Microsoft 73-640 Test Questions

Microsoft 73-640
http://www.passpeak.com/73-640.html
http://www.passpeak.com/pdf/73-640.pdf
TS: Windows Server 2008 Active Directory, Configuring
Question: 1
Your network contains an Active Directory forest named adatum.com. All domain controllers currently run Windows Server 2003 Service Pack 2 (SP2). The functional level of the forest and the domain is Windows Server 2003. You need to deploy a read-only domain controller (RODC) that runs Windows Server 2008 R2. What should you do first?
A. Raise the functional level of the forest to Windows Server 2008.
B. Raise the functional level of the domain to Windows Server 2008.
C. Deploy a writable domain controller that runs Windows Server 2008 R2.
D. Run adprep.exe.
Answer: D
Question: 2
Your network contains an Active Directory forest. The forest contains one domain and three sites. Each site contains two domain controllers. All domain controllers are DNS servers. You create a new Active Directory-integrated zone. You need to ensure that the new zone is replicated to the domain controllers in only one of the sites. What should you do first?
A. Modify the replication settings of the default site link.
B. Modify the NTDS Site Settings object for the site.
C. Create an Active Directory application directory partition.
D. Create an Active Directory connection object.
Answer: C
Question: 3
You have a Windows Server 2008 R2 that has the Active Directory Certificate Services server role installed. You need to minimize the amount of time it takes for client computers to download a certificate revocation list (CRL). What should you do?
A. Install and configure an additional domain controller.
B. Install and configure an Online Responder.
C. Import the Root CA certificate into the Trusted Root Certification Authorities store on all client workstations.
D. Import the Issuing CA certificate into the Trusted Root Certification Authorities store on all client workstations.
Answer: B
Question: 4
Note: This question is part of a series of questions that use the same set of answer choices. Each answer choice may be used once, more than once, or not at all.
Your network contains an Active Directory domain. All domain controllers run Windows Server 2008 R2. You need to compact the Active Directory database. What should you do?
A. Run the dsamain.exe command.
B. Run the eventcreate.exe command.
C. Run the dsquery.exe command.
D. Configure subscriptions from Event Viewer.
E. Run the Get-ADForest cmdlet.
F. Create custom views from Event Viewer.
G. Run the ntdsutil.exe command.
H. Create a Data Collector Set (DCS).
I. Configure the Active Directory Diagnostics Data Collector Set (DCS).
J. Run the repadmin.exe command.
Answer: G
Question: 5
Your network contains an Active Directory forest. The forest contains multiple sites. You need to enable universal group membership caching for a site. What should you do?
A. From Active Directory Sites and Services, modify the NTDS Settings.
B. From Active Directory Sites and Services, modify the NTDS Site Settings.
C. From Active Directory Users and Computers, modify the properties of all universal groups used in the site.
D. From Active Directory Users and Computers, modify the computer objects for the domain controllers in the site.
Answer: B
Question: 6
A corporate environment includes two Active Directory Domain Services (AD DS) forests, as shown in the following table.
Forest name Domain functional level Forest functional level Domain(s)
contoso.com Windows Server 2008 Windows Server 2003 contoso.com
fabrikam.com Windows Server 2003 Windows Server 2003 fabrikam.comeng.fabrikam.com
You need to ensure that users in the contoso.com domain can access resources in the eng.fabrikam.com domain. What should you do?
A. Create a forest trust between contoso.com and fabrikam.com.
B. Enable domain-wide authentication.
C. Create an external trust between contoso.com and fabrikam.com.
D. Create an external trust between contoso.com and eng.fabrikam.com.
E. Enable forest-wide authentication.
F. Grant the Allowed To Authenticate permission on computers in the contoso.com domain.
G. Enable selective authentication.
H. Disable selective authentication.
Answer: A OR D