POST

New Updated Microsoft MCITP 70-640 Real Exam Questions and Answers Download 381-390

EnsurepassQUESTION 381 Your network contains an Active Directory forest. The forest contains one domain named contoso.com. You discover the following event in the Event log of client computers: “The time provider NtpClient was unable to find a domain controller to use as a time source. NtpClient will try again in %1 minutes.” You need to ensure that the client computers can synchronize their clocks properly. What should you do?   Move the domain naming master role. Restart Active Directory Read more […]

POST

New Updated Microsoft MCITP 70-640 Real Exam Questions and Answers Download 361-370

EnsurepassQUESTION 361 Your network contains an Active Directory domain named contoso.com. You need to ensure that IP addresses can be resolved to fully qualified domain names (FQDNs). Under which node in the DNS snap-in should you add a zone?   To answer, select the appropriate node in the answer area.   Point and Shoot:   Correct Answer:   QUESTION 362 Your company has two domain controllers named DC1 and DC2. DC1 hosts all domain and forest operations master roles. DC1 fails. Read more […]

POST

New Updated Microsoft MCITP 70-640 Real Exam Questions and Answers Download 351-360

EnsurepassQUESTION 351 Your network contains an Active Directory forest. The DNS infrastructure fails. You rebuild the DNS infrastructure. You need to force the registration of the Active Directory Service Locator (SRV) records in DNS. Which service should you restart on the domain controllers?   To answer, select the appropriate service in the answer area.   Point and Shoot:   Correct Answer:     QUESTION 352 Your network contains an Active Directory forest named contoso.com. Read more […]

POST

New Updated Microsoft MCITP 70-640 Real Exam Questions and Answers Download 341-350

EnsurepassQUESTION 341 Your network contains an Active Directory forest. The forest contains domain controllers that run Windows Server 2008 R2. The functional level of the forest is Windows Server 2003. The functional level of the domain is Windows Server 2008. From a domain controller, you need to perform an authoritative restore of an organizational unit (OU). What should you do first?   Raise the functional level of the forest Modify the tombstone lifetime of the forest. Restore Read more […]

POST

New Updated Microsoft MCITP 70-640 Real Exam Questions and Answers Download 331-340

EnsurepassQUESTION 331 Your network contains an enterprise certification authority (CA) that runs Windows Server 2008 R2 Enterprise. You enable key archival on the CA. The CA is configured to use custom certificate templates for Encrypted File System (EFS) certificates. You need to archive the private key for all new EFS certificates. Which snap-in should you use?   Active Directory Users and Computers Authorization Manager Group Policy Management Enterprise PKI Security Templates TPM Read more […]

POST

New Updated Microsoft MCITP 70-640 Real Exam Questions and Answers Download 321-330

EnsurepassQUESTION 321 You install an Active Directory domain in a test environment. You need to reset the passwords of all the user accounts in the domain from a domain controller. Which two Windows PowerShell commands should you run? (Each correct answer presents part of the solution, choose two.)   $ newPassword = * Import-Module ActiveDirectory Import-Module WebAdministration Get- AdUser -filter * | Set- ADAccountPossword – NewPassword $ newPassword – Reset Set- ADAccountPossword – Read more […]

POST

New Updated Microsoft MCITP 70-640 Real Exam Questions and Answers Download 311-320

EnsurepassQUESTION 311 Your network contains a domain controller that runs Windows Server 2008 R2. You run the following command on the domain controller:   dsamain.exe C dbpath c:\$SNAP_201006170326_VOLUMEC$\Windows\NTDS\ntds.dit C ldapport 389 – allowNonAdminAccess   The command fails. You need to ensure that the command completes successfully. How should you modify the command?   Change the value of the -dbpath parameter. Include the path to Dsamain. Change the value of the Read more […]

POST

New Updated Microsoft MCITP 70-640 Real Exam Questions and Answers Download 301-310

EnsurepassQUESTION 301 Your network contains an Active Directory domain named contoso.com. Contoso.com contains a writable domain controller named DC1 and a read-only domain controller (RODC) named DC2. All domain controllers run Windows Server 2008 R2. You need to install a new writable domain controller named DC3 in a remote site. The solution must minimize the amount of replication traffic that occurs during the installation of Active Directory Domain Services (AD DS) on DC3. What should you do Read more […]

POST

New Updated Microsoft MCITP 70-640 Real Exam Questions and Answers Download 291-300

EnsurepassQUESTION 291 You need to purge the list of user accounts that were authenticated on a read-only domain controller (RODC). What should you do?   Run the repadmin.exe command and specify the /prp parameter. From Active Directory Sites and Services, modify the properties of the RODC computer object. From Active Directory Users and Computers, modify the properties of the RODC computer object. Run the dsrm.exe command and specify the -u parameter.   Correct Answer: A     Read more […]

POST

New Updated Microsoft MCITP 70-640 Real Exam Questions and Answers Download 271-280

EnsurepassQUESTION 271 Your network contains an Active Directory domain controller named DC1. DC1 runs Windows Server 2008 R2. You need to defragment the Active Directory database on DC1. The solution must minimize downtime on DC1. What should you do first? At the command prompt, run net stop ntds. At the command prompt, run net stop netlogon. Restart DC1 in Safe Mode. Restart DC1 in Directory Services Restore Mode (DSRM).   Correct Answer: A     QUESTION 272 Your network contains Read more […]

POST

New Updated Microsoft MCITP 70-640 Real Exam Questions and Answers Download 261-270

EnsurepassQUESTION 261 Your network contains two Active Directory forests named contoso.com and nwtraders.com. A two-way forest trust exists between contoso.com and nwtraders.com. The forest trust is configured to use selective authentication. Contoso.com contains a server named Server1. Server1 contains a shared folder named Marketing. Nwtraders.com contains a global group named G_Marketing. The Change share permission and the Modify NTFS permission for the Marketing folder are assigned to the G_Marketing Read more […]

POST

New Updated Microsoft MCITP 70-640 Real Exam Questions and Answers Download 251-260

EnsurepassQUESTION 251 You install a standalone root certification authority (CA) on a server named Server1. You need to ensure that every computer in the forest has a copy of the root CA certificate installed in the local computer’s Trusted Root Certification Authorities store. Which command should you run on Server1?   certreq.exe and specify the -accept parameter certreq.exe and specify the -retrieve parameter certutil.exe and specify the -dspublish parameter certutil.exe and specify Read more […]

POST

New Updated Microsoft MCITP 70-640 Real Exam Questions and Answers Download 241-250

EnsurepassQUESTION 241 Your network contains an Active Directory domain. The domain contains four domain controllers. You modify the Active Directory schema. You need to verify that all the domain controllers received the schema modification. Which command should you run?   dcdiag.exe /a netdom.exe query fsmo repadmin.exe /showrepl * sc.exe query ntds   Correct Answer: C     QUESTION 242 You remotely monitor several domain controllers. You run winrm.exe quickconfig on each Read more […]

POST

New Updated Microsoft MCITP 70-640 Real Exam Questions and Answers Download 231-240

EnsurepassQUESTION 231 You need to back up all of the group policies in a domain. The solution must minimize the size of the backup. What should you use?   the Add-WBSystemState cmdlet the Group Policy Management console the Wbadmin tool the Windows Server Backup feature   Correct Answer: B     QUESTION 232 You have an enterprise root certification authority (CA) that runs Windows Server 2008 R2. You need to ensure that you can recover the private key of a certificate issued Read more […]

POST

New Updated Microsoft MCITP 70-640 Real Exam Questions and Answers Download 221-230

EnsurepassQUESTION 221 You need to create a Password Settings object (PSO). Which tool should you use?   Active Directory Users and Computers ADSI Edit Group Policy Management Console Ntdsutil   Correct Answer: B     QUESTION 222 Your network contains an Active Directory domain. All servers run Windows Server 2008 R2. You need to audit the deletion of registry keys on each server. What should you do?   From Audit Policy, modify the Object Access settings and the Process Read more […]