70-640 TS: Windows Server 2008 Active Directory, Configuring
If your SQL Agent Service uses a domain account,
how can you prevent your database backup
... [Show More] and
database maintenance jobs from failing after 42 days? Correct Answer: Configure the password of the domain account to
never expire
If a user belongs to multiple groups, and each group
has a different Password Settings Object (PSO) linked
to it, which password attributes will apply to the user? Correct Answer: The PSO from the group that has that has the lowest
value or highest priority rank will apply to the user. For
example, if one PSO has a value of 1 and another
PSO has a value of 2, then the password settings in
the PSO that has the value of 1 apply to the user.
What is required to install Active Directory Rights
Management Services (AD RMS) on a server running
Windows Server 2008 R2 within a network that
includes Windows 2000 Server domain controllers? Correct Answer: Install SP5 on the Windows 2000 domain controllers
because AD RMS can be installed on an Active
Directory domain that uses the functional domain
mode Windows Server 2000 or higher.
At what level in the Active Directory structure do you
enable universal group membership caching? Correct Answer: At the site level
After you add three new members to a group in a
multiple site environment, what should you do to
ensure that the group's new membership list is quickly
recognized throughout the domain? Correct Answer: From Active Directory Sites and Services, expand the
site, highlight the domain controller, right-click the
NTDS connections, and force replication.
After installing Active Directory Rights Management
Services (AD RMS) on a server running Windows
Server 2008 R2 in a domain, what should you install
on the Windows 2000 Professional and XP client
computers? Correct Answer: Install the RMS client on all Windows 2000
Professional and XP client computers
What should you do to ensure that only specific
domain controllers in an Active Directory site can
become the bridgehead server for that site? Correct Answer: Configure those domain controllers as preferred
bridgehead servers
Where do the client computers send user logon
requests if there are no domain controllers in the site
where the client computers reside? Correct Answer: To the site or sites with the lowest site link cost where
domain controllers are available
The resultant backup lifetime of an Active Directory
object is the smaller value of which two attributes? Correct Answer: The msDS-deletedObjectLifetime attribute, which
stores the deleted object lifetime, or the
tombstoneLifetime attribute, which stores the
recycled object lifetime.
What type of group can be assigned permissions to a
folder? Correct Answer: Security groups
What would be the complete syntax of the dsadd
command to create an OU named Accounting in a
domain named verigon.com? Correct Answer: dsadd ou "ou=Accounting,dc=verigon,dc=com"
Which permission should you grant to a user for a
container to allow the user to force manual replication
for that container? Correct Answer: Replication Synchronization permission
Which type of DNS zone transfer is supported by
Berkeley Internet Name Domain (BIND) 4.9.3 and
earlier DNS server software, such as UNIX DNS and
Windows NT 4.0 DNS? Correct Answer: Only full zone transfers
How should you configure a DNS server to monitor
DNS traffic, and to record and analyze individual
queries? Correct Answer: Enable logging on the Debug Logging tab of a DNS
server's Properties sheet
What is the minimum forest level for installing a readonly
domain controller (RODC)? Correct Answer: Windows Server 2003
In which server monitoring tool would you create a
data collection set? Correct Answer: Reliability and Performance tool
When performing a defragmentation of the ntds.dit
file, what must you do after you have compacted the
file? Correct Answer: Copy the file to %SystemRoot%\Windows\NTDS
folder
Why should you configure the password of a domain
account that is set to log in as a service to never
expire? Correct Answer: So that the service will not fail due to password
expiration
Which two utilities can you use to recover the Active
Directory Domain Services (AD DS) database? Correct Answer: The Ntdsutil.exe and the Esentutl.exe utilities
What should you do to ensure that only authenticated
users are able to register their records in the DNS
zone? Correct Answer: Create an Active Directory-integrated zone and
configure the zone for secure dynamic updates only
Which Active Directory tool is used to enable universal
group membership caching? Correct Answer: Active Directory Sites and Services
What Group Policy setting is appropriate for
computers where the desktop configuration should
remain the same regardless of the user who logs on? Correct Answer: The User Group Policy loopback processing mode
policy setting is appropriate for closely managed
computers where the desktop configuration should
remain the same, regardless of who logs on. [Show Less]