070-640 試験問題を無料オンラインアクセス

HOTSPOT
Your network contains an Active Directory forest named contoso.com. The forest contains two sites named Seattle and Montreal. The Seattle site contains two domain controllers. The domain controllers are configured as shown in the following table.

The Montreal site contains a domain controller named DC3. DC3 is the only global catalog server in the forest.
You need to configure DC2 as a global catalog server.
Which object's properties should you modify? To answer, select the appropriate object in the answer area.

正解：

Your network contains an enterprise certification authority (CA) that runs Windows Server
2008 R2 Enterprise.
You need to approve a pending certificate request.
Which snap-in should you use?

• A.Active Directory Users and Computers
• B.Certification Authority
• C.Security Templates
• D.Certificate Templates
• E.Certificates
• F.TPM Management
• G.Enterprise PKI
• H.Group Policy Management
• I.Authorization Manager

Your company has two offices. The offices are located in Miami and London.
The network contains an Active Directory forest named contoso.com. The forest contains two child domains named miami.contoso.com and london.contoso.com. The domain contains 50 domain controllers that run Windows Server 2008 R2. Each office is configured as an Active Directory site.
The forest contains a custom attribute named SecurityAccessCode.
You recently configured a domain controller named DC22 as a global catalog server.
You need to verify that SecurityAccessCode is configured to replicate to DC22.
What should you do?

• A.Run the Set-AdDomain cmdlet.
• B.Run the dsadd.exe command
• C.Use the Active Directory Schema snap-in.
• D.Use the Active Directory Users and Computers console.
• E.Run the Move-AdDirectoryServer cmdlet.
• F.Run the dsmove.exe command.
• G.Run the dcpromo.exe command.
• H.Run the nltest.exe command.

Your company, Contoso, Ltd., has a main office and a branch office. The offices are connected by a WAN link.Contoso has an Active Directory forest that contains a single domain named ad.contoso.com.
The ad.contoso.com domain contains one domain controller named DC1 that is located in the main office. DC1 is configured as a DNS server for the ad.contoso.com DNS zone. This zone is configured as a standard primary zone.
You install a new domain controller named DC2 in the branch office. You install DNS on DC2.
You need to ensure that the DNS service can update records and resolve DNS queries in the event that aWAN link fails.
What should you do?

• A.Create a new secondary zone named ad.contoso.com on DC2.
• B.Configure the DNS server on DC2 to forward requests to DC1.
• C.Convert the ad.contoso.com zone on DC1 to an Active Directory-integrated zone.
• D.Create a new stub zone named ad.contoso.com on DC2.

All vendors belong to a global group named vendors.
You place three file servers in a new organizational unit (OU) named ConfidentialFileServers. The three file servers contain confidential data located in shared folders.
You need to record any failed attempts made by the vendors to access the confidential data.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

• A.Create a new Group Policy Object (GPO) and link it to the ConfidentialFileServers OU.
  Configure the Deny access to this computer from the network user rights setting for the Vendors global group.
• B.Create a new Group Policy Object (GPO) and link it to the ConfidentialFileServers OU.
  Configure the Audit object access failure audit policy setting.
• C.On each shared folder on the three file servers, add the Vendors global group to the
  Auditing tab.
  Configure Failed Full control setting in the AuditingEntry dialog box.
• D.Create a new Group Policy Object (GPO) and link it to the ConfidentialFileServers OU.
  Configure the Audit privilege use Failure audit policy setting.
• E.On each shared folder on the three file servers, add the three servers to the Auditing
  tab. Configure Failed Full control setting in the AuditingEntry dialog box.