70-640 TS: Windows Server 2008 Active Directory, Configuring

Document Content and Description Below

70-640 TS: Windows Server 2008 Active Directory, Configuring If your SQL Agent Service uses a domain account, how can you prevent your database backup and database maintenance jobs from failing a ... fter 42 days? Correct Answer: Configure the password of the domain account to never expire If a user belongs to multiple groups, and each group has a different Password Settings Object (PSO) linked to it, which password attributes will apply to the user? Correct Answer: The PSO from the group that has that has the lowest value or highest priority rank will apply to the user. For example, if one PSO has a value of 1 and another PSO has a value of 2, then the password settings in the PSO that has the value of 1 apply to the user. What is required to install Active Directory Rights Management Services (AD RMS) on a server running Windows Server 2008 R2 within a network that includes Windows 2000 Server domain controllers? Correct Answer: Install SP5 on the Windows 2000 domain controllers because AD RMS can be installed on an Active Directory domain that uses the functional domain mode Windows Server 2000 or higher. At what level in the Active Directory structure do you enable universal group membership caching? Correct Answer: At the site level After you add three new members to a group in a multiple site environment, what should you do to ensure that the group's new membership list is quickly recognized throughout the domain? Correct Answer: From Active Directory Sites and Services, expand the site, highlight the domain controller, right-click the NTDS connections, and force replication. After installing Active Directory Rights Management Services (AD RMS) on a server running Windows Server 2008 R2 in a domain, what should you install on the Windows 2000 Professional and XP client computers? Correct Answer: Install the RMS client on all Windows 2000 Professional and XP client computers What should you do to ensure that only specific domain controllers in an Active Directory site can become the bridgehead server for that site? Correct Answer: Configure those domain controllers as preferred bridgehead servers Where do the client computers send user logon requests if there are no domain controllers in the site where the client computers reside? Correct Answer: To the site or sites with the lowest site link cost where domain controllers are available The resultant backup lifetime of an Active Directory object is the smaller value of which two attributes? Correct Answer: The msDS-deletedObjectLifetime attribute, which stores the deleted object lifetime, or the tombstoneLifetime attribute, which stores the recycled object lifetime. What type of group can be assigned permissions to a folder? Correct Answer: Security groups What would be the complete syntax of the dsadd command to create an OU named Accounting in a domain named verigon.com? Correct Answer: dsadd ou "ou=Accounting,dc=verigon,dc=com" Which permission should you grant to a user for a container to allow the user to force manual replication for that container? Correct Answer: Replication Synchronization permission Which type of DNS zone transfer is supported by Berkeley Internet Name Domain (BIND) 4.9.3 and earlier DNS server software, such as UNIX DNS and Windows NT 4.0 DNS? Correct Answer: Only full zone transfers How should you configure a DNS server to monitor DNS traffic, and to record and analyze individual queries? Correct Answer: Enable logging on the Debug Logging tab of a DNS server's Properties sheet What is the minimum forest level for installing a readonly domain controller (RODC)? Correct Answer: Windows Server 2003 In which server monitoring tool would you create a data collection set? Correct Answer: Reliability and Performance tool When performing a defragmentation of the ntds.dit file, what must you do after you have compacted the file? Correct Answer: Copy the file to %SystemRoot%\Windows\NTDS folder Why should you configure the password of a domain account that is set to log in as a service to never expire? Correct Answer: So that the service will not fail due to password expiration Which two utilities can you use to recover the Active Directory Domain Services (AD DS) database? Correct Answer: The Ntdsutil.exe and the Esentutl.exe utilities What should you do to ensure that only authenticated users are able to register their records in the DNS zone? Correct Answer: Create an Active Directory-integrated zone and configure the zone for secure dynamic updates only Which Active Directory tool is used to enable universal group membership caching? Correct Answer: Active Directory Sites and Services What Group Policy setting is appropriate for computers where the desktop configuration should remain the same regardless of the user who logs on? Correct Answer: The User Group Policy loopback processing mode policy setting is appropriate for closely managed computers where the desktop configuration should remain the same, regardless of who logs on. [Show More]

Last updated: 3 years ago

Preview 1 out of 11 pages