com. The ABC.com network servers run Microsoft Windows Server 2008. ABC.com
has a Terminal server named ABC-TS01 used by the Marketing division. During the course of
the day Marketing division user named Kara Lang accesses ABC-TS01 using the KLang user
account. How would you execute a terminal server session take over when a Terminal server
session with session ID of 1303 remains active after disconnecting?
A. By running the Chgport/U KLang 1303 command.
B. By running the chguser 1303. By executing the Takeown 1303 command.
C. By running the Takeown/U KLang 1303 command. By executing the chgusr 1303
command.
D. By running the Tsdiscon 1303 command. By running the Tscon 1303 command.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=29
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 30
You work as the enterprise administrator at ABC.com. ABC.com has a domain named
ABC.com. The ABC.com network servers run Microsoft Windows Server 2008 and the client
computers run Microsoft Windows Vista. ABC.com has a computer named ABC-SR17
configured to host the SMTP service and Internet Information Services (IIS) Web server role.
ABC.com has a Marketing division which uses ABC-SR17 to send and receive email to and
from the Internet. How would you configure ABC-SR17 to ensure mail for the Internet is sent
to the Internet Service Provider (ISP) mail server?
A. By running the adprep/dm: getfromiis command.
B. By configuring smart host setting to employ the mail server of the ISP.
C. By configuring smart host settings for the local host to use.
D. By configuring the SMTP delivery setting opening ports assigned by the ISP for
SMTP service.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=30
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 31
You work as the enterprise administrator at ABC.com. ABC.com has a domain named
ABC.com. The ABC.com network servers run Microsoft Windows Server 2008 and the client
computers run Microsoft Windows Vista. ABC.com has virtual machines configurated on a
computer named ABCSR01 configured to host Microsoft Hyper-V. How would you configure
the virtual machines for restoring to the original state in the event of a system failure?
A. By creating a snapshot of the virtual machines using Virtual Services Manager.
B. By using System Restore to create restore points to restore to.
C. By installing and configuring third party backup software on Virtual machine.
D. By using an Automated System Recovery (ASR) disk on the virtual machine when
the application fails.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=31
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 32
You work as the enterprise administrator at ABC.com. ABC.com has a domain named
ABC.com. The ABC.com network servers run Microsoft Windows Server 2008 and the client
computers run Microsoft Windows Vista. ABC.com has three computers configured as
follows: �ABC-SR01 � configured as a domain controller for the domain. �ABC-SR02 �
configured as a domain controller for the domain. �ABC-SR03 � configured as a domain
controller for the domain. ABC.com has a Marketing division which downloads files and
updates from the Internet. During the course of the day the Marketing division members
informs you ABC-SR01 and ABC-SR02 consumes high processor time and memory between
1:00 P.M. and 3:00 P.M. How would you ensure Performance Logs and Alerts are scheduled
on ABC-SR01 and ABC-SR02 at 1:00 P.M.?
A. By using the Reliability and Performance Monitor utility.
B. By using the Microsoft Component Services snap-in.
C. By using the Event Viewer.
D. By using the Task Scheduler.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=32
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 33
You work as an enterprise administrator at ABC.com. All servers on the domain run Microsoft
Windows Server 2008 and all client computers run Microsoft Windows Vista. ABC.com
currently updates and maintains a computer named ABC-SR20 running WSUS. During the
course of the day you receive instruction from ABC.com to ensure the domain servers receive
updates from the local WSUS server ABC-SR20. How should you ensure the domain servers
use the local WSUS server ABC-SR20 for updates?
A. By opening Control Panel from the Start Menu and configuring Windows Update
settings on the domain servers.
B. By opening Control Panel from the Start Menu and configuring Windows Update
Settings on the domain servers using the local group policy.
C. By configuring ABC-SR20 as a Proxy server and executing the wuauclt.exe
command on the domain servers.
D. By opening Control Panel from the Start Menu and configuring Windows Update
Settings on the domain servers using the domain group policy.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=33
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 34
You work as the enterprise administrator at ABC.com. ABC.com has a domain named
ABC.com. The ABC.com network servers run Microsoft Windows Server 2008 and the client
computers run Microsoft Windows Vista. ABC.com has a computer named ABC-SR12
configured to host the Windows Server Update Services (WSUS) service. During the course
of the day ABC.com configured the network users to obtain and download updates from ABCSR12. How would you configure ABC-SR12 ensuring communication to and from ABCSR12 is encrypted?
A. By configuring and using Integrated Windows Authentication (IWA).
B. By disabling Basic Authentication setting on ABC-SR12.
C. By configuring and using SHA encryption on the web site.
D. By enabling Active Directory Client Certificate Authentication on ABC-SR12.
E. By configuring and using Internet Protocol Security (IPSec) on the Web site.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=34
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 35
You work as the enterprise administrator at ABC.com. ABC.com has a domain named
ABC.com. The ABC.com network servers run Microsoft Windows Server 2008. ABC.com
has a computer named ABC-SR01 configured to host the Active Directory Certificate Services
(AD CS) and the Network Access Protection ABC.com has a division of marketing users
accessing the network using laptop computers. How would you ensure that a created policy is
enforced on the laptop computers?
A. By configuring 802.1X authentication on all access points.
B. By configuring WPA2 and EAP-TLS authentication on all laptop computers.
C. By having Extensible Authentication Protocol (EAP) used on all laptop computers.
D. By configuring WPA2, 802.1X authentication and EAP-TLS on all laptop
computers.
E. By having Internet Protocol Security (IPSec) protocol used on all laptop computers.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=35
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 36
You work as the enterprise administrator at ABC.com. ABC.com has a domain named
ABC.com. The ABC.com network servers run Microsoft Windows Server 2008. ABC.com
has certain computers configured as follows: �ABC-TS01 - hosting the Terminal Server
Session Broker role. �ABC-TS02 - hosting the Terminal Server Session Broker role. �ABCTS03 - hosting the Terminal Server Session Broker role. �ABC-TS04 - hosting the Terminal
Server Session Broker role. How would you configure ABC-TS03 and ABC-TS04 for load
balancing with ABC-TS02 as the preferred server?
A. By using the Terminal Services Resource Authorization policy (RAP).
B. By using the Terminal Services Configuration utility.
C. By using the Terminal Services Connection Authorization policy (CAP).
D. By using the Group Policy Manager utility.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=36
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 37
You work as the enterprise administrator at ABC.com. ABC.com has a domain named
ABC.com. The ABC.com network servers run Microsoft Windows Server 2008 and the client
computers run Microsoft Windows Vista. ABC.com has a computer named ABC-SR25
configured to host the Internet Information Services (IIS) Web server role and a single web
site. ABC.com has a Marketing division which accesses the Web site from the Internet. How
would you configure ABC-SR25 when using port 80 to host multiple Web sites using the same
IP address?
A. By configuring and using a unique host header for each of the multiple websites.
B. By configuring and using a Virtual Directory with and editing the Host file with
entries for the web sites.
C. By configuring and using a Virtual Directory with a unique IP address for each of the
multiple websites.
D. By configuring and using a Virtual Directory with a unique port for each of the
multiple websites.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=37
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 38
You work as the enterprise administrator at ABC.com. ABC.com has a domain named
ABC.com. The ABC.com network servers run Microsoft Windows Server 2008. ABC.com
has a computer named ABC-SR24 storing company confidential information. How should
you configure ABC-SR24 to be more secure after discovering numerous attacks?
A. By using the Domain Profile in Windows Firewall and Blocking all connections.
B. By using the Internal Profile in Windows Firewall and Blocking all connections.
C. By disabling the Server service in the Services snap-in.
D. By disabling the Workstation service in the Services snap-in.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=38
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 39
You work as the enterprise administrator at ABC.com. ABC.com has a domain named
ABC.com. The ABC.com domain servers run Microsoft Windows Server 2008. ABC.com has
a server named ABC-SR01 running Routing and Remote Access Services (RRAS). ABC.com
has a marketing division of remote users belonging to a group named KingRemote requiring
access to the domain when out of office. During the course of the day ABC.com discovers that
stringent security settings are required when remotely accessing the domain. You started the
maintenance by creating a remote access policy. How do configure ABC-SR01 so that the
remote access users require using smartcards for dial-up connections?
A. By configuring a remote access policy that enables users to authenticate connections
using Extensible Authentication Protocol-Transport Layer Security (EAP-TLS).
B. By configuring a remote access policy that enables users to authenticate connections
using Password Authentication Protocol (PAP).
C. You should consider a remote access policy that requires Kerberos v5 authentication.
D. By configuring a remote access policy that enables users to authenticate connections
using Internet Protocol Security (IPSec).
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=39
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 40
You work as the enterprise administrator at ABC.com. ABC.com has a domain named
ABC.com. The ABC.com network servers run Microsoft Windows Server 2008. ABC.com
has a computer named ABC-SR01 configured to host Windows Deployment Services (WDS).
How would you upload a spanned image file when you receive error messages when
attempting to upload the image file?
A. By running the WDSutil /enable command on ABC-SR01.
B. By running the Sysprep utility on ABC-SR01.
C. By merging the spanned image files to a single .WIM file.
D. By granting the Authenticated Users group granted Read and Execute permission on
the \REMINST directory.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=40
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 41
You work as the enterprise administrator at ABC.com. ABC.com has a domain named
ABC.com. The ABC.com network servers run Microsoft Windows Server 2008. ABC.com
has a computer named ABC-SR25 configured to host the Internet Information Services (IIS)
Web server role and an application using .NET Framework 1.0 named KingSales. ABC.com
has a Marketing division which uses the KingSales application. How would you configure the
KingSales application with permission to execute using minimum required permission without
utilizing Windows Server 2008 system components?
A. By configuring .NET Frame work with a website trust level of Medium.
B. By configuring .NET Frame work with a website trust level of High.
C. By configuring .NET Frame work with a website trust level of Medium-low.
D. By configuring .NET Frame work with a website trust level of Full.
E. By configuring .NET Frame work with a website trust level of Optimal.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=41
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 42
You work as the enterprise administrator at ABC.com. ABC.com has a domain named
ABC.com. The ABC.com network servers run Microsoft Windows Server 2008. ABC.com
has a computer named ABC-SR21 running Network Address Translation. During the course of
the day ABC.com deploys an additional computer named ABC-SR22 to facilitate the launch of
a new office. How would you ensure administrative staff is able to connect to ABC-SR22
using Remote Desktop Protocol (RDP)?
A. By configuring port forwarding on ABC-SR21 to forward to port 3389.
B. By configuring port forwarding on ABC-SR21 to forward to port 110.
C. By configuring port forwarding on ABC-SR21 to forward to port 21.
D. By configuring port forwarding on ABC-SR21 to forward to port 80.
E. By configuring port forwarding on ABC-SR21 to forward to port 443.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=42
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 43
You are the Web administrator for ABC.com. The network has three Web servers Web1,
Web2, and Web3. Your company has a Web site named ABC that is used as a company
bulletin board. Web3 also contains external Web sites. You want to enable logging for all sites
that are configured on the Web3. Which of the following commands would enable logging for
Web3?
A. appcmd add site /name:ABC /id:85 /physicalPath:c:\ABC
/binding:http/*.85:ABC.com
B. appcmd add vdir /name:ABC /id:85 /physicalPath:c:\ABC
/binding:http/*.85:ABC.com
C. appcmd set config /section:httpLogging /dontLog:False /selectiveLogging:LogAll
D. appcmd set config /name:dreamcraft /id:85 /physicalPath:c:\dreamcraft
/binding:http/*.85:ABC.com
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=43
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 44
You are the system administrator for your company. You are implementing the TS Session
Broker service to load balance the workload among the five terminal service farm members.
You have performed the following tasks: 1. Upgraded all farm members to Windows server
2008. 2. Installed the TS Session Broker service on a Windows Server 2008 that is not a
member of the farm. 3. Configured the terminal servers in the farm to join a farm in TS
Session Broker, and to participate in TS Session Broker Load Balancing. 4. Configured DNS
round robin entries for terminal servers in the farm. Which of the following defines a critical
final step missing from the list?
A. Install Terminal services on the server hosting the TS Session Broker service
B. Install TS Session Broker service on the farm members
C. Add the terminal servers in the farm to the Session Directory Computers local group
on the TS Session Broker server
D. Configure DNS round robin entries for the TS Session Broker host
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=44
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 45
You are the system administrator for the ABC.com. You have a Windows Server 2008 server
with several virtual machines. Several users complain that they cannot connect to one of the
virtual machines. You need to discover why the users are unable to connect. Which utility on
the server should you use?
A. Authorization Manager
B. Active Directory Management
C. Security Configuration and Analysis
D. Event Viewer
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=45
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 46
You are the network administrator for your company. The company s network consists of a
single Active Directory domain. The servers on the network run Windows Server 2008 and
Windows Server 2003. The company s network contains a domain controller, named DC1,
which runs Windows Server 2008. The company opens a new branch office that will be used
by employees in the Marketing department. The branch office is located in a physically
insecure location. You are in the process - - - of installing a server in the branch office. You
want to meet the following requirements: Users logon requests are serviced locally. Users
credentials are not misused if the server is compromised. Network traffic between the main
office and the branch office is reduced. What should you do to achieve the desired goals?
A. Install Active Directory Domain Services (AD DS) in the branch office.
B. Install a read-only domain controller (RODC) in the branch office.
C. Install Active Directory Federation Services (AD FS) in the branch office.
D. Install Active Directory Lightweight Directory Services (AD LDS) in the branch
office.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=46
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 47
You are the network administrator for your company. You have configured connections on a
Layer 2 Tunneling Protocol/Internet Protocol Security (L2TP/IPsec)-based virtual private
network (VPN) so that employees who travel to client sites or other remote locations can
remotely access your company network. To enhance features and security, the company
upgrades all existing Windows Server 2003 servers to Windows Server 2008, and upgrades all
Windows XP client computers to Windows Vista. Which new encryption standards are
supported by Windows Server 2008 for L2TP/IPsecbased VPN connections and are enabled
by default? (Choose all that apply.)
A. Advanced Encryption Standard (AES) 128-bit
B. Advanced Encryption Standard (AES) 256-bit
C. 40-bit Microsoft Point-to-Point Encryption (MPPE)
D. 56-bit Microsoft Point-to-Point Encryption (MPPE)
E. Data Encryption Standard (DES) with Message Digest 5 (MD5)
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=47
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 48
You are the network administrator for ABC.com., a company that buys and sells event tickets
on the secondary market. Your company has three domains: ABC.com,
sportstickets.ABC.com and concerttickets.ABC.com. All of the domain controllers in the
sportstickets.ABC.com domain are running either Windows 2000 Server, Windows Server
2003, or Window Server 2008. You want to install a read-only domain controller (RODC) in
the sportstickets.ABC.com domain. What must you do to meet the minimum required
configuration? (Choose three. Each answer is part of a single solution.)
A. Upgrade all domain controllers in the sportstickets.ABC.com domain to Windows
Server 2008.
B. Replace at least one domain controller in the sportstickets.ABC.com domain with
Windows Server 2008 domain controllers.
C. Run adprep /rodcprep before you install the ROD
C.
D. Raise the domain level of the sportstickets.ABC.com domain to Windows Server
2008.
E. Raise the domain level of the sportstickets.ABC.com domain to Windows Server
2003.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=48
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 49
You are the systems administrator for ABC.com. The company s network contains an Internet
Information Services (IIS) server that runs Windows Server 2008. You are required to create a
new Web site for the marketing department. You want to create a Web site named
ABCMarketing with the Appcmd.exe command-line tool. The new Web site will have an site
ID of 3 and the Web site content will be stored in the C:\ABC\Marketing folder. Which are the
two parameters that you must include in the Appcmd add site command to be able to create the
Web site on the IIS server? (Choose two. Each correct answer presents a part of the solution.)
A. /name:ABCMarketing
B. /id:3
C. /physicalPath:C:\ABC\Marketing
D. /bindings:*:80:
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=49
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 50
You have recently joined ABC.com as a network administrator. The previous network
administrator was in the process of deploying Windows Server 2008 and was using IPv6 in the
network. He was designing the network in such a way that each department in the organization
would have a separate subnetted address prefix. He had assigned subnetted address prefixes to
four departments and one of the departments has the subnetted address prefix as
3FFF:2FFA:3B:AC00/55. There is no documentation which would tell you about the number
of subnetted address prefixes that can be created. While looking for information, you find that
the global address prefix assigned to the organization is 3FFF:2FFA:3B:A000/52. How many
more subnetted address prefixes can be assigned to the remaining departments?
A. 6
B. 4
C. 3
D. 2
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=50
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 51
You are a network administrator for ABC.com. You recently deployed Windows Server 2008
in your organization and configured the Windows Server 2008 as a terminal server. You want
client computers to access a specified application stored on the terminal server. The client
computers in the organization are using the following operating systems: Windows XP
Service Pack 1 (SP1) Windows XP Service Pack 2 (SP2) Windows Server 2003 Service Pack
1 (SP1) You want to ensure that all client computers are able to use the new Terminal Services
core functionality while accessing the application stored on the terminal server. How can you
do this with a minimum amount of administrative effort? (Choose all that apply.)
A. Upgrade client computers with Windows XP SP1 to SP2 and then install Remote
Desktop Connection 6.0.
B. Upgrade client computers with Windows Server 2003 SP1 to Windows Server 2003
SP2 and then install Remote Desktop Connection 6.0.
C. Install Remote Desktop Connection 6.0 on client computers running Windows
Server 2003 SP1.
D. Install Remote Desktop Connection 6.0 on client computers running Windows XP
SP1.
E. Upgrade client computers running Windows XP SP2 to Windows Vista.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=51
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 52
You are a server administrator for ABC.com. You have deployed Windows Server 2008 on all
server computers. A Windows Server 2008 computer is running high-priority applications. You
want to control the CPU allocation for the high-priority applications using custom policies.
What tool should you use?
A. File Server Resource Manager
B. Windows System Resource Manager
C. Server Manager
D. Reliability and Performance Monitor
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=52
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 53
You are the administrator of GlobeComm. You have five virtual servers installed on the
Windows Server 2008 host computer, 2K8SRV. The virtual servers are named 2K8SRV-1,
2K8SRV-2, 2K8SRV-3, 2K8SRV-4, and 2K8SRV-5. You enable the virtual DHCP server on
2K8SRV. The five virtual servers receive IP addresses in the 10.237.0.0/16 range. From
2K8SRV-5, you can ping address 10.237.0.1, but none of the next 10 addresses. What could
be the reason?
A. The DHCP scope has no DNS server configured
B. The DHCP scope is not authorized
C. The DHCP scope begins at 10.237.0.16
D. The DHCP scope begins at 10.237.0.1, but IP address 10.237.0.1 through
10.237.0.16 are excluded in the scope.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=53
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 54
You are the network administrator for your company. The network of the company consists of
a single Active Directory domain. The client computers on the network run Windows Vista.
The server computers on the network run Windows Server 2008. You are in the process of
creating a subscription to collect events on a computer named Srv6. You configure Srv6 to
function as a collector. You run the winrm quickconfig command on each source computer.
What should you do next?
A. Add the computer account of each source computer to the local Administrators group
on Srv6.
B. Add the computer account of Srv6 to the local Administrators group on each source
computer.
C. Add an account with administrator privileges to the Event Log Readers group on the
source computer.
D. Add a Windows Firewall exception for Remote Event Log Management on the
source computer.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=54
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 55
You are the licensing administrator for Dreamsuites. You are configuring the Key Management
Service (KMS) for your domain. You want to manually configure the clients to locate the KMS
server with a direct connection. The KMS server is configured to use port 2897 for activation.
How should you proceed?
A. Run cscript C:\windows\system32\slmgr.vbs -cdns on the KMS host.
B. Run cscript C:\windows\system32\slmgr.vbs -sdns on the KMS host.
C. Run cscript \windows\system32\slmgr.vbs -skms <MS_FQDN>[:2897] on each
client.
D. Run cscript \windows\system32\slmgr.vbs ckms on each client.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=55
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 56
You are the network administrator for your company. The company s network consists of a
single Active Directory domain that runs Windows Server 2008. You install Network Monitor
3.1 to monitor the status of all client computers accessing a Windows Server 2008 computer.
You want to configure Network Monitor to display Internet Protocol Version 4 (IPv4)
addresses and all Domain Name System (DNS) traffic only. What should you do?
A. Configure new aliases under the Aliases table.
B. Design a new display filter.
C. Design a new capture filter
D. Select the Enable Conversation check box.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=56
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 57
You are the systems administrator for several Windows Server 2008 computers on your
company s network. The network contains an Active Directory Federation Services (AD FS)
server. The AD FS server is configured to provide Web-based Single Sign-On (SSO)
capabilities to users in a partner organization. You want to test which claims the Federation
Service sends in AD FS security tokens. What should you do?
A. Create a claims-aware application.
B. Configure a resource partner.
C. Configure an account partner.
D. Configure a Windows NT token-based Web Agent.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=57
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 58
You work as a Network Administrator for ABC Inc. The company has a Windows Server 2008
network environment. The network is configured as a Windows Active Directory-based single
forest network. The management wants to deploy a custom business application on the
network. The application is developed by an independent software vendor (ISV) for your
company. The application will access the customer information from an existing database
through a set of Windows Communication Foundation (WCF) Web services. You need to
ensure that the application runs smoothly on your network environment. Which of the
following steps will you take to accomplish the task with the least amount of administrative
effort?
A. Deploy the application in a server running Windows Server 2008.
B. Install an Application Server role on a server running Windows Server 2008. During
the installation, add COM+ components to be installed on the server. Deploy the
application on this server.
C. Download and install the .NET Framework 3.5 on the operating system of a server
running Windows Server 2008. Deploy the application on this server.
D. Install the Application Server role on a server running Windows Server 2008.
Deploy the application on this server.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=58
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 59
You work as a Network Administrator for Net World International Inc. The company has a
large Windows Server 2008 network environment. It is configured as a Windows Active
Directory-based single domain single forest network. The functional level of the forest is
Windows Server 2008. You are required to install Windows Server 2008 Enterprise edition on
fifty new computers. You want to deploy the operating system through Windows Deployment
Services (WDS). Which of the following are the requirements for using WDS to deploy an
operating system? Each correct answer represents a part of the solution. Choose all that apply.
A. An NTFS partition must be present for storing the operating system image.
B. The DNS service must be installed on the network.
C. The WDS server must be a member of the Active Directory domain.
D. The WINS service must be installed on the network.
E. An authorized DHCP server must be present on the network.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=59
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 60
You work as a System Administrator for NewEra Inc. You have been given the task of
configuring an SMTP virtual server on a computer running Windows Server 2008. You need
to prevent unauthorized access to the server so that only users with authentic credentials are
able to access the SMTP virtual server. You also need to ensure that the sent message is
encrypted and all messages from this SMTP virtual server are routed through the specified
server. What can you do to accomplish the task? Each correct answer represents a complete
solution. Choose two.
A. Select the Basic Authentication method and TLS.
B. Select the Anonymous Access option and configure the Smart Host option to the
specified server.
C. Select the Basic Authentication method and configure the Masquerade Domain
setting on the Delivery tab.
D. Configure the Smart Host option on the Delivery tab to the specified server.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=60
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 61
You work as a System Engineer for ABC Inc. You have installed the IIS server role and
configured the server settings on a Windows Server 2008 computer. The Web designer of your
company wants you to take a backup of the IIS server so that it can be restored quickly in the
event of a failure. Which of the following actions will you perform to accomplish the task?
A. Use AppCmd.exe and run the AppCmd add backup command.
B. Use AppCmd.exe and run the AppCmd list backups command.
C. Copy the Web.Config file and save it.
D. Use AppCmd.exe and run the AppCmd list config command.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=61
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 62
You work as a Network Administrator for World Net Inc. The company has an Active
Directorybased network. There are 200 Windows 2008 servers and 2000 client computers on
the network. All client computers run Windows Vista Ultimate. Some of the users also connect
from their home. They use a dial-up network to access the company s network resources. The
management of the company wants to configure certificate services on the network. You are
required to accomplish the following tasks: Remote users should be able to use a certificate
authority (CA) of the company s network. Only the revocation checking data is needed to
verify individual certificate status requests, rather than making available information about all
revoked or suspended certificates. You take the following steps: Install a CA on the network.
Configure an Online Responder in the company s network. Which of the assigned tasks will
you be able to accomplish?
A. Both tasks will be accomplished.
B. Only the revocation checking data will be needed to verify individual certificate
status requests.
C. Remote users will be able to use the certificate authority (CA) of the company s
network.
D. None of the tasks will be accomplished.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=62
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 63
You work as a Network Administrator for ABC Inc. The company has a Windows Server 2008
network environment. The network is configured as a Windows Active Directory-based single
forest network. A server running Windows Server 2008 Core is configured as a DNS server.
Rick, your assistant who is performing some maintenance work on the server, issues the
following command: SC STOP DNS After the maintenance is over, he issues the following
command: SC CONTINUE DNS On executing the command, he receives the following error:
[SC]ControlService FAILED 1062: The service has not been started Which of the following
commands should Rick execute to resolve the issue? Each correct answer represents a
complete solution. Choose two.
A. NET START DNS
B. SC START DNS
C. SC RESUME DNS
D. NET RESUME DNS
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=63
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 64
You work as a Network Administrator for ABC Inc. The company has a Windows Server 2008
network environment. The network is configured as a Windows Active Directory-based single
forest network. You have installed Windows Server 2008 on a computer that already has
Windows Server 2003 installed. The computer will dual-boot with Windows Server 2003.
When you boot the server, by default, it boots to Windows Server 2003. You want the
computer to boot to Windows Server 2008 by default. Which of the following commands will
you execute to accomplish the task?
A. BCDEdit /default
B. BCDEdit /displayorder
C. BootCfg /bootsequence
D. BCDEdit /bootsequence
E. BootCfg /default
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=64
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 65
You work as a Network Administrator for ABC Inc. The company has a Windows Server 2008
network environment. The network is configured as a Windows Active Directory-based single
forest single domain network. You want to configure Network Access Protection (NAP) on
your network. You want that the clients connecting to the network must contain certain
configurations. - - - - Which of the following Windows components ensure that only clients
having certain health benchmarks access the network resources? Each correct answer
represents a part of the solution. Choose two.
A. TS Gateway
B. Windows Firewall
C. System Health Validators (SHV)
D. System Health Agents (SHA)
E. Terminal Service
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=65
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 66
You work as a Network Administrator for ABC Inc. The company has a Windows Server 2008
Active Directory-based single domain single forest network. You have configured a
demilitarized zone (DMZ) in the company s network, which will connect to the Internet. The
DMZ will hold three servers running the Windows Web Server 2008. These servers will be
configured as Web servers and will host Web pages that will be accessed only through the
Internet. The company s internal network is protected by a firewall. You are required to
accomplish the following tasks: Reduce the possibility of users to probe the Web servers and
find ports or services for attacking them. You should be able to administer the Web servers by
using the MMC IIS snap-in. You take the following steps to accomplish the required tasks:
Disable File and Print Sharing on the Web servers. Enable the IIS Admin Service on the Web
servers. What will happen after taking these steps?
A. Both the tasks will be accomplished.
B. You will be able to administer the Web servers by using the MMC IIS snap-in.
C. None of the tasks will be accomplished.
D. Security will be strengthened and the possibility of users to probe the Web servers
and find ports or services for attacking them will be reduced.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=66
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 67
You work as a System Administrator for ABC Tech Inc. You are responsible for managing the
company s Web servers that run on Windows Server 2008. A newly employed Web
Administrator of your company has created a Self Signed Certificate and installed it on the
servers. The company employees who access your Web site regularly report that they are able
to connect to the Web site using HTTP. However, when they try to connect using HTTPS, they
receive a warning message. Now you need to ensure that the company employees are able to
connect using both the HTTP and HTTPS protocols. What will you do to resolve the issue?
A. Reinstall the existing certificate.
B. Obtain and install an Internet Certificate on the Web server.
C. Change the SSL setting for the Web site.
D. Verify the Firewall setting and configure port 443.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=67
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 68
Your network is configured as a single Active Directory domain. You deploy a read-only
domain controller (RODC) in a branch office. You need to specify a user to manage the
RODC locally. The user should have permissions for that RODC only. You are currently
logged on at the RODC as a member of the Domain Admins group. What should you do?
A. Use the Appcmd command.
B. Use Active Directory Users and Computers to make the user a member of Domain
Admins.
C. Use the OCSetup command.
D. Use Active Directory Users and Computers and add the user to the Managed By tab.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=68
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 69
You have deployed Windows Server 2008 on all servers in the organization. The Web Server
role, Windows SharePoint services, and Network Policy and Access Services are installed on
the Windows Server 2008 servers. Your organization wants to allow computer and domain
administrators to remotely manage the Web sites and Web applications on each Web server by
using Internet Information Services (IIS) Manager. The user account that will be used to
delegate the permission to the domain administrators should be a member of which group to
achieve the objective?
A. Web application administrator group
B. Web server administrator group
C. Web site administrator group
D. Local administrators group
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=69
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 70
You need to provide remote users with access to file resources on your internal network. Your
network includes a perimeter network on which Web servers supporting both encrypted and
unencrypted communication are deployed. The network also includes a Network Address
Translation (NAT) server. You need to ensure that all data passed over the Internet is
encrypted. Remote users must be able to connect to the internal resources without having to
configure a virtual private network (VPN). You need to be able to control which users have
access to internal resources and which resources they can access. What should you do?
A. Deploy a Terminal Services Gateway (TS Gateway) in the internal network.
B. Deploy a Microsoft Internet Security and Acceleration (ISA) Server in the perimeter
network.
C. Deploy a Microsoft Internet Security and Acceleration (ISA) Server in the internal
network.
D. Deploy a Terminal Services Gateway (TS Gateway) in the perimeter network.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=70
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 71
You are configuring a Terminal Services Gateway server for your organization. The server will
provide remote users with access to select internal file resources on your network. All
communications between the server and Terminal Services clients will be encrypted.
Communication must pass through firewalls both at the client end and at the server end of the
connection. You need to configure support for encrypted communication. You are using a
certificate from a trusted third-party Certificate Authority (CA) for this purpose. You should
not install any components that are not required by the solution and should keep network
changes to a minimum. What should you do?
A. Deploy a Network Address Translation (NAT) server and install the certificate on
the NAT server.
B. Install the certificate on the Terminal Services Gateway server.
C. Install the certificate on the firewalls at each end of the connection.
D. Deploy a Network Policy Server (NPS) and install the certificate on the NPS server.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=71
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 72
You are configuring a server running Windows Server 2008 and Internet Information Services
(IIS). You are deploying a Web site and need to be able to restrict access to the
SalesTotals.aspx page to members of the Managers group by adding an authorization rule in
IIS Manager. You need to enable the necessary feature. What should you do?
A. Enable ASP.NET URL Authorization.
B. Enable Digest Authentication.
C. Enable URL Authorization.
D. Enable Basic Authentication.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=72
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 73
Your company s network consists of a server running Windows Server 2008 and 50 Microsoft
Windows Vista computers installed in various departments. You are implementing Windows
Deployment Services (WDS) with both Deployment Server (DS) and Transport Server (TS) in
Windows Server 2008 to set up a remote application installation. You are creating a capture
boot image using split images in WDS server. You need to add the split images to create a
capture boot image. What should you do?
A. Combine all split images into a single .swm file.
B. Add all split images to the default boot.wim file.
C. Add all split images one by one to the WDS server.
D. Combine all split images into a single .wim file.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=73
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 74
When installing the very first domain controller in a new forest, which one of the following
must be installed during the Active Directory installation?
A. DHCP
B. DNS
C. WINS
D. Global Catalog
E. RODC
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=74
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 75
You are the administrator for a nationwide company with over 5,000 employees. Your main
office has approximately 4,500 employees, while the company�s ten remote offices have 50
users residing in each. You are often unaware of the physical security in place at these offices.
However, since there is a fairly sizable amount of users at each office, you must provide them
with directory services. What is the BEST option to use for directory services when security is
often an unknown?
A. Lightweight Directory Services
B. Read-only domain controllers
C. Active Directory Federation Services
D. Active Director Rights Management Services
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=75
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 76
You are the administrator for a nationwide company with over 5,000 employees. Your director
tells you your company has just signed into a partnership with another organization, and that
you will be responsible for ensuring that authentication can occur between both organizations
without the need for additional sign-on accounts. Your boss mentions that the partner has a
variety of Directory Services installed throughout their organizations. Which of the following
can Active Directory Federation Services NOT connect to?
A. Lightweight Directory Services
B. Windows Server 2003 Directory Services
C. Windows Server 2003 R2 Directory Services
D. All of the above
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=76
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 77
Two users, Dave and Dixine, wish to communicate privately. Dave and Dixine each own a key
pair consisting of a public key and a private key. A public key was used to encrypt a message
and the corresponding private key was used to decrypt. What is the major security issue with
this scenario?
A. Private keys are revealed during the initial transaction.
B. Information encrypted with a public key can be decrypted too easily with out the
private key.
C. An attacker can intercept the data mid-stream, and replace the original signature with
his or her own, using his private key.
D. None of the Above.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=77
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 78
You are administrating a large hierarchal government environment in which a trust model
needs to be established. The company does not want external CA�s involved in the
verification process. Which of the following is the best trust model deployment for this
scenario?
A. A hierarchal first party trust model.
B. A third party single CA trust model.
C. A first party single CA trust Model.
D. None of these will meet the needs of the company.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=78
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 79
You are responsible for performing backups on the DCs on your network. Your boss has
requested that you conduct system state backups to DVD. How do you accomplish this?
A. Run the Windows Server Backup Wizard, select System State Backup, and set your
target to the DVD drive
B. Run the Windows Server Backup Wizard, select a local drive as the target, and then
copy the system state backup to the DVD drive
C. Run the wbadmin.exe command with the start systemstatebackup command and
target it to the DVD drive
D. Run the wbadmin.exe command with the start systemstatebackup command, set the
target to a local fixed drive, and then copy the system state backup to a DVD
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=79
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 80
Your company, mycompany.com, is merging with the yourcompany.com company. The details
of the merger are not yet complete. You need to gain access to the resources in the
yourcompany.com company before the merger is completed. What type of trust relationship
should you create?
A. Forest trust
B. Shortcut trust
C. External trust
D. Tree Root trust
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=80
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 81
You have outgrown your single Web server and it is time to expand. You have installed IIS 7
on another Web server and moved your content to a networkattached storage device. The next
step is to mirror the configuration on the second server. What feature will help you manage the
configuration across both of your servers?
A. AppCmd�s Backup and Restore functions
B. Configuration Inheritance
C. Shared Configuration
D. Windows PowerShell
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=81
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 82
An ISP has contacted you for guidance on enabling their Web hosting clients� access to their
content using FTP. After reviewing their plans you have determined that they want an easytomaintain solution that minimizes the maintenance involved with maintaining the FTP access.
What solution should you recommend?
A. Set up the FTP Site to use a User Name Directory
B. Set up User Isolation using Virtual Directories that link to the Web site
C. Bind the FTP Site to the Web Site in IIS Manager
D. Create a standalone FTP Site for each client that points to the location of the Web
content
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=82
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 83
You have several terminal servers and want to connect to each server�s console session
remotely, from within a single utility. Which graphical terminal services utility can you use to
accomplish this?
A. The Remote Desktop Connection version 6 utility
B. The Remote Desktops Snap-in
C. The Remote Desktop Connection Web utility
D. The Terminal Services Client Configuration Manager utility
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=83
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 84
Your company has a server named TSWA that has the Terminal Services Web Access server
role and the Terminal Services Gateway server role. The company has 25 Microsoft Windows
XP SP2 remote client computers in the domain. You deploy a new application on the TSWA
server. You make the new application available to users by publishing a Microsoft Windows
Installer package that has a GPO. You discover that you can launch the new application from
the TS2 server and the TSWA server by using the Terminal Services Web Access Web page.
However, the users are unable to launch the application. You need to ensure that the users are
able to launch the application. What do you need to do?
A. Install the RDP 6.1 client on the client computers.
B. Deactivate the Network Level Authentication option on the Server2 server and the
Server3 server.
C. Install the Internet Explorer 7.0 browser application on the client computers.
D. Configure the Terminal Services Resource Access Policy (TSRAP) to include the
Server3 server only.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=84
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 85
You need to set up a network in the lab for a training class. You want to isolate the lab network
from the rest of the corporate network so students don�t inadvertently do something that takes
the entire network down. What IP addressing method would you use?
A. Private network addressing
B. Public network addressing
C. Network Address Translation
D. Subnet isolation through subnet mask
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=85
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 86
You are troubleshooting a network system that has applied a number of static routes. After
reviewing the information used to make these routes, you determine that an error was made
while entering the routes into one of the gateways. Which of the following choices best
defines your actions as a result of this error?
A. No effect because the Static Routes act the same way dynamic ones do, and will auto
correct itself.
B. An immediate change must be made because there is no fault tolerance in regards to
static routing.
C. A system reboot should be performed to clear all persistent routes.
D. None of the above.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=86
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 87
The remediation server could run Windows 2008 Server or Windows 2003 Server software. To
remediate Windows Vista, Windows 2008 Server or Windows XP Service Pack 3�what other
software would the remediation server need to run?
A. Windows Server Update Services (WSUS)
B. Network Protection Services (NPS)
C. Routing and Remote Access Services (RRAS)
D. Windows Security Health Validator (WSHV)
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=87
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 88
You work as an administrator at ABC.com. The ABC.com network has an Active Directory
domain named ABC.com. All servers on the ABC.com network have Windows Server 2008
R2 installed and all workstations have Windows 7 installed. ABC.com has a File server,
named ABC-SR13, which contains three hard disks of equal size. One of the disks hosts the
operating system. You have been instructed to make sure that ABC-SR13 is be configured to
support a RAID-5 volume. Which of the following is TRUE with regards to RAID-5
volumes? (Choose two.)
A. The minimum amount of disks required is 3 disks, including the disk hosting the
operating system.
B. The minimum amount of disks required is 3 disks, excluding the disk hosting the
operating system.
C. You have to make use of basic disks.
D. You have to make use of dynamic disks.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=88
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 89
You work as the network administrator at ABC.com. The ABC.com network has a single
forest. The forest functional level is set at Windows Server 2008. The ABC.com network has
a Microsoft SQL Server 2005 database server named ABC-DB04 that hosts the Active
Directory Rights Management Service (AD RMS). You try to access the Active Directory
Rights Management Services administration website but received an error message stating:
"SQL Server does not exist or access is denied." How can you access the AD RMS
administration website?
A. You need to restart the Internet Information Server (IIS) service and the
MSSQLSVC service on ABC-DB04.
B. You need to install the Active Directory Lightweight Directory Services (AD LDS)
on ABC-DB04.
C. You need to reinstall the AD RMS instance on ABC-DB04.
D. You need to reinstall the SQL Server 2005 instance on ABC-DB04.
E. You need to run the DCPRO command on ABC-SR04
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=89
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 90
You work as an administrator at ABC.com. The ABC.com network has an Active Directory
domain named ABC.com. All servers on the ABC.com network have Windows Server 2008
R2 installed and all workstations have Windows 7 installed. ABC.com has its headquarters in
London, and satellite offices in Paris, New York, and Milan. Each of these satellite offices are
configured as a separate Active Directory site. Each of these Active Directory sites has a ReadOnly Domain Controller (RODC) deployed and configured. You have been instructed to make
sure that user account cached credentials for each site are hosted by the Read-Only Domain
Controller (RODC) for that particular site.
A. You should consider including a GPO on all Read-Only Domain Controllers
(RODCs).
B. You should consider advising users to reconfigure their credentials.
C. You should consider installing a standard domain controller in each site.
D. You should consider including a replication policy on all RODC computer accounts.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=90
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 91
You work as an enterprise administrator at ABC.com. The ABC.com network has a forest with
a domain named ABC.com. The forest functional level is set at Windows Server 2003.
ABC.com has two divisions namely Chicago and a Dallas. The ABC.com network has three
Windows Server 2003 domain controllers named ABC-DC01, ABC-DC02 and ABC-DC03
that are located in the Chicago office. You want to install a read-only domain controller
(RODC) named ABC-DC04 in the Dallas office. Which of the following actions should you
take?
A. You should consider upgrading ABC-DC01 to Windows Server 2008 and then
execute the adprep /rodcprep command on ABC-DC01.
B. You should consider configuring the Dallas network as a separate site and upgrading
ABCDC04 to Windows Server 2008.
C. You should consider upgrading all domain controllers to Windows Server 2008 and
having the forest functional level set to Windows Server 2008.
D. You should consider configuring the Dallas network as a child domain with the
domain functional level set at Windows Server 2008.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=91
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 92
You work as an administrator at ABC.com. The ABC.com network has an Active Directory
domain named ABC.com. All servers on the ABC.com network have Windows Server 2008
R2 installed and all workstations have Windows 7 installed. You have configured one of
ABC.com s servers to run the Active Directory Rights Management Services (AD RMS)
server role. You are then instructed to reconfigure the AD RMS user account password.
Subsequent to the reconfiguration, you are instructed to make sure that AD RMS makes use of
the reconfigured password. Which of the following actions should you take?
A. You should consider making use of the AD RMS console.
B. You should consider making use of the Active Directory Users and Computers
console.
C. You should consider making use of the MMC console.
D. You should consider making use of the SCOM console.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=92
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 93
You work as an administrator at ABC.com. The ABC.com network has an Active Directory
domain named ABC.com. All servers on the ABC.com network have Windows Server 2008
R2 installed and all workstations have Windows 7 installed. ABC.com has an Active
Directory Rights Management Services (AD RMS) cluster configured. Numerous custom
policy templates exist, which are updated on a regular basis. It has come to your attention that
certain employees are waiting more than a month before the updated policy templates are
available to them. ABC.com has released a policy that the updated policy templates should
take no longer than 7 days to reach all employees. Which of the following actions should you
take?
A. You should consider reconfiguring the registry on ABC.com s AD RMS servers.
B. You should consider reconfiguring the registry on the employee s workstations.
C. You should consider reconfiguring the replication schedule.
D. You should consider making those employees members of the AD RMS Service
Group.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=93
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 94
You work as an administrator at ABC.com. The ABC.com network has an Active Directory
domain named ABC.com. All servers on the ABC.com network have Windows Server 2008
R2 installed and all workstations have Windows 7 installed. ABC.com has its headquarters in
London, and a satellite office in Paris. The Paris office has a read-only domain controller
(RODC) configured. You have been instructed to assign permissions to the administrator in the
Paris office that will allow him to logon to the RODC to install updates. The administrator
should not, however, have access to any other domain controllers. You want to achieve your
goal with as little administrative effort as possible. Which combination of the following
actions should you take? (Choose two.)
A. You should consider executing the ntdsutil.exe command.
B. You should consider executing the dsmgmt.exe command.
C. You should consider modifying the NTDS Site Settings.
D. You should consider making use of the Local Roles option.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=94
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 95
You work as an administrator at ABC.com. The ABC.com network has an Active Directory
domain named ABC.com. All servers on the ABC.com network have Windows Server 2008
R2 installed and all workstations have Windows 7 installed. You have recently configured a
read-only domain controller (RODC) on the ABC.com network. You are then instructed to
make sure that an administrator, named Mia Hamm, has the minimum rights assigned to her
for managing the new RODC. Which of the following actions should you take?
A. You should consider making use of the Dsamain tool from the command-line.
B. You should consider making use of the Ntdsutil from the command-line.
C. You should consider making use of the Netsh from the command-line.
D. You should consider making use of the Dsmgmt from the command-line.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=95
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 96
You work as an administrator at ABC.com. The ABC.com network has a single Active
Directory domain named ABC.com. All servers, including domain controllers, on the
ABC.com network have Windows Server 2008 R2 installed. ABC.com has its headquarters in
London, and a satellite office in Paris. The London office has a writable domain controller
installed, while the Paris office has a read-only domain controller (RODC) installed. An
administrator, named Andy Reid, is based in the Paris office. Andy Reid has informed you that
his password is being cached on the RODC in the Paris office. He does not have the required
permissions to rectify it. You need to rectify the problem without assigning Andy Reid further
permissions. Which of the following actions should you take?
A. You should consider altering the properties of the Default Domain Policy Group
Policy object (GPO)
B. You should consider altering the user account properties of the RODC
C. You should consider configuring a Password Setting object (PSO).
D. You should consider altering the computer account properties of the RODC
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=96
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 97
You work as an administrator at ABC.com. The ABC.com network has a single Active
Directory domain named ABC.com. All servers, including domain controllers, on the
ABC.com network have Windows Server 2008 R2 installed. ABC.com has its headquarters in
London, and a satellite office in Paris. The two offices are configured as separate Active
Directory sites. The Paris site hosts a read-only domain controller (RODC), named ABCDC04. You have been given the responsibility of administering ABC-DC04. As soon as
ABC.com employee, named Mia Hamm, accesses her workstation, you notice that her
password has not been saved on ABC-DC04. You are required to rectify this. Which of the
following actions should you take?
A. You should consider assigning Mia Hamm elevated permissions.
B. You should consider verifying whether Mia Hamm�s user account has been added
to the correct group.
C. You should consider verifying whether the computer account for ABC-DC04 has
been configured properly.
D. You should verify whether Mia Hamm�s user account has been locked out.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=97
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 98
You work as an administrator at ABC.com. The ABC.com network has an Active Directory
domain named ABC.com. All servers on the ABC.com network have Windows Server 2008
installed. The ABC.com network has multiple domain controllers that can be written to, as
well as multiple read-only domain controllers (RODCs). When you are instructed to configure
a new Windows Server 2008 R2 server as a RODC, you are also instructed to use as little
administrative effort as possible. You must be able to join the new RODC to the ABC.com
domain. Which of the following commands should you execute FIRST?
A. adprep.exe /rodcprep
B. adprep.exe /forestprep
C. Dcpromo.exe
D. adprep.exe /domainprep
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=98
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 99
You work as an administrator at ABC.com. All servers on the ABC.com network have
Windows Server 2008 R2 installed. You have just completed the installation of a new server,
named ABC-SR13, which is configured as an Active Directory Federation Services (AD FS)
federation server. You then requested new certificates for ABC-SR13 and now need to make
sure that the new certificates are useable on ABC-SR13. Which of the following actions
should you take NEXT?
A. You should consider importing the certificates into the computer s certificate store.
B. You should consider importing the certificates into the domain s certificate store.
C. You should consider importing the certificates into the forest s certificate store.
D. You should consider importing the certificates into the global certificate store.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=99
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 100
You work as an administrator at ABC.com. All servers on the ABC.com network have
Windows Server 2008 R2 installed. The ABC.com network contains a server, named ABCSR01, which is configured as an Active Directory Federation Services (AD FS) server. ABCSR01 is currently provides AD FS authentication for a ABC.com application. You have
recently deployed AD FS 2.0 to a server named ABC-SR07. You have been instructed to
configure AD FS authentication for the application via ABC-SR07. Which of the following
actions should you take?
A. You should consider having a relying party trust configured on ABC-SR01.
B. You should consider having a relying party trust configured on ABC-SR07.
C. You should consider having a relaying provider trust configured on ABC-SR01.
D. You should consider having a relaying provider trust configured on ABC-SR07.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=100
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 101
You work as an administrator at ABC.com. All servers on the ABC.com network have
Windows Server 2008 R2 installed. The ABC.com network contains two servers named
ABC-SR01, and ABC-SR02. ABC-SR01 runs Active Directory Federation Services (AD FS)
2.0 You have been tasked with the deployment of AD FS 2.0 to ABC-SR02. Your deployment
solution requires the token-signing certificate to be exported from ABC-SR01. The certificate
should then be imported to ABC-SR02. You choose to export the certificate using the
Personal Information Exchange PKCS #12 (.pfx) file format. Which of the following
statements are TRUE with regards to this certificate file format? (Choose all that apply.)
A. It allows the secure storage of certificates, private keys, and all certificates in a
certification path.
B. It is unable to export a certificate�s private key.
C. It only allows the storage of a single certificate.
D. It is the only format that can be used to export a certificate and its private key.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=101
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 102
You work as an administrator at ABC.com. All servers on the ABC.com network have
Windows Server 2008 R2 installed. The ABC.com network contains three servers named
ABC-SR01, and ABC-SR02. ABC-SR01 runs Active Directory Federation Services (AD FS)
2.0, and forms part of ABC.com�s AD FS farm. You have just completed the installation of
Active Directory Federation Services (AD FS) 2.0 on ABC-SR02, and would like to make it a
member of the AD FS farm. Which of the following actions should you take?
A. You should execute the fsconfig command-line tool from ABC-SR01.
B. You should execute the fsconfig command-line tool from ABC-SR02.
C. You should execute the Dfsrmig command-line tool from ABC-SR01.
D. You should execute the Dfsrmig command-line tool from ABC-SR02.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=102
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 103
You work as an administrator at ABC.com. The ABC.com network has a single Active
Directory forest named ABC.com. All servers on the ABC.com network have Windows Server
2008 R2 installed and all workstations have Windows 7 installed. A custom attribute has been
included in the ABC.com forest s schema for ABC.com s user objects. You have been
instructed to make sure that the custom attribute value of 750 ABC.com user accounts are
reconfigured using as little administrative effort as possible. Which of the following actions
should you take?
A. You should consider making use of the Rsdiag command-line tool
B. You should consider making use of the repadmin.exe command-line tool.
C. You should consider making use of the ntdsutil command-line utility.
D. You should consider making use of the Ldifde command-line tool.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=103
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 104
You work as an administrator at ABC.com. The ABC.com network has a single Active
Directory forest named ABC.com. You have previously configured Windows Server 2008 R2
as the functional level of the ABC.com forest. ABC.com has a network application, named
ABCApp13, which is configured to make use of a user account named ABCService. All user
account passwords are configured to be renewed every sixty days. You receive a report stating
that ABCApp13 stops running when sixty days have passed. After refreshing the password,
ABCApp13 executes normally. You want to prevent ABCApp13 from failing in the future,
without having to change the password renewal settings. Which of the following actions
should you take?
A. You should execute the Set-ADForestMode cmdlet.
B. You should execute the Set-ADServiceAccount cmdlet.
C. You should execute the New-Object cmdlet.
D. You should execute the Restore-ADObject cmdlet.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=104
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 105
You work as an administrator at ABC.com. The ABC.com network consists of a single Active
Directory domain named ABC.com. All servers on the ABC.com network have Windows
Server 2008 R2 installed and all workstations have either Windows XP Professional or
Microsoft Windows Vista installed. The CIO has requested that the deletion of registry keys
be audited for every ABC.com server. You, therefore, decide to navigate to the Advanced
Audit Policy Configuration settings. Which of the following settings should be altered?
(Choose all that apply.)
A. The Process Tracking settings.
B. The Object Access settings.
C. The System Events settings.
D. The Global Object Access Auditing settings.
E. The Detailed Tracking settings.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=105
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 106
You work as an administrator at ABC.com. The ABC.com network has an Active Directory
domain named ABC.com. After configuring Windows Server 2008 R2 as ABC.com�s forest
functional level, you are instructed to activate the Active Directory Recycle Bin. Which of the
following actions should you take?
A. You should execute the Restore-ADObject cmdlet.
B. You should execute the Enable-ADOptionalFeature cmdlet.
C. You should execute the New-Object cmdlet.
D. You should execute the Set-ADForestMode cmdlet.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=106
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 107
You work as an administrator at ABC.com. The ABC.com network consists of a single Active
Directory domain named ABC.com. You have installed Windows Server 2008 R2 on all
domain controllers on the ABC.com network. You have received instruction to have the
Default Domain Controllers Policy Group Policy object (GPO) restored to the Windows
Server 2008 R2 default configuration. You decide to make use of the dcgpofix.exe commandline tool. Which of the following actions should you take?
A. You should specify the /target:dc parameter.
B. You should specify the /target:domain parameter.
C. You should specify the /target:both parameter.
D. You should not specify the /target parameter.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=107
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 108
You work as an administrator at ABC.com. The ABC.com network consists of a single Active
Directory domain named ABC.com. The ABC.com network contains a Windows Server 2008
R2 server, named ABC-SR35. ABCSR35 is configured as an enterprise root certification
authority (CA). You are informed that the private key of one of the certificates that was
published to a Web server has to be retrieved. You want to make sure that you are able to do
so. Which of the following actions should you take?
A. You should log on to the Web server, and update the CEP Encryption certificate
template.
B. You should log on to ABC-SR35, and update the CEP Encryption certificate
template.
C. You should log on to ABC-SR35, and export the private key using the certutil
command-line utility.
D. You should log on to the Web server, and export the private key using the certutil
commandline utility.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=108
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 109
You work as an administrator at ABC.com. The ABC.com network consists of a single Active
Directory domain named ABC.com. All servers on the ABC.com network, including domain
controllers, have Windows Server 2008 installed and all workstations have Windows 7
installed. You have set Windows Server 2003 as the functional level of the ABC.com domain.
You have been tasked with joining a new Windows Server 2008 R2 server, named ABC-SR21,
to the ABC.com domain. You are also instructed to perform this task while ABC-SR21 is
offline. Which of the following actions should you take?
A. You should execute the djoin command-line tool from ABC-SR21, and then also
execute the djoin command-line tool from a ABC.com workstation.
B. You should execute the netdom command-line tool from ABC-SR21, and then also
execute the djoin command-line tool from a ABC.com workstation.
C. You should consider upgrading ABC.com�s domain controllers to Windows Server
2008 R2, and then also executing the djoin command-line tool from a ABC.com
workstation.
D. You should consider upgrading ABC.com�s domain controllers to Windows Server
2008 R2, and then also execute the netdom command-line tool from ABC-SR21.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=109
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 110
You work as an administrator at ABC.com. The ABC.com network consists of a single Active
Directory domain named ABC.com. All servers on the ABC.com network have Windows
Server 2008 R2 installed. The ABC.com network has a Windows Server 2008 R2 domain
controller, named ABC-DC01, configured. When you receive instructions to relocate
ABC.com�s Active Directory log files, you decide to perform the task from the command
line. Which of the following actions should you take?
A. You should run the dfsrmig tool from the command-line.
B. You should run the netdom tool from the command-line.
C. You should run the Fsutil tool from the command-line.
D. You should run the Ntdsutil tool from the command-line.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=110
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 111
You work as an administrator at ABC.com. The ABC.com network co of an Active Directory
domain named ABC.com. All servers on the ABC.com network have Windows Server 2008
R2 installed. When ABC.com acquires a new server, named ABC-SR35. After installing
Windows Server 2008 R2 on ABC-SR35, you deploy it. You have not, however, linked ABCSR35 to ABC.com�s internal network. You receive instructions to configure ABC-SR35 to
join the ABC.com domain prior to linking it to ABC.com�s internal network. Which
combination of the following actions should you take? (Choose two.)
A. You should execute the djoin command-line utility, with /provision parameter from a
computer that is joined to the ABC.com domain.
B. You should execute the djoin command-line utility, with /requestodj parameter from
a computer that is joined to the ABC.com domain.
C. You should execute the djoin command-line utility, with /requestodj parameter from
ABC-SR35.
D. You should execute the djoin command-line utility, with /provision parameter from
ABC-SR35.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=111
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 112
You work as an administrator at ABC.com. The ABC.com network consists of a single Active
Directory domain named ABC.com. All servers on the ABC.com network, including domain
controllers, have Windows Server 2008 R2 installed. The ABC.com network contains multiple
domain controllers. Subsequent to making changes to the Active Directory schema, you
execute the repadmin command with the /showrepl parameter. Which of the following
describes the reason for executing this command?
A. To force replication of the schema changes between the domain controllers.
B. To prevent replication of the schema changes between the domain controllers.
C. To check whether the schema changes has been replicated to all domain controllers.
D. To schedule replication of the schema changes between the domain controllers.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=112
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 113
You work as an administrator at ABC.com. The ABC.com network consists of a single Active
Directory domain named ABC.com. All servers on the ABC.com network, including domain
controllers, have Windows Server 2008 R2 installed. All ABC.com�s workstations have
Windows 7 installed. The ABC.com network contains several domain controllers. You have
run the Winrm quickconfig command from the command prompt on each of the domain
controllers. Which of the following describes the reason for running this command?
A. It compiles a list of account logon failures that take place in the ABC.com domain
for each domain controller.
B. It compiles a list of account logon failures that take place in the ABC.com domain
for each workstation.
C. It compiles a single consolidated list of all account logon failures that take place in
the ABC.com domain.
D. It compiles a single consolidated list of all account logon failures that take place on
your workstation.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=113
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 114
You work as an administrator at ABC.com. The ABC.com network consists of a single Active
Directory domain named ABC.com. All servers on the ABC.com network, including domain
controllers, have Windows Server 2008 R2 installed. ABC.com has an existing policy that
requires the replication of the group policy template files to be checked regularly. Which of
the following actions should you take?
A. You should run the dfsutil command-line tool periodically.
B. You should run the Fsutil command-line tool periodically.
C. You should run the netdom command-line tool periodically.
D. You should run the Ntfrsutl command-line tool periodically.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=114
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 115
You work as an administrator at ABC.com. The ABC.com network consists of a single Active
Directory domain named ABC.com. All servers on the ABC.com network, including domain
controllers, have Windows Server 2008 R2 installed. The ABC.com network contains a
domain controller, named ABC-DC01. While performing routine maintenance ABC-DC01,
you decide to see to what size the Active Directory database has grown. Which of the
following actions should you take?
A. You should consider accessing the Network Monitor to generate a new capture.
B. You should consider creating and configuring event log subscriptions
C. You should navigate to the ntds.dit file in the ntds sub folder of the systemroot folder
and analyze the file�s properties.
D. You should consider making use of the Active Directory Diagnostics data collector
set.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=115
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 116
You work as an administrator at ABC.com. The ABC.com network consists of a single Active
Directory domain named ABC.com. All servers on the ABC.com network, including domain
controllers, have Windows Server 2008 R2 installed. You have been instructed to configure
the logon events of all ABC.com domain controllers to be forwarded to your Windows 7
workstation, named ABC-SR07. ABC.com has also informed you that they are planning to
deploy more domain controllers the following week. To minimize administrative effort, you
want to make sure that any domain controllers deployed in the future is added to the
subscription dynamically. Which of the following actions should you take? (Choose all that
apply.)
A. You should consider configuring source-initiated event subscriptions from ABCSR07.
B. You should consider configuring collector-initiated event subscriptions from ABCSR07.
C. You should consider configuring the Event Forwarding node via a Group Policy
object (GPO) connected to the Domain Controllers organizational unit (OU).
D. You should consider configure the Event Forwarding node via a Group Policy object
(GPO) connected to the Domain Users organizational unit (OU).
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=116
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 117
You work as an administrator at ABC.com. The ABC.com network consists of a Active
Directory domain named ABC.com. You have installed Windows Server 2008 Standard on all
domain controllers in the ABC.com domain. You also configured Windows Server 2003 as the
functional level of the domain. You then acquired and configured a certification authority
(CA). The ABC.com network contains three servers named ABC-SR01, ABC-SR02, and
ABC-SR03. ABC-SR01 runs Windows Server 2003, and is configured as the Enterprise root
CA. ABC-SR02 runs Windows Server 2008, and is configured as the Enterprise subordinate
CA. ABC-SR03 runs Windows Server 2008 R2 Web Server, and is configured as a Web
Server. You have received instruction from the CIO to install the Active Directory Certificate
Services (AD CS) Certificate Enrollment Web Service on the ABC.com network. Which of
the following actions should you take?
A. You should consider executing the netdom utility from the command prompt.
B. You should consider executing the dfsutil utility from the command prompt.
C. You should consider executing the dfsrmig.exe file.
D. You should consider having the updates for the Windows Server 2008 R2 Active
Directory Schema installed.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=117
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 118
You work as the network administrator at ABC.com. The ABC.com network has a domain
named ABC.com. All servers on the ABC.com network have Windows Server 2008 R2
installed and all workstations have Windows 7 installed. During the course of the day a
ABC.com user named Rory Allen complains that he receives an error message stating that his
account has expired when he attempts to authenticate to the ABC.com domain from his
workstation. Which of the following actions should you take to allow Rory Allen to log on to
the ABC.com domain from his workstation?
A. You should consider reducing the account lockout duration in the default domain
policy.
B. You should consider resetting Rory Allen s user account.
C. You should consider setting Rory Allen s user account to never expire.
D. You should consider resetting the computer account for Rory Allen s workstation.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=118
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 119
You work as an administrator at ABC.com. The ABC.com network has an Active Directory
domain named ABC.com. All servers, including domain controllers, on the ABC.com network
have Windows Server 2008 R2 installed and all workstations have Windows 7 installed.
ABC.com has an existing written security policy that states that auditing must be configured to
record any modifications made to the Managed By attribute on group objects located in any
organizational unit (OU). ABC.com then releases an amended security that maintains most of
the old policy, but states that any modifications made only to the Description attribute on all
group objects in an OU, named TestOU13, should be logged. You have to make sure that the
amended policy is enforced. Which of the following actions should you take?
A. You should consider making use of the auditpol.exe from the command line.
B. You should consider having the auditing entry for TestOU13 reconfigured.
C. You should consider having auditing configured for the Authenticated Users group
D. You should consider having the Audit process tracking option activated.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=119
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 120
You work as an administrator at ABC.com. The ABC.com network has an Active Directory
domain named ABC.com. All servers on the ABC.com network, including domain controllers,
have Windows Server 2008 R2 installed and all workstations have Windows 7 installed. A
domain controller, named ABC-DC02, runs the Windows Server Backup feature. When
ABCDC02 experiences problems, you decide to make use of a current backup file to restore
ABCDC02 non-authoritatively. Which of the following actions should you take?
A. You should start ABC-DC02 in Directory Services Restore Mode.
B. You should start ABC-DC02 in safe mode.
C. You should then carry out a critical volume restore by running the WBADMIN
command.
D. You should then carry out a critical volume restore by running the ntbackup
command.
E. You should then carry out a critical volume restore from the Windows Server
Backup snap-in.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=120
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 121
You work as an enterprise administrator at ABC.com. The ABC.com network has a domain
named ABC.com. All servers on the ABC.com network run Windows Server 2008 R2. The
Finance department of ABC.com contains an organizational unit named King Finance. In turn,
King Finance contains a separate OU for ABCWorkstations, ABCGroups and ABCClients. At
present KingFinance is backed up every evening. During routine monitoring you discover that
a newly appointed administrator deleted ABCGroups. You receive an instruction from the CIO
to ensure that the organizational unit is reinstated. This process should not impact on
ABCClients and ABCWorkstations. Which of the following actions should you take?
A. You should consider executing a non-authoritative restore of ABCGroups.
B. You should consider executing a non-authoritative restore of KingFinance.
C. You should consider executing an authoritative restore of KingFinance.
D. You should consider executing an authoritative restore of ABCGroups.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=121
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 122
You work as the network administrator at ABC.com. The ABC.com network has a domain
named ABC.com. All servers on the ABC.com network have Windows Server 2008 R2
installed and all workstations have Windows 7 installed. The ABC.com network has a domain
controller named ABC-DC01. What action should you take to determine if any unsuccessful
logon attempts occurred on ABCDC01?
A. You should open the Netlogon.log file on ABC-DC01.
B. You should open the Event Viewer on ABC-DC01.
C. You should configure auditing of object access on ABC-SR01.
D. You should open the System.log file on ABC-DC01.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=122
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 123
You work as the network administrator at ABC.com. The ABC.com network has a domain
named ABC.com. All servers on the ABC.com network have Windows Server 2008 R2
installed and all workstations have Windows 7 installed. ABC.com has its headquarters in
London and branch offices in Lisbon, Madrid and Paris. Each office is structured as a separate
site named London, Lisbon, Madrid and Paris. Due to company growth, ABC.com has hired
150 additional employees that are distributed among the four sites. You create user accounts
for the new ABC.com users. However, the new users complain that when they attempt to
logon to the domain they receive an error message stating that their username or password is
incorrect. What action should you take to allow the new ABC.com users to log on to the
domain?
A. You should consider resetting the user accounts for the new users.
B. You should consider adding the new users to the Remote Desktop Users group.
C. You should consider running the repadmin /replicate command.
D. You should consider install Global Catalog servers at the Lisbon, Madrid and Paris
sites.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=123
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 124
You work as the network administrator at ABC.com. The ABC.com network has a domain
named ABC.com. All servers on the ABC.com network have Windows Server 2008 R2
installed and all workstations have Windows 7 installed. The ABC.com network has two
domain controllers named ABC-DC01 and ABC-DC02. You have been tasked with verifying
that the replication of Active Directory data between ABC-DC01 to ABC-DC02 is successful.
Which of the following actions should you take?
A. You should execute the RepAdmin command on ABC-SR02.
B. You should execute the Dnscmd command on ABC-SR02.
C. You should execute the Dsmod command on ABC-SR02.
D. You should execute the RepMonitor command on ABC-SR02.
E. You should execute the Rsdiag command on ABC-SR02.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=124
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 125
You work as the network administrator at ABC.com. All servers on the ABC.com network,
including domain controllers, have Windows Server 2008 R2 installed and all workstations
have Windows 7 installed. The ABC.com has a server named ABC-DC01 which is
configured as a domain controller. The workstations are using Lightweight Directory Access
(LDAP). What action should you take to determine which LDAP clients are consuming the
most CPU resources on ABC-DC01?
A. You should open System Information and view the Hardware Resources node.
B. You should open Task Manager and view the Processes tab.
C. You should open the Active Directory Diagnostics Data Collector and view of the
Active Directory report.
D. You should open the Resource Monitor opened and view the CPU performance data.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=125
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 126
You work as an enterprise administrator at ABC.com. The ABC.com network has a domain
named ABC.com. All servers on the ABC.com network run Windows Server 2008. A new
ABC.com domain controller management policy states that replication errors need to be
logged to a central server. Which of the following actions should you take?
A. You should consider having the RepMonitor configured for central logging.
B. You should consider having the System Performance data collector set is started on
each domain controller.
C. You should consider having event log subscriptions created on each domain
controller.
D. You should consider having the RepAdmin Diagnostics data collector started on
each domain controller.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=126
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 127
You work as an administrator at ABC.com. The ABC.com network consists of a single domain
named ABC.com. All servers on the ABC.com network have Windows Server 2008 R2
installed and all workstations have Windows 7 installed. You have been instructed to deploy a
certification authority (CA) server on the ABC.com network. You then install and configure
the Active Directory Certificate Services server role as an Enterprise Root CA. Which of the
following is TRUE with regards to this scenario? (Choose all that apply.)
A. The certification authority can issue certificates automatically.
B. The Certificate Enrollment policy will be modified.
C. The CA server is integrated with Active Directory Domain Services.
D. The Enterprise Trust settings will be modified.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=127
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 128
You work as a systems administrator at ABC.com. The ABC.com network has a forest with a
domain named ABC.com. All servers on the ABC.com network have Windows Server 2008
R2 installed and all workstations have Windows 7 installed. You are responsible for managing
a stand-alone server named ABC-SR05. You are in the process of configuring ABC-SR05 as
an Enterprise certification authority (CA). You now want to assign the Active Directory
Certificate Services (AD CS) role to ABC-SR05. However, you notice that you cannot select
the Enterprise CA option. What action should you take configuring ABC-SR05 as an
Enterprise CA?
A. Your best option would be to first configure ABC-SR05 as a Standalone CA.
B. Your best option would be to first have ABC-SR05 joined to the ABC.com domain.
C. Your best option would be to first install Internet Information Services (IIS) on
ABC-SR05.
D. Your best option would be to first assign the Active Directory Certificate Services
(AD CS) role to ABC-SR05.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=128
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 129
You work as an administrator at ABC.com. The ABC.com network has an Active Directory
domain named ABC.com. All servers on the ABC.com network have Windows Server 2008
R2 installed and all workstations have Windows 7 installed. The ABC.com network has a
server, named ABC-SR19, which has the Active Directory Certificate Services (AD CS)
server role configured. You have been tasked with making sure that the length of time it takes
to download a certificate revocation list (CRL) is kept to a minimum. Which of the following
actions should you take?
A. You should consider installing an Online Responder, and then making the necessary
configurations.
B. You should consider modifying the replication schedule.
C. You should consider having the Intermediate CA certificate imported into the
Trusted Root Certification Authorities on ABC-SR19.
D. You should consider having ABC-SR19 configured as an Issuing Certification
Authority.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=129
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 130
You work as the network administrator at ABC.com. The ABC.com network has a domain
named ABC.com. All servers on the ABC.com network have Windows Server 2008 R2
installed and all workstations have Windows 7 installed. The ABC.com network has a server
named ABC-SR02 that functions as stand-alone Certificate Authority (CA). You want to track
any modifications made to the configuration and security settings of the ABC-SR02. Which of
the following actions should you take?
A. You should configure auditing in the Certification Services console.
B. You should add ABC-SR02 to the ABCCertificates group.
C. You should configured the Audit object Access setting on ABC-SR02.
D. You should join ABC-SR02 to the ABC.com domain.
E. You should enable the Authority Information Access (AIA) extension on ABCSR02.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=130
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 131
You work as the network administrator at ABC.com. The ABC.com network has a domain
named ABC.com. All servers on the ABC.com network have Windows Server 2008 R2
installed. You are responsible for managing two servers ABC-SR01 and ABC-SR02. They are
setup with the following configuration. ABC-SR01 running Enterprise Root certificate
authority (CA) ABC-SR02 running Online Responder role service Which of the steps must
you perform for configuring the Online Responder to be supported on ABC-SR01?
A. You should enable the Dual Certificate List extension on ABC-SR01.
B. You should ensure that ABC-SR01 is a member of the CertPublishers group.
C. You should import the OCSP Response Signing certificate to ABC-SR01.
D. You should enable the Authority Information Access (AIA) extension on ABCSR01.
E. You should run the CERTSRV command on ABC-SR01.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=131
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 132
You work as the network administrator at ABC.com. The ABC.com network has a domain
named ABC.com. All servers on the ABC.com network have Windows Server 2008 R2
installed and all workstations have Windows 7 installed. The ABC.com network has a server
named ABC-SR03 that functions as an Enterprise Root certification authority (CA). ABC.com
issues a new security policy that states that only a ABC.com CEO named Kara Lang must be
allowed to sign code. What action should you take to implement this policy? (Choose all that
apply.)
A. You should publish a list of trusted certificate authorities and only grant Kara Lang
the necessary permissions to access the Trusted Publishers list.
B. You should apply the code signing template to ABC-SR03 and configure the
template only grant Kara Lang the necessary permissions to request code signing
certificates.
C. You should import the Online Certificate Status Protocol (OCSP) Response Signing
certificate to ABC-SR03 and only grant Kara Lang the necessary permissions to
distribute code signing certificates.
D. You should add ABC-SR03 to the CertPublishers group and only grant Kara Lang
the necessary permissions to manage ABC-SR03.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=132
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 133
You work as an administrator at ABC.com. The ABC.com network has a single Active
Directory domain named ABC.com. All servers on the ABC.com network have Windows
Server 2008 R2 installed and all workstations have Windows 7 installed. The ABC.com
domain employs an Enterprise Root certification authority (CA), as well as an Enterprise
Intermediate certification authority (CA). When the Enterprise Intermediate certification
authority certification authority (CA) reaches its expiration date, you are tasked with making
sure that a new one is distributed to all workstations in the ABC.com domain. Which of the
following actions should you take?
A. You should consider having the new certificate imported into the Trusted
Certification Store, which is located in the Default Domain group policy object.
B. You should consider having the new certificate imported into the Issuing
Certification Store, which is located in the Default Domain group policy object.
C. You should consider having the new certificate imported into the Intermediate
Certification Store, which is located in the Default Domain Controllers group policy
object,
D. You should consider having the new certificate imported into the Intermediate
Certification Store, which is located in the Default Domain group policy object.
E. You should consider having the new certificate imported into the Issuing
Certification Store, which is located in the Default Domain Controllers group policy
object,
F. You should consider having the new certificate imported into the Trusted
Certification Store, which is located in the Default Domain Controllers group policy
object,
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=133
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 134
You work as the enterprise administrator at ABC.com. The ABC.com network has a domain
named ABC.com that operates at the Windows Server 2008 R2. How can you configure the
network so that it allows the users of ABC.com to have multiple password policies?
A. You should consider creating multiple class schema objects in the Schema console.
B. You should consider creating multiple Group Policy objects in the Group Policy
Management console.
C. You should consider creating multiple Password Setting objects in the ADSI Edit
console.
D. You should consider creating multiple passwords in Active Directory Users and
Computers.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=134
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 135
You work as an enterprise administrator at ABC.com. The ABC.com network has a domain
named ABC.com. The ABC.com network has a Windows Server 2008 R2 computer named
ABC-SR03 that functions as an Enterprise Root certificate authority (CA). A new ABC.com
security policy requires that revoked certificate information should be available for
examination at all times. What action should you take adhere to the new policy?
A. This can be accomplished by having a list of trusted certificate authorities published
to the ABC.com domain.
B. This can be accomplished by having the Online Certificate Status Protocol (OCSP)
responder implemented.
C. This can be accomplished by having the OCSP Response Signing certificate
imported.
D. This can be accomplished by having the Startup Type of the Certificate Propagation
service set to Automatic.
E. This can be accomplished by having the computer account of ABC-SR03 added to
the ABCCertificates group.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=135
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 136
You work as an administrator at ABC.com. The ABC.com network is made up of a single
Active Directory domain named ABC.com. All servers on the ABC.com network have
Windows Server 2008 R2 installed and all workstations have Windows 7 installed. The
ABC.com network is configured in a two tier public key infrastructure (PKI). This PKI
infrastructure configuration hosts an offline Root certification authority (CA), as well as an
online Issuing certification authority (CA). ABC.com users need to have the ability to enroll
new certificates. Which combination of the following actions should you take? (Choose two.)
A. You should have the Certificate Revocation List (CRL) on the Root certification
authority (CA) renewed.
B. You should have the Certificate Revocation List (CRL) on the Intermediate CA
renewed.
C. You should have the Certificate Revocation List (CRL) on the Issuing CA renewed.
D. The Certificate Revocation List (CRL) should then be copied to the CertEnroll folder
on the Issuing certification authority (CA).
E. The Certificate Revocation List (CRL) should then be copied to the
SysternCertificates folder in the users profile.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=136
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 137
You work as the network administrator at ABC.com. The ABC.com network has a domain
named ABC.com. All servers on the ABC.com network have Windows Server 2008 R2
installed and all workstations have Windows 7 installed. The ABC.com network has two
servers named ABC-SR01 and ABC-SR02. ABC-SR01 - Enterprise Root certificate authority
(CA). ABC-SR02 - Hosts the Online Responder role. What step you can perform to make sure
that ABC-SR02 is issuing the certificate revocation lists (CRL).
A. You should enable the Dual Certificate List extension on ABC-SR02.
B. You should ensure that ABC-SR02 is a member of the CertPublishers group.
C. You should import the enterprise root CA certificate and the OCSP Response
Signing certificate.
D. You should enable the Authority Information Access (AIA) extension on ABCSR02.
E. You should run the CERTSRV command on ABC-SR02.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=137
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 138
You work as an administrator at ABC.com. The ABC.com network has an Active Directory
domain named ABC.com. All servers, including domain controllers, on the ABC.com network
have Windows Server 2008 R2 installed. ABC.com has its headquarters in London, and a
satellite office in Milan. A writable domain controller named ABC-DC01 is located in
London, and a read only domain controller (RODC) named ABC-DC02 is located in Milan.
All domain controllers in the ABC.com domain are configured as DNS servers. The DNS zone
for the ABC.com zone is Active Directory-integrated, and configured o replicate to all domain
controllers. You have received instructions from the CIO to make sure that the DNS server
role is removed from ABC-DC02, and that no DNS records are replicated to it. Which of the
following actions should you take?
A. You should consider changing the ABC.com zone�s replication scope.
B. You should consider running the repadmin.exe /syncall /force command.
C. You should consider running the dnslint.exe /ql command.
D. You should consider altering the ABC.com zone�s zone transfer settings.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=138
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 139
You work as an administrator at ABC.com. The ABC.com network has a single Active
Directory domain named ABC.com. All workstations on the ABC.com network have
Windows 7 Enterprise installed. The functional level of both the domain and the forest is set at
Windows Server 2003. The ABC.com domain has two domain controllers, named ABC-DC01
and ABC-DC02. The ABC.com domain also has two DNS servers, named ABC-SR01 and
ABC-SR02. ABC-DC01 and ABC-SR01 has Windows Server 2008 installed, while ABCDC02 and ABC-SR02 has Windows Server 2008 R2 installed. The ABC.com zone is hosted
by both ABC-SR01 and ABC-SR02. You have been instructed to configure the use of
DNSSEC to secure all names in the ABC.com zone. Which of the following actions should
you take?
A. You should start by setting Windows Server 2008 as the functional level of
ABC.com�s forest.
B. You should start by setting Windows Server 2008 as the functional level of the
ABC.com domain.
C. You should start by configuring all domain controllers to run Windows Server 2008.
D. You should start by configuring ABC-SR01 to run Windows Server 2008 R2.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=139
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 140
You work as an administrator at ABC.com. ABC.com has an Active Directory domain named
ABC.com. All servers on the ABC.com network have Windows Server 2008 R2 installed and
all workstations have Windows 7 installed. You have configured a child domain, named
us.ABC.com, which has two domain controllers named ABC-DC05 and ABC-DC06. ABCDC05 and ABC-DC06 are configured as DNS servers. You then create a DNS delegation.
Which of the following describes a reason for doing this?
A. It makes sure that users in the ABC.com domain are able to access servers in the
us.ABC.com child domain via their User Principal Name (UPN).
B. It makes sure that users in the ABC.com domain are able to access servers in the
us.ABC.com child domain via their fully qualified domain names (FQDNs).
C. It makes sure that users in the ABC.com domain are prevented from accessing
servers in the us.ABC.com child domain via their User Principal Name (UPN).
D. It makes sure that users in the ABC.com domain are prevented from accessing
servers in the us.ABC.com child domain via their fully qualified domain names
(FQDNs).
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=140
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 141
You work as an administrator at ABC.com. The ABC.com network has an Active Directory
domain named ABC.com. All servers, including domain controllers, on the ABC.com network
have Windows Server 2008 R2 installed. The ABC.com domain has two domain controllers
named ABC-DC01 and ABC-DC02. ABC-DC01 is configured to contain a primary zone for
ABC.com, while ABC-DC02 is configured to contain the secondary zone. After modifying
the zone to an Active Directory-integrated zone on ABC-DC01, you change the settings of the
zone to only allow dynamic updates that are secure. You have been instructed to make sure
that secure dynamic updates to the ABC.com zone are allowed on ABC-DC02. Which of the
following actions should you take?
A. You should consider creating an additional DNS application directory partition on
ABC-DC02.
B. You should consider reconfiguring the zone hosted on ABC-DC02 as an Active
Directoryintegrated zone.
C. You should consider resetting the forwarders on ABC-DC01.
D. You should consider refreshing the zone hosted by ABC-DC02.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=141
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 142
You work as an administrator at ABC.com. The ABC.com network has a single Active
Directory domain named ABC.com. All servers, including domain controllers, on the
ABC.com network have Windows Server 2008 R2 installed. The ABC.com domain�s DNS
zone is configured as an Active Directory-integrated zone. You have been tasked with
verifying that DNS records used Active Directory replication is registered accurately. Which
of the following actions should you take?
A. You should consider executing the netsh.exe command-line tool.
B. You should consider executing the dnslint.exe command-line tool.
C. You should consider executing the dnscmd.exe command-line tool.
D. You should consider executing the dfsutil command-line tool.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=142
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 143
You work as an administrator at ABC.com. The ABC.com network has an Active Directory
forest with two domains, named eu.ABC.com, and us.ABC.com. Each domain has two
domain controllers that have Windows Server 2008 R2 installed. The domain controllers in the
eu.ABC.com domain are named ABC-DC01 and ABC-DC02, and are each configured to host
the eu.ABC.com DNS zone. The domain controllers in the us.ABC.com domain are named
ABC-DC03 and ABC-DC04, and are each configured to host the us.ABC.com DNS zone. The
zones have been configured as Active Directory-integrated zones. You have received
instructions to make sure that data from the eu.ABC.com domain is accessible on ABC-DC03.
Which of the following actions should you take?
A. You should consider creating an additional DNS application directory partition on
ABC-DC01.
B. You should configure the eu.ABC.com zone hosted by ABC-DC01 to be moved to
the built-in forest directory partition of eu.ABC.com.
C. You should configure the eu.ABC.com zone hosted by ABC-DC03 to be moved to
the built-in forest directory partition of eu.ABC.com.
D. You should consider refreshing the zone hosted by ABC-DC03.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=143
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 144
You work as an administrator at ABC.com. ABC.com has an Active Directory domain named
ABC.com. All servers on the ABC.com network have Windows Server 2008 installed. You
have recently created a custom application directory partition to host a DNS zone. You have
also deployed a new domain controller, named ABC-DC02, on the ABC.com network. You
have been instructed to make sure that the DNS zone is replicated to ABC-DC02. Which of the
following actions should you take?
A. You should consider making use of the Ntdsutil command from the command-line.
B. You should consider making use of the Dsamain from the command-line.
C. You should consider making use of the Repadmin from the command-line.
D. You should consider making use of the Dnscmd tool from the command-line.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=144
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 145
You work as an administrator at ABC.com. The ABC.com network has a single Active
Directory domain named ABC.com. The domain controllers on the ABC.com network have
been configured to have Windows Server 2008 R2 installed. You have also configured
ABC.com to have Windows Server 2003 as its functional level. You have been instructed to
configure a Windows Server 2008 computer, named ABC-SR01, as a domain controller in the
ABC.com domain. Which of the following actions should you take?
A. You should consider running dcpromo.exe with the /unattend parameter.
B. You should consider running dcpromo.exe with the /adv parameter.
C. You should raise the functional level of the ABC.com domain to Windows Server
2008.
D. You should raise the functional level of ABC.com�s forest to Windows Server 2008
R2.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=145
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 146
You work as an administrator at ABC.com. ABC.com has an Active Directory forest that
includes a domain named ABC.com. All servers on the ABC.com network have Windows
Server 2008 R2 installed and all workstations have Windows 7 installed. You have been
instructed to configure an incoming external trust relationship between the ABC.com domain
and a domain in a different forest. Which of the following is TRUE with regards to creating an
incoming external trust?
A. It allows users in the ABC.com domain to access resources in the Active Directory
domain outside of your forest.
B. It allows users in the ABC.com domain to more quickly access resources in another
domain in your forest.
C. It allows users in ABC.com�s forest to access resources in all domains in the other
forest.
D. It allows users in the ABC.com domain to access resources in a Kerberos realm.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=146
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 147
You work as an administrator at ABC.com. ABC.com has an Active Directory domain named
ABC.com. All servers on the ABC.com network have Windows Server 2008 R2 installed and
all workstations have Windows 7 installed. ABC.com has its headquarters in London and
several satellite offices across the world. The various offices have been configured to host
numerous subnets. You have been instructed to make sure that Active Directory subnet objects
can be generated with as little administrative effort as possible. Which of the following
actions should you take?
A. You should consider making use of Set-ADObject cmdlet.
B. You should consider making use of Rename-ADObject cmdlet.
C. You should consider making use of New-ADObject cmdlet.
D. You should consider making use of Move-ADObject cmdlet.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=147
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 148
You work as an administrator at ABC.com. ABC.com has an Active Directory domain named
ABC.com. All servers on the ABC.com network have Windows Server 2008 R2 installed and
all workstations have Windows 7 installed. ABC.com has its headquarters in London and
several branch offices across the world. All offices are configured as separate sites. You have
accessed Active Directory Sites and Services and plan to make changes to the NTDS Settings.
Which of the following is available for modification?
A. Global group caching.
B. Universal group membership caching.
C. Domain group membership caching.
D. Local group membership caching.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=148
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 149
You work as an administrator at ABC.com. ABC.com has an Active Directory domain named
ABC.com. All servers on the ABC.com network have Windows Server 2008 R2 installed and
all workstations have Windows 7 installed. ABC.com�s network comprises multiple sites.
You have been accessed Active Directory Sites and Services, and modified the IP properties to
have site link bridging disabled. Which of the following describes a reason for doing this?
A. Disables replication for the entire network.
B. Forces the domain controllers in each site to only replicate to domain controllers in
contiguous sites.
C. Allows domain controllers to replicate to any domain controllers on the network.
D. Prevents the domain controllers in each site from replicating to domain controllers in
contiguous sites.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=149
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 150
You work as an administrator at ABC.com. ABC.com has an Active Directory domain named
ABC.com. All servers on the ABC.com network have Windows Server 2008 R2 installed and
all workstations have Windows 7 installed. ABC.com has its headquarters in New York, and
branch offices in London, Paris, and Milan. The Paris office contains workstations that are
configured to make use of IPv6 only. You have been instructed to make sure that the
workstations in the Paris branch authenticate via the domain controller in the Paris office.
Which of the following actions should you take?
A. You should consider creating an extranet topology.
B. You should consider having Active Directory subnet objects created.
C. You should consider disabling the site links.
D. You should consider disabling replication.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=150
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 151
You work as an administrator at ABC.com. ABC.com has an Active Directory domain named
ABC.com. All servers on the ABC.com network have Windows Server 2008 installed.
ABC.com has its headquarters in London and an office in Miami. The two offices are
configured as separate Active Directory sites. Both sites host two domain controllers each.
ABC-DC01 and ABCDC02 in the London site, and ABC-DC03 and ABC-DC04 in the Miami
site. You need to create a site link between the two sites. Which of the following actions
should you take?
A. You should consider accessing the Active Directory Sites and Services Snap-In.
B. You should consider accessing the Active Directory Federated Services Snap-In.
C. You should consider accessing the Active Directory Schema Snap-In.
D. You should consider accessing the Users and Computers MMC Snap-In.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=151
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 152
You work as an administrator at ABC.com. The ABC.com network has a single Active
Directory domain named ABC.com. You have configured ABC.com to have Windows Server
2003 as its functional level. The ABC.com network has numerous domain controllers
configured. Fifty percent of the domain controllers have Windows Server 2008 standard
installed, while the rest has Windows Server 2008 R2 installed. You would like to make use
of Distributed File System Replication (DFSR) to guarantee SYSVOL replication. Which of
the following actions should you take?
A. You should consider executing dsamain.exe
B. You should consider executing dcdiag.exe.exe
C. You should consider executing dsamain.exe
D. You should consider having the functional level of the ABC.com domain raised to
Windows Server 2008.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=152
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 153
You work as an administrator at ABC.com. ABC.com has an Active Directory domain named
ABC.com. All servers on the ABC.com network have Windows Server 2008 R2 installed and
all workstations have Windows 7 installed. You have been instructed to create a custom
attribute that should be linked to ABC.com�s User objects. Subsequent to completing this
task, you are required to configure the custom attribute to replicate to ABC.com�s global
catalog. To accomplish this task, you want to modify the properties of the custom attribute�s
class schema attribute. Which of the following actions should you take?
A. You should consider accessing the AD FS snap-in.
B. You should consider accessing the Active Directory Users and Computers MMC
Snap-In.
C. You should consider accessing the Active Directory Sites and Services snap-in.
D. You should consider accessing the Active Directory Schema snap-in
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=153
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 154
You work as an administrator at ABC.com. ABC.com has an Active Directory domain named
ABC.com. All servers on the ABC.com network have Windows Server 2008 R2 installed. The
ABC.com network has two servers named ABC-SR13 and ABC-SR14. Both of these servers
are running Active Directory Lightweight Directory Services (AD LDS). You have been
instructed to make sure that an instance of AD LDS is replicated from ABC-SR13 to ABC-
SR14. Which of the following actions should you take?
A. You should consider making use of the Dsmod command-line tool.
B. You should consider making use of the netdom command-line tool.
C. You should consider creating an AD LDS service user account.
D. You should consider making use of the Ldp.exe command.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=154
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 155
You work as an administrator at ABC.com. The ABC.com network has an Active Directory
domain named ABC.com. All servers on the ABC.com network have Windows Server 2008
R2 installed. The ABC.com network has a server, named ABC-SR01. After generating an
Active Directory Lightweight Directory Services (AD LDS) instance, named ABCInstance,
you receive instructions to generate an extra AD LDS application directory partition in
ABCInstance using a command-line tool. Which of the following actions should you take?
A. You should execute the dsdbutil command-line tool.
B. You should execute the Fsutil command-line tool.
C. You should execute the Dsmod command-line tool.
D. You should execute the Ldp.exe command-line tool.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=155
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 156
You work as an administrator at ABC.com. The ABC.com network has an Active Directory
domain named ABC.com. All servers on the ABC.com network have Windows Server 2008
R2 installed. The ABC.com network has a server, named ABC-SR01. After generating an
Active Directory Lightweight Directory Services (AD LDS) instance, named ABCInstance,
you make use of ADSI Edit to link up to ABCInstance. You are tasked with creating user
objects in ABCInstance. When you open the Create Object wizard to carry out this task,
however, you find that the User object class is not present. It is imperative that you are able to
create user objects in ABCInstance Which of the following actions should you take?
A. You should consider creating a new instance.
B. You should consider reconfiguring ABCInstance�s schema.
C. You should execute the Set-ADServiceAccount cmdlet.
D. You should execute the Restore-ADObject cmdlet.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=156
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 157
You work as an administrator at ABC.com. ABC.com has a single Active Directory domain
named ABC.com. All servers on the ABC.com network have Windows Server 2008 R2
installed. The ABC.com network has a server, named ABC-SR01. You have been tasked with
mounting an Active Directory Lightweight Directory Services (AD LDS) snapshot from ABCSR01. Which of the following actions should you take?
A. You should execute the netdom command-line tool.
B. You should execute the dsmgmt command-line tool.
C. You should execute the dsdbutil command-line utility.
D. You should execute the ntdsutil command-line utility.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=157
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 158
You work as an administrator at ABC.com. The ABC.com network has an Active Directory
domain named ABC.com. The ABC.com network contains three servers named ABC-SR01,
ABC-SR02, and ABC-SR03. ABC-SR01 is configured as a domain controller, and has
Windows Server 2008 installed. ABCSR02 is configured as an Enterprise root certification
authority (CA), and has Windows Server 2008 R2. ABC-SR03 is configured with the Network
Device Enrollment Service (NDES), and has Windows Server 2008 R2 installed. ABC.com
has released a written policy that requires the use of the MD5 hash algorithm for all device
certificate requests. You have been tasked with enforcing the policy. Which of the following
actions should you take?
A. You should consider executing the Ntdsutil.exe tool from the command-line on
ABC-SR02.
B. You should have the value of the
HKLM\Software\Microsoft\Cryptography\MSCEP\EncryptionTemplate registry key
defined on ABC-SR03.
C. You should have the value of the
HKLM\Software\Microsoft\Cryptography\MSCEP\UseSinglePassword\UseSinglePass
word registry key defined on ABC-SR03.
D. You should have the value of the
HKLM\Software\Microsoft\Cryptography\MSCEP\ HashAlgorithm\HashAlgorithm
registry key defined on ABC-SR03.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=158
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 159
You work as an administrator at ABC.com. The ABC.com network has two Active Directory
forest, named eu.ABC.com and us.ABC.com, of which each has a single domain configured.
Windows Server 2008 R2 has been set as the functional level for both forests. To permit users
from both forests to enroll user certificates automatically, you have configured the Active
Directory Certificate Services (AD CS) in the eu.ABC.com forest. ABC.com releases a written
policy that requires all users in the us.ABC.com forest to be in possession of a user certificate
from the eu.ABC.com certification authority (CA). Which of the following actions should you
take?
A. You should consider reconfiguring the settings of the Issuing Certification Authority.
B. You should consider reconfiguring the settings of the Intermediate Certification
Authority.
C. You should reconfigure the Certificate Enrollment policy by accessing the Default
Domain Policy.
D. You should reconfigure the Certificate Enrollment policy by accessing the Default
Domain Controllers OU.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=159
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 160
You work as an administrator at ABC.com. The ABC.com network has an Active Directory
domain named ABC.com. All servers on the ABC.com network have Windows Server 2008
R2 installed and all workstations have Windows 7 installed. The ABC.com network has a
server, named ABC-SR13, which is set up to be an enterprise root certification authority (CA).
ABC.com has a Web site that authenticates by making use of x.509 certificates, and makes use
many-to-one mapping. After severing ties with an outside company, ABC.com instructs you to
revoke the certificate that was supplied to them. After carrying out the task, you are instructed
to make sure that the outside company is unable to log on to ABC.com�s Web site. Which of
the following actions should you take?
A. You should consider making us of the certutil.exe command-line tool, with the �crl
parameter.
B. You should consider making us of the certutil.exe command-line tool, with the URLCache parameter.
C. You should consider making us of the certutil.exe command-line tool, with the delreg parameter.
D. You should consider making us of the certutil.exe command-line tool, with the verifykeys parameter.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=160
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 161
You work as the network administrator at ABC.com. The ABC.com network has a domain
named ABC.com. All servers on the ABC.com network have Windows Server 2008 R2
installed and all workstations have Windows 7 installed. ABC.com has its headquarters
located in London and branch office located in Paris. A WAN link connects the two offices.
ABC.com makes use of a computer in the London office named ABC-SR01 configured as the
DNS server hosting a standard primary zone named internal.ABC.com. You install a computer
named ABC-SR02 in the Paris office and configure it as a DNS server. ABC.com wants the
DNS service on ABC-SR02 to provide name resolution, even when the WAN connection is
down. Which of the following actions should you take?
A. You should consider having ABC.com converted to an Active Directory-integrated
zone on ABC-SR01.
B. You should consider having a standard primary zone configured on ABC-SR02.
C. You should consider having DNS on ABC-SR01 configured to forward requests to
ABC-SR02.
D. You should consider creating a delegation on ABC-SR02.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=161
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 162
You work as an administrator at ABC.com. The ABC.com network has an Active Directory
domain named ABC.com. All servers on the ABC.com network have Windows Server 2008
R2 installed and all workstations have Windows 7 installed. The ABC.com network includes
two domain controllers, named ABC-DC01 and ABC-DC02, which have been configured as
DNS servers. The DNS zones hosted on ABC-DC01 and ABC-DC02 are configured to be
Active Directory-integrated zones that permit dynamic updates. You are instructed to make
sure that old records are automatically deleted from the zone. Which of the following actions
should you take?
A. You should consider disabling dynamic updates for the zones.
B. You should consider having aging and scavenging enabled.
C. You should consider converting the Active Directory-integrated zones to standard
primary zones.
D. You should consider converting the Active Directory-integrated zones to stub zones.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=162
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 163
You work as the network administrator at ABC.com. The ABC.com network has a forest with
a domain named ABC.com. ABC.com has its headquarters in London and branch office in
Paris. All domain controllers on the ABC.com network have Windows Server 2008 R2
installed and function as DNS servers. Two domain controllers named ABC-DC01 and ABCDC02 are located in the London office while a Read-only Domain Controller (RODC) named
ABC-DC03 is located in the Paris office. All three domain controllers are configured as Active
Directory-integrated zones that support secure updates only. What action should you take to
allow ABC-DC03 to support dynamic DNS updates?
A. You should consider having ABC-DC03 the Read-only Domain Controller (RODC)
reconfigured to allow dynamic updates.
B. You should consider having the dnscmd/ZoneResetType command run at the
command prompt on ABC-DC03.
C. You should consider having an active partition created and configured on ABCDC01 to store the Active Directory-integrated zones.
D. You should consider having Active Directory Domain services uninstalled in ABCDC03. You should then re-install Active Directory as a writeable domain controller.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=163
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 164
You work as an administrator at ABC.com. The ABC.com network has an Active Directory
forest, which has two domains named eu.ABC.com and us.ABC.com. All servers, including
domain controllers, on the ABC.com network have Windows Server 2008 R2 installed and all
workstations have Windows 7 installed. The domain controllers are also DNS servers. A
server, named ABC-SR02, is configured to host the standard primary zone for eu.ABC.com.
ABC.com has requested that all domain controllers in the forest have the ability to resolve
names for the eu.ABC.com zone. Which combination of the following actions should you
take? (Choose two.)
A. You should configure a conditional forwarder on one of ABC.com�s domain
controllers.
B. You should make sure that conditional forwarder is configured to replicate to all
DNS servers in the eu.ABC.com domain only.
C. You should consider having a stub zone created on one of the domain controllers.
D. You should make sure that the conditional forwarder is Configure to replicate to all
DNS servers in ABC.com�s forest.
E. You should make sure that conditional forwarder is configured to replicate to all
DNS servers in the us.ABC.com domain only.
F. You should consider having a stub zone created on ABC-SR02.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=164
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 165
You work as the network administrator at ABC.com. The ABC.com network has a domain
named ABC.com. All servers on the ABC.com network have Windows Server 2008 R2
installed. The ABC.com Network contains a server which is configured as: Domain Controller
DNS Server What option can you sure to ensure tracking of all DNS queries received by ABCSR01?
A. You should consider having automatic logging for recursive queries enabled in the
DNS Manager Console on ABC-SR01.
B. You should consider having debug logging enabled in the DNS Manager Console on
ABCSR01.
C. You should consider having event logging configured in the DNS Manager Console
on ABCSR01.
D. You should consider having system event logging configured in the Even Viewer on
ABCSR01.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=165
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 166
You work as the network administrator at ABC.com. The ABC.com network has a forest with
a domain named ABC.com. All servers on the ABC.com network have Windows Server 2008
R2 installed and all workstations have Windows 7 installed. The current ABC.com DNS zone
is stored on the ForestDnsZones Active directory partition. You have received instruction from
ABC.com to include a domain controller named ABC-SR01 with a standard primary zone for
uk.ABC.com. ABC.com has additionally requested all company domain controllers be
configured appropriately to resolve names for uk.ABC.com. Which of the following actions
should you take?
A. You should consider having a PTR record added in the ABC.com zone
B. You should consider having a Host A record added in the ABC.com zone
C. You should consider having a delegation created in the ABC.com zone.
D. You should consider having the properties of SOA record changed in the
uk.ABC.com zone.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=166
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 167
You work as the network administrator at ABC.com. The ABC.com network has a forest with
a domain named ABC.com. The ABC.com network has four Windows Server 2008 R2
domain controllers named ABC-DC01, ABC-DC02, TESKING-DC03 and ABC-DC04. All
four domain controllers run the DNS Server role and are part of an Active Directory integrated
zone. The ABC.com network also has a UNIX-based DNS server named ABC-SR05. One of
the administrators in your department created an Active Directory-integrated zone for
ABC.com. ABC.com has recently acquired a During the course of the business day you receive
an instruction from the CIO to configure the Windows Server 2008 R2 organization.
ABC.com plans to make use of this configuration to permit zone transfers of the ABC.com
zone to ABC-SR01. What action should you take to ensure that zone transfers to ABC-SR05
can occur?
A. You should consider installing Active Directory Lightweight Directory Services (AD
LDS) on ABC-SR05.
B. You should consider running the dcpromo command on ABC-SR05.
C. You should consider having a stub zone created for ABC-SR05.
D. You should consider configuring BIND secondaries.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=167
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 168
You work as a systems administrator at ABC.com. The ABC.com network has a domain
named internal.ABC.com. All servers on the ABC.com network have Windows Server 2008
R2 installed and all workstations have Windows 7 installed. ABC.com has acquired another
company, named Weyland Industries, that contains an Active Directory domain named
internal.weyland.com. The transfer of internal DNS zone data is not allowed for zones outside
the Weyland Industries network. During the course of the day you receive an instruction from
the CIO to grant employees of ABC.com the necessary name resolution permissions for
resolving names from intranet.weyland.com. Which of the following actions should you take?
A. You should consider putting intranet.weyland.com in the Active Directory of
ABC.com.
B. You should consider having a subzone established for the intranet.weyland.com
domain.
C. You should consider reconfiguring the intranet.weyland.com domain as a standard
primary zone.
D. You should consider setting conditional forwarding for the intranet.weyland.com
domain.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=168
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 169
You work as the network administrator at ABC.com. The ABC.com network has a domain
named ABC.com with a perimeter network. All domain controllers on the ABC.com network
have Windows Server 2008 R2 installed and function as DNS servers. The ABC.com network
has two domain controllers, named ABC-SR01 and ABC-SR02. During the course of the day
you deploy an additional DNS server named ABC-SR03 to the perimeter network. You have
later decided to configure ABC-SR01 to forward all unresolved requests to ABC-SR03.
During your routine maintenance you discover that DNS forward option is unavailable on
ABCSR02. ABC.com recently requested that you travel to the Paris office and configure DNS
forwarding on ABC-SR02 so that unresolved name requests are forward to ABC-SR03. Which
of the following actions should you take? (Choose two)
A. You should consider having the Root zone deleted on ABC-SR02.
B. You should consider having zone forwarding added on ABC-SR02.
C. You should consider having the DNS cached cleared on ABC-SR02.
D. You should consider having conditional forwarding configured on ABC-SR02.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=169
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 170
You work as the network administrator at ABC.com. The ABC.com network has a forest with
a domain named ABC.com. ABC.com has its headquarters in London and branch office in
Paris. All servers on the ABC.com network have Windows Server 2008 R2 installed. The
ABC.com network has a server named ABC-SR01 in the London office which has the DNS
Server role installed with Active Directory-integrated zone configured for two sites containing
four domain controllers each. You have executed the repadmin/syncall command at the
command prompt. Which of the following describes a reason for executing this command?
A. It is used to start the immediate replication of a specified directory partition to a
destination domain controller from a source domain controller.
B. It is used to present the replication status when the specified domain controller last
attempted to perform inbound replication of Active Directory partitions.
C. It is used to synchronize a particular domain controller with all of its replication
partners.
D. It is used to start the replication of passwords for the specified users from a writable
Windows Server 2008 source domain controller to one or more read-only domain
controllers (RODCs).
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=170
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 171
You work as the network administrator at ABC.com. The ABC.com network has a domain
named ABC.com. All servers on the ABC.com network have Windows Server 2008 R2
installed and all workstations have Windows 7 installed. The ABC.com network has a domain
controller named ABC-SR01 that also functions as a DNS server. You add a new stand alone
server named ABC-SR02 and configure it as a DNS server. You then configure a standard
secondary zone with ABC-SR01 as the master server. What action should you take to have
zone updates replicated from ABC-SR01 to ABC-SR02?
A. You should consider having ABC-SR02 made a member of the DNSUpdateProxy
group.
B. You should consider having the permission of the ABC.com zone modified on ABCSR01.
C. You should consider having the dnscmd /ZoneUpdateFromDs command run on
ABC-SR02.
D. You should consider having the zone transfer settings of the ABC.com zone
configured on ABC-SR01.
E. You should consider having ABC-SR02 promoted to a domain controller.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=171
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 172
You work as a network administrator at ABC.com. The ABC.com network has a domain
named ABC.com. All servers on the ABC.com network run Windows Server 2008. The
ABC.com network has two servers named ABC-SR01 and ABC-SR02 that are configured as
domain controllers and as DNS servers. Both servers have the following setup for the
ABC.com domain. ABC-SR01 - Standard Primary zone ABC-SR02 - Standard Secondary
zone. You have to make sure that the tasks listed below are completed: Perform the
replication of ABC.com Zone Data. Make sure that Zone Data maintains encryption. Prevent
the loss of Zone Data. Which combination of the following actions should you take? (Choose
two.)
A. You should consider having the zone transfer settings configured on ABC-SR01 and
ABCSR02.
B. You should consider having the primary zone on ABC-SR02 converted to an Active
Directoryintegrated stub zone.
C. You should consider having the primary zone on ABC-SR01 converted to an Active
Directoryintegrated zone.
D. You should consider having the secondary zone on ABC-SR02 deleted.
E. You should consider having the primary zone on ABC-SR01 deleted.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=172
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 173
You work as the network administrator at ABC.com. The ABC.com network has a domain
named ABC.com. All servers on the ABC.com network have Windows Server 2008 R2
installed and all workstations have Windows 7 installed. The ABC.com network has six
domain controllers named ABC-DC01, ABC-DC02, ABC-DC03, ABC-DC04, ABC-DC05
and ABC-DC06. All six domain controllers function as DNS servers. You are in the process of
implementing a new Active Directory-integrated DNS zone. What action should you take first
if you want the new zone replicated only to ABC-DC05 and ABCDC06?
A. You should consider having the dnscmd /createdirectorypartition command executed
on ABCDC05 and ABC-DC06.
B. You should consider having the dnscmd /config command executed on ABC-DC05
and ABCDC06.
C. You should consider having the .(root) zone is deleted from ABC-DC01, ABCDC02, ABCDC03 and ABC-DC04.
D. You should consider having BIND secondaries enabled on ABC-DC05 and ABCDC06.
E. You should consider having the dnscmd /unenlistdirectorypartition command
executed on ABCDC01, ABC-DC02, ABC-DC03 and ABC-DC04.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=173
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 174
You work as an administrator at ABC.com. The ABC.com network has an Active Directory
domain named ABC.com. All servers on the ABC.com network, including domain controllers,
have Windows Server 2008 R2 installed. Workstations on the ABC.com network have either
Windows XP SP3, or Windows 7 installed. The ABC.com network has a domain controller,
named ABC-DC01. The ABC.com network also has a server, named ABC-SR07. ABC-DC01
and ABC-SR07 are configured as DNS servers on the ABC.com network. ABC-DC01 is
configured to host a standard primary zone, while ABC-SR07 hosts a secondary copy of the
zone. You have been instructed to make sure that host (A) records in the DNS zone is updated
by authenticated users only. Which of the following describes the initial step to achieving
your goal?
A. You should consider having AD FS installed on ABC-DC01.
B. You should consider having AD FS installed on ABC-SR07.
C. You should consider having the standard primary zone converted to a stub zone.
D. You should consider the standard primary zone changed to an Active Directoryintegrated zone.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=174
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 175
You work as an administrator at ABC.com. The ABC.com network has an Active Directory
forest named ABC.com. You are informed that ABC.com has acquired a new server, which
runs Windows Server 2008 R2 and is configured as a read-only domain controller (RODC).
The read-only domain controller (RODC) is named ABC-RODC01. You have received
instructions to deploy ABC-RODC01 to ABC.com�s forest. Which of the following
statements are TRUE with regards to the above scenario?
A. The minimum functional level that can be configured for the forest is Windows
Server 2008 R2.
B. The maximum functional level that can be configured for the forest is Windows
Server 2003.
C. The maximum functional level that can be configured for the forest is Windows
2000.
D. The minimum functional level that can be configured for the forest is Windows
2003.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=175
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 176
You work as an administrator at ABC.com. The ABC.com network has an Active Directory
domain named ABC.com. All servers on the ABC.com network have Windows Server 2008
R2 installed and all workstations have Windows 7 installed. The ABC.com domain has two
domain controllers, named ABC-DC01 and ABC-DC02, which are also configured as DNS
servers. The DNS zone for ABC.com is Active Directory-integrated, and configured for secure
dynamic updates only. You have received instructions to configure the ABC.com zone to only
accept updates from either domain controllers, or servers that form part of the domain. Which
combination of the following actions should you take?
A. You should navigate to the Security tab of the ABC.com DNS zone properties. You
should then remove the Authenticated Users account, and enable the Create All Child
Objects permission option for ABC.com�s server computer accounts.
B. You should consider modifying the zone replication scope. You should then navigate
to the Security tab of the ABC.com DNS zone properties and enable the Create All
Child Objects permission option for ABC.com�s server computer accounts.
C. You should consider modifying the zone replication scope. You should then navigate
to the Security tab of the ABC.com DNS zone properties and enable the Write All
Properties permission option for the computer accounts of ABC.com�s servers.
D. You should navigate to the Security tab of the ABC.com DNS zone properties. You
should then navigate to the Security tab of the ABC.com DNS zone properties and
enable the Write All Properties permission option for the computer accounts of
ABC.com�s servers.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=176
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 177
You work as the enterprise administrator at ABC.com. The ABC.com network has a domain
named ABC.com. The ABC.com network has three domain controllers named ABC-DC01,
ABCDC02 and ABC-DC03 that run Windows Server 2003. ABC.com purchases a new
Windows Server 2008 R2 computer named ABC-SR04. What is the first step you should take
to install ABC-SR04 as a domain controller on the ABC.com network?
A. You should consider running the dconfig command on ABC-SR04.
B. You should consider running the adprep /forestprep command on ABC-DC01.
C. You should consider raising the domain functional level to Windows Server 2008.
D. You should consider running the adprep /domainprep command on ABC-DC01.
E. You should consider running the dcpromo /remove command on ABC-DB01, ABCDB02 and ABC-DB03.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=177
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 178
You work as the network administrator at ABC.com. ABC.com has its headquarters in London.
The ABC.com network has a domain named ABC.com that consists of a single Active
Directory site named LondonSite. The LondonSite contains a domain controller named ABCDC01. ABC.com opens a branch office in York and you create another Active Directory site
named YorkSite. How can you have Active Directory replication configured between the two
sites?
A. You need to consider installing a new domain controller in YorkSite and creating a
site link between the two sites. Then you should consider decreasing the site link cost.
B. You need to consider installing a new domain controller in the LondonSite and
configuring it as a preferred bridgehead server.
C. You need to consider installing a new domain controller in the LondonSite and
configuring a new site link bridge between the two sites.
D. You need to consider installing a new domain controller in the YorkSite and
configuring a new IP subnet for the YorkSite.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=178
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 179
You work as the network administrator at ABC.com. The ABC.com network has a domain
named ABC.com. All servers on the ABC.com network run Windows Server 2003. You have
just performed the migration of domain controllers from Windows Server 2003 to Windows
Server 2008 R2. Which of following commands can be used to configure DFS Replication
(DFS-R) to replicate the Sysvol share?
A. This can be accomplished by running the netdom /dfs -r command.
B. This can be accomplished by raising the domain functional level to Windows Server
2008 R2.
C. This can be accomplished by running dfsutil /share:sysvol command.
D. This can be accomplished by running dfsutil /addstdroot command.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=179
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 180
You work as an enterprise administrator at ABC.com. All servers on the ABC.com network
have Windows Server 2008 R2 installed. ABC.com has its headquarters in Chicago and a
branch office in Miami. The two offices are configured as separate sites. The Miami site
contains a domain controller named ABC-DC06. You receive an instruction from the CIO to
install a new application at the Miami office. In order for the application to run a Global
Catalog server is required. What action should you consider to add a Global Catalog server to
the Miami site?
A. You should consider running the DCPROMO command on ABC-DC06 to install the
Global Catalog.
B. You should consider using the Server Manager console to configure ABC-DC06 as a
Global Catalog server.
C. You should consider using the Active Directory Domains and Trusts console to
configure ABCDC06 as a Global Catalog server.
D. You should consider using the Active Directory Sites and Services console to
configure the ABC-DC06 as a Global Catalog server.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=180
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 181
You work as an enterprise administrator at ABC.com. The ABC.com network has a domain
named ABC.com. All servers on the ABC.com network have Windows Server 2008 R2
installed and all workstations have Windows 7 installed. ABC.com has its headquarters in
Seattle and branch offices in Dallas, Miami and Chicago. Each office is configured as a
separate site named Seattle, Dallas, Miami and Chicago. The Seattle site as three domain
controllers named ABC-DC01, ABC-DC02 and TGESABCINGMicrosoft 70-649 Exam
DC03. The Dallas site has a single domain controller named ABC-DC04, the Miami site has a
single domain controller named ABC-DC05 and the Chicago site has a single domain
controller named ABC-DC06. ABC-DC01, ABC-DC02 and TGESABCING-DC03 are
configured as Global Catalog servers. You have to make sure that the Universal Group
Membership Caching (UGMC) option is not activated at the Dallas, Miami and Chicago
offices Which of the following actions should you take?
A. You should consider deactivating the UGMC in Active Directory Users and
Computers.
B. You should consider deactivating the UGMC at the Site level.
C. You should consider deactivating the UGMC through a Group Policy Object linked
to the domain.
D. You should consider deactivating the UGMC at the Organizational Unit (OU) level.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=181
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 182
You work as the network administrator at ABC.com. The ABC.com network has a domain
named ABC.com. The ABC.com has a Windows Server 2008 R2 domain controller named
ABC-DC01. You log on as the Domain Administrator on ABC-DC01 to view the Active
Directory Schema console. However, you cannot locate the Active Directory Schema console.
What action should you take to locate the console?
A. You should consider running the net start "Active Directory Services" command on
ABC-DC01.
B. You should have the Schema Master Operations role assigned to ABC-DC01.
C. You should consider having Schmmgmt.dll registered on ABC-DC01.
D. You should consider logging on to ABC-DC01 as the Local Administrator.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=182
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 183
You work as an administrator at ABC.com. The ABC.com network has an Active Directory
domain named ABC.com. The ABC.com network also has a child domain, named
us.ABC.com, configured. All servers on the ABC.com network have Windows Server 2008
R2 installed. A domain controller in the us.ABC.com child domain has been marked for
removal. You then installed a new domain controller, and then transferred the Infrastructure,
RID, and PDC Emulator operations master roles. Which of the following is the purpose of the
Infrastructure operations master role?
A. It is responsible for updating object references in its domain that point to the object
in a different domain.
B. It is provides the most up-to-date password information whenever a logon attempt
fails.
C. It assigns an object a unique security identifier (SID) whenever a domain controller
creates a new security principal.
D. It deals with the addition and removal of all domains and directory partitions.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=183
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 184
You work as the network administrator at ABC.com. The ABC.com network has a domain
named ABC.com. All servers on the ABC.com network have Windows Server 2008 R2
installed. The ABC.com network has two domain controllers ABC-DC01 and ABC-DC02.
ABC-DC01 suffers a catastrophic failure but it is causing problems because it was configured
to have Schema Master Operations role. You log on to the ABC.com domain as a domain
administrator but your attempts to transfer the Schema Master Operations role to ABC-DC02
are unsuccessful. What action should you take to transfer the Schema Master Operations role
to ABC-DC02?
A. You should consider having the dcpromo /adv command executed on ABC-DC02.
B. You should consider having the Schema Master role seized to ABC-DC02.
C. You should consider having Schmmgmt.dll registered on ABC-DC02.
D. You should consider adding your user account to the Schema Administrators group.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=184
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 185
You work as the network administrator at ABC.com. The ABC.com network has a domain
named ABC.com. All servers on the ABC.com network have Windows Server 2008 R2
installed All master roles in the forest are maintained at a domain controller ABC-DC01. You
have another domain controller in the network named ABC-DC02 which contains better
hardware and can improve performance. ABC-DC01 is to be removed from the network.
Which option can you select in order to ensure that proper roles are transferred to ABC-DC02
without disrupting the forest wide operations?
A. You should consider transferring the RID Master role and the Schema master role.
B. You should consider transferring the Schema master role and the Domain naming
master role.
C. You should consider transferring the Infrastructure master role and the PDC emulator
role.
D. You should consider transferring the Infrastructure master role and the Domain
naming master role.
E. You should consider transferring the RID Master role and the PDC emulator role.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=185
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 186
You work as an administrator at ABC.com. The ABC.com network has an Active Directory
domain named ABC.com. All servers on the ABC.com network have Windows Server 2008
R2 installed and all workstations have Windows 7 installed. A server on the ABC.com
network, named ABC-SR13, has an instance of Active Directory Lightweight Directory
Services (AD LDS) installed. The ABC.com network also has a server, named TEST-SR01.
You have been tasked with making sure that the Active Directory Lightweight Directory
Services (AD LDS) is replicated to TEST-SR01. Which of the following actions should you
take?
A. You should consider creating and installing a replica by running the AD LDS Setup
wizard on TEST-SR01.
B. You should consider executing the repadmin.exe command-line tool with the /kcc
<servername> parameters on ABC-SR13.
C. You should consider running Replmon.exe on ABC-SR13.
D. You should consider running Replmon.exe on TEST-SR01.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=186
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 187
You work as an enterprise administrator at ABC.com. The ABC.com network has a domain
named ABC.com. All servers on the ABC.com network have Windows Server 2008 R2
installed and all workstations have Windows 7 installed. ABC.com has its headquarters in
Chicago. ABC.com opens a new branch office in Dallas. You need to allow ABC.com users in
the Dallas office to access network resources in the Chicago office. You assign the ABC.com
users in the Dallas office the Read and Execute permissions to the network resources in the
Chicago office. You then create a VPN connection which the ABC.com users in the Dallas
office to establish connectivity to the Chicago office. However, the users in the Dallas office
report that they cannot connect to the Chicago office by using the VPN connection. What
action should you take to resolve this problem?
A. Your best option would to assign the Allow Access Dial-in permission to the users in
the Dallas office.
B. Your best option would to make the users in the Dallas office members of the
Remote Desktop Users security group.
C. Your best option would to make the users in the Dallas office members of the
Network Configuration Operators security group.
D. Your best option would to delete and recreate the VPN connection.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=187
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 188
You work as an enterprise administrator at ABC.com. The ABC.com network has a domain
named ABC.com. All domain controllers on the ABC.com network run Windows Server 2008
R2. ABC.com has its headquarters in Paris where you are located. Due to company growth
ABC.com opens a branch office in London. Several ABC.com employees will be moved to the
London office. You thus need to move the existing user as well as computer objects to another
organizational unit in the London office. You need to recommend to management a plan of
action that will accomplish this. Which of the following actions should you take? (Choose all
that apply.)
A. You should recommend that the DSmod utility be executed.
B. You should recommend that the Active Directory Domains and Trusts tool be used.
C. You should recommend that the Active Directory Users and Computers utility be
run.
D. You should recommend that the RepAdmin utility be executed.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=188
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 189
You work as an administrator at ABC.com. The ABC.com network has an Active Directory
domain named ABC.com. All servers on the ABC.com network have Windows Server 2008
R2 installed and all workstations have Windows 7 installed. You have been tasked with
installing a new application on a server, named ABC-SR13. Part of the installation process
requires the installation of new attributes, as well as adding classes to the Active Directory
database. You are tasked with making sure that you are able to install the application
successfully. Which of the following permissions should the log on account have?
A. Domain Administrator rights.
B. Schema User rights.
C. Schema Administrator rights.
D. Enterprise User rights.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=189
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 190
You work as the network administrator at ABC.com. The ABC.com network has a domain
named ABC.com. ABC.com has its headquarters located in London and branch office located
in Paris. All servers on the ABC.com network have Windows Server 2008 R2 installed and all
workstations have Windows 7 installed. ABC.com has recently created an organizational unit
named KingProducts which has a child organizational object named KingSales. ABC.com has
additionally created a GPO named Sales Application and linked it to the KingProducts OU.
During the course of the day you receive instruction from ABC.com to create a shadow group
for the KingSales organizational unit whilst ensuring that the SalesApplication is not deployed
to network users in the KingSales OU. Which of the following actions should you
take?(Choose two)
A. You should consider having the Block Inheritance setting configured on the
KingSales organizational unit.
B. You should consider having security filtering configured on the SalesApplication
GPO to Deny. You should then have the group policy applied for the KingSales OU.
C. You should consider having the Enforce setting configured on the SalesApplication
GPO.
D. You should consider having the Block Inheritance setting configured on the
KingProducts organizational unit.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=190
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 191
You work as the network administrator at ABC.com. The ABC.com network has a domain
named ABC.com. ABC.com has its headquarters located in London and branch office located
in Paris. All servers on the ABC.com network have Windows Server 2008 R2 installed and all
workstations have Windows 7 installed. During the course of the day you receive instruction
from ABC.com to create an organizational unit named Products hosting two global groups
named KingSales and KingSecurity. ABC.com has recently additionally asked you to apply
desktop restrictions to the KingSecurity group whilst ensuring that the KingSales group does
not have the desktop restrictions applied. You started by creating a GPO named
KingLockdown and linked it to the Products OU. Which of the following actions should you
take?
A. You should consider having the Allow Apply Group Policy permission set for the
Local domain users on KingLockdown GPO.
B. You should consider having the Allow Apply Group Policy permission set for the
Authenticated Users on KingLockdown GPO.
C. You should consider having the Deny Apply Group Policy permission set for the
KingSales on the KingLockdown GPO.
D. You should consider having the Deny Apply Group Policy permission set for the
KingSecurity Executives on the KingLockdown GPO.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=191
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 192
You work as the network administrator at ABC.com. The ABC.com network has a domain
named ABC.com. ABC.com has its headquarters located in London and branch office located
in Paris. All servers on the ABC.com network have Windows Server 2008 R2 installed and all
workstations have Windows 7 installed. ABC.com has recently requested that you take on the
responsibilities managing help desk calls and basic user account management. During the
course of the day you receive instruction to add a new user named Rory Allen to have
permission to reset passwords for all users in a specific OU. ABC.com has recently requested
that you make sure Rory Allen is not capable of making permission changes for the objects
within other OU�s in the domain. Which of the following actions should you take?
A. You should consider having the Rory Allan�s log-in account moved to an OU
containing the OU. You should then have the parent OU of the one requiring
administering referred.
B. You should consider having the Delegation of Control Wizard used to assign the
necessary permissions on the OU that requires being administered.
C. You should consider having a special administration account created within the OU.
You should then have full permissions granted to the OU for all objects within Active
Directory.
D. You should consider having the Rory Allen log-in account moved into the OU which
requires being administered.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=192
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 193
You work as an enterprise administrator at ABC.com. The ABC.com network has a domain
named ABC.com. All servers on the ABC.com network have Windows Server 2008 R2
installed and all workstations have Windows 7 Enterprise Edition installed. All workstations
are located in an Organizational Unit named ClientPCs. ABC.com has acquired a new thirdparty application that you need to install on the workstations. Before you can install the
application you need prepare the workstations by applying a file named ABCApp.adm to
them. The ABCApp.adm file makes changes to the registry on the workstations. What action
should you take to apply the ABCApp.adm file?
A. Your best option would be to create a transformation package that applies the
ABCApp.adm file and assign the package to the workstations.
B. Your best option would be to copy the ABCApp.adm file to a network share and
write a Microsoft Windows PowerShell script that applies the file to the workstations.
C. Your best option would be to write that the Microsoft Windows PowerShell script
that copies the ABCApp.adm file to the workstations.
D. Your best option would be to create a Group Policy Object (GPO) that imports the
ABCApp.adm and link the GPO to the ClientPCs OU.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=193
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 194
You work as an administrator at ABC.com. The ABC.com network consists of an Active
Directory forest that contains a single domain named ABC.com. All servers on the ABC.com
network have Windows Server 2008 R2 installed and all workstations have Windows 7
installed. ABC.com has its headquarters in Dallas, and two branch offices in Miami and
Chicago. You have configured an organizational unit (OU) for the Marketing department of
each office. The users and computers of the Marketing Department are included in the
Marketing OU. Each Marketing OU has a child OU configured. ABC.com releases a new
policy that requires the computers in the Marketing OU to have a specific application installed.
You have to make sure that the application is suitably deployed for the Marketing OU
computers only. Which of the following actions should you take? (Choose all that apply.)
A. You should consider creating and configuring a Group Policy Object (GPO) to
assign the application to the computer account.
B. You should consider creating and configuring a Group Policy Object (GPO) to
assign the application to the user account.
C. You should consider linking the GPO to the Marketing OU in each office.
D. You should consider linking the GPO to ABC.com�s forest.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=194
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 195
You work as an administrator at ABC.com. ABC.com has a single Active Directory domain
named ABC.com. All servers on the ABC.com network have Windows Server 2008 R2.
ABC.com has a server, named ABC-SR07, which is running the Active Directory Lightweight
Directory Services (AD LDS) role. You have been instructed to install an instance of AD LDS.
You would like the installation to be automated. Which of the following actions should you
take?
A. You should consider running the repadmin.exe tool.
B. You should consider running the replmon.exe tool.
C. You should consider running the adaminstall.exe tool.
D. You should consider running the dsamain.exe tool.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=195
-------------------------------------------------------------------------------------------------------------------------------------
QUESTION: 196
You work as an administrator at ABC.com. ABC.com has a single Active Directory domain
named ABC.com. All servers on the ABC.com network have Windows Server 2008 R2
installed and all workstations have Windows 7 installed. After making use of a Multiple
Activation Key (MAK) key to activate Windows 7 and Microsoft Office 2010 on ABC.com s
workstations, you run the Volume Activation Management Tool (VAMT). Which of the
following is TRUE with regards to this tool? (Choose all that apply.)
A. It can be used to track and administer multiple MAK keys, as well as remaining
activations.
B. It can be used to track and administer multiple MAK keys
C. It can be used to execute activation, or reactivation by making use of cached data.
D. It can be used to track and administer remaining activations.
Answer: http://www.twpass.com/twpass.com/exam.aspx?ecode=70-649&qno=196
-------------------------------------------------------------------------------------------------------------------------------------
TwPass Certification Exam Features;
-
TwPass offers over 2500 Certification exams for professionals.
More than 98,800 Satisfied Customers Worldwide.
Average 99.8% Success Rate.
Over 120 Global Certification Vendors Covered.
Services of Professional & Certified Experts available via support.
Free 90 days updates to match real exam scenarios.
Instant Download Access! No Setup required.
Price as low as $19, which is 80% more cost effective than others.
Verified answers researched by industry experts.
Study Material updated on regular basis.
Questions / Answers are downloadable in PDF format.
Mobile Device Supported (Android, iPhone, iPod, iPad)
No authorization code required to open exam.
Portable anywhere.
Guaranteed Success.
Fast, helpful support 24x7.
View list of All Exams (AE);
http://www.twpass.com/twpass.com/vendors.aspx
Download Any Certication Exam DEMO.
http://www.twpass.com/twpass.com/vendors.aspx
To purchase Full version of exam click below;
http://www.TwPass.com/
Was this manual useful for you? yes no
Thank you for your participation!

* Your assessment is very important for improving the work of artificial intelligence, which forms the content of this project

Download PDF

advertisement