FREE MCTS 70 640: Active Directory, Configuring Question and Answers

Question 1

There is only one Active Directory domain in your network. Every domain controller is active Operating System 2003.
The domain controllers are all upgraded to Windows Server 2008.
The Active Directory system has to be set up to accommodate the use of multiple password policies.
What should you do?

Accepted Answer

Raise the functional level of the domain to Windows Server 2008

Answer

Create multiple Active Directory sites

Answer

On all domain controllers, run dcpromo /adv

Answer

On one domain controller, run dcpromo /adv.

Question 2

Intranet.contoso.com is the only Active Directory domain owned by your business. Windows Server 2008 R2 is used by all domain controllers. Windows is the domain functional level.
Windows 2000 is native and the forest functional level.
You must make sure that user accounts can use the UPN suffix for contoso.com.
What should you start with

Accepted Answer

Add the new UPN suffix to the forest.

Answer

Change the Primary DNS Suffix option in the Default Domain Controllers Group Policy Object (GPO) to contoso.com

Answer

Raise the intranet.contoso.com forest functional level to Windows Server 2003 or higher.

Answer

Raise the intranet.contoso.com domain functional level to Windows Server 2003 or higher.

Question 3

You have two servers, Server1 and Server2, respectively. Windows Server 2008 is used by both servers. R2. Enterprise root certification authority (CA) configuration is set up on Server1.
On Server2, you set up the Online Responder role service.
Server1 must be set up to handle the Online Responder.
What ought you to do?

Accepted Answer

Configure the Authority Information Access (AIA) extension.

Answer

Configure the Certificate Revocation List Distribution Point extension.

Answer

Add the Server2 computer account to the CertPublishers group.

Answer

Import the enterprise root CA certificate.

Question 4

Active Directory forests with the names contoso.com and fabrikam.com exist within your organization.
Three DNS servers designated DNS1, DNS2, and DNS3, are part of the firm network. The configuration of the DNS servers is displayed in the following table.
DNS3 is set as the primary DNS server on each computer in the fabrikam.com domain. The preferred DNS server for the rest of the PCs is DNS1.
The servers for the contoso.com domain are inaccessible to users from the fabrikam.com domain.
You must make sure that any contoso.com queries may be answered by users of the fabrikam.com domain.
What ought you to do?

Accepted Answer

Configure conditional forwarding on DNS3 to forward contoso.com queries to DNS1.

Answer

Create a copy of the fabrikam.com zone on the DNS1 server and the DNS2 server.

Answer

Create a copy of the _msdcs.contoso.com zone on the DNS3 server.

Answer

Configure conditional forwarding on DNS1 and DNS2 to forward fabrikam.com queries to DNS3.

Question 5

There is only one Active Directory domain in your network. Every domain controller is active Operating System 2008 R2. Both the Audit directory services access setting and the Audit account management policy setting are turned on for the entire domain. The ability to log changes to Active Directory objects must be present. The old and new values of any attributes must be included in the modifications that were logged.
What ought you to do?

Accepted Answer

Run auditpol.exe and then configure the Security settings of the Domain Controllers OU.

Answer

Run auditpol.exe and then enable the Audit directory service access setting in the Default Domain policy.

Answer

From the Default Domain Controllers policy, enable the Audit directory service access setting and enable directory service changes.

Answer

Enable the Audit account management policy in the Default Domain Controller Policy.

Question 6

There is an Active Directory domain for your business. The following warning appears when a user attempts to log on to the domain from a client computer: "This user account has expired. Ask your administrator to reactivate the account."
You must guarantee that the user can access the domain.
What ought you to do?

Accepted Answer

Modify the properties of the user account to set the account to never expire.

Answer

Modify the properties of the user account to extend the Logon Hours setting.

Answer

Modify the default domain policy to decrease the account lockout duration.

Answer

Modify the properties of the user account to set the password to never expire.

Question 7

The Active Directory domain for your business is contoso.com. Two DNS servers, DNS1 and DNS2, are part of the firm network. The configuration of the DNS servers is displayed in the following table.

Users of the domain who have DNS2 set as their preferred DNS server are unable to access Internet websites.
All client PCs must have Internet name resolution enabled.
What ought you to do?

Accepted Answer

Delete the .(root) zone from DNS2. Configure conditional forwarding on DNS2.

Answer

Update the Cache.dns file on DNS2. Configure conditional forwarding on DNS1.

Answer

Update the list of root hints servers on DNS2.

Answer

Create a copy of the .(root) zone on DNS1.

There is only one Active Directory domain in your network.Every domain controller is active Operating System 2003. The domain controllers are all upgraded to Windows Server 2008. The Active Directory system has to be set up to accommodate the use of multiple password policies. What should you do?

There is only one Active Directory domain in your network.
Every domain controller is active
Operating System 2003.
The domain controllers are all upgraded to Windows Server 2008.
The Active Directory system has to be set up to accommodate the use of multiple password policies.
What should you do?