70-640 試験問題を無料オンラインアクセス

Your network contains an Active Directory forest named contoso.com. The forest contains four computers. The computers are configured as shown in the following table.

An administrator creates a script that contains the following commands:

You need to identity which computers can successfully run all of the commands in the script.
Which two computers should you identify? (Each correct answer presents part of the solution. Choose two.)

• A.Computer2
• B.Computer1
• C.Server2
• D.Server1

Your network contains a server named Server1. The Active Directory Rights Management Services (AD RMS) server role is installed on Server1.
An administrator changes the password of the user account that is used by AD RMS.
You need to update AD RMS to use the new password.
Which console should you use?

• A.Active Directory Users and Computers
• B.Local Users and Groups
• C.Active Directory Rights Management Services
• D.Services

A corporate network includes a single Active Directory Domain Services (AD DS) domain. The domain contains 10 domain controllers. The domain controllers run Windows Server 2008 R2 and are configured as DNS servers.
You plan to create an Active Directory-integrated zone.
You need to ensure that the new zone is replicated to only four of the domain controllers.
What should you do first?

• A.Create a new delegation in the ForestDnsZones application directory partition.
• B.Use the ntdsutil tool to add a naming context.
• C.Use the dnscmd tool with the /zoneadd parameter.
• D.Use the ntdsutil tool to modify the DS behavior for the domain.

Your network contains an Active Directory forest named contoso.com.
You need to identify whether a fine-grained password policy is applied to a specific group.
Which tool should you use?

• A.Active Directory Users and Computers
• B.Credential Manager
• C.Group Policy Management Editor
• D.Active Directory Sites and Services

You have a Windows Server 2008 R2 Enterprise Root CA.
Security policy prevents port 443 and port 80 from being opened on domain controllers and on the issuing CA.
You need to allow users to request certificates from a Web interface. You install the Active Directory Certificate Services (AD CS) server role.
What should you do next?

• A.Configure the Online Responder Role Service on a domain controller.
• B.Configure the Certificate Enrollment Web Service role service on a member server.
• C.Configure the Online Responder Role Service on a member server.
• D.Configure the Certificate Enrollment Web Service role service on a domain controller.