070-640 試験問題を無料オンラインアクセス

ABC.com has a network that is comprise of a single Active Directory Domain.
As an administrator at ABC.com, you install Active Directory Lightweight Directory Services (AD LDS) on a server that runs Windows Server 2008. To enable Secure Sockets Layer (SSL) based connections to the AD LDS server, you install certificates from a trusted Certification Authority (CA) on the AD LDS server and client computers.
Which tool should you use to test the certificate with AD LDS?

• A.Ldp.exe
• B.ntdsutil.exe
• C.wsamain.exe
• D.None of the above
• E.Active Directory Domain services
• F.Lds.exe

A corporate network includes a single Active Directory Domain Services (AD D5) domain.
The HR department has a dedicated organization unit (OU) named HR. The HR OU has two sub-OUs: HR Users and HR Computers. User accounts for the HR department reside in the HR Users OU. Computer accounts for the HR department reside in the HR Computers OU. All HR department employees belong to a security group named HR Employees. All HR department computers belong to a security group named HR PCs.
Company policy requires that passwords are a minimum of six characters.
You need to ensure that, the next time HR department employees change their passwords, the passwords are required to have at least eight characters. The password length requirement should not change for employees of any other department.
What should you do?

• A.Create a fine-grained password policy and apply it to the HR Employees group.
• B.Create a fine-grained password policy and apply it to the HR Computers OU.
• C.Modify the password policy in the GPO that is applied to the domain.
• D.Modify the password policy in the GPO that is applied to the domain controllers OU.

Your network contains an Active Directory forest named contoso.com. The forest contains a single domain and 10 domain controllers. All of the domain controllers run Windows Server 2008 R2 Service Pack 1 (SP1).
The forest contains an application directory partition named dc=app1,dc=contoso,dc=com. A domain controller named DC1 has a copy of the application directory partition.
You need to configure a domain controller named DC2 to receive a copy of dc=app1,dc=contoso,dc=com.
Which tool should you use?

• A.Active Directory Sites and Services
• B.Dcpromo
• C.Dsamain
• D.Ntdsutil

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 and a domain controller named DC1.
On Server1, you configure a collector-initiated subscription for the Application log of DC1. The subscription is configured to collect all events.
After several days, you discover that Server1 failed to collect any events from DC1, although there are more than 100 new events in the Application log of DC1.
You need to ensure that Server1 collects events from DC1.
What should you do?

• A.On Server1, run wecutil quick-config.
• B.On Server1, run winrm quickconfig.
• C.On DC1, run winrm quickconfig.
• D.On DC1, run wecutil quick-config.

Your network contains an Active Directory domain named adatum.com.
You need to ensure that IP addresses can be resolved to fully qualified domain names (FQDNs).
Under which node in the DNS snap-in should you add a zone?

• A._msdcs.adatum.com
• B.adatum.com
• C.Conditional Forwarders
• D.Reverse Lookup Zones
• E.Forward Lookup Zones