Free Microsoft 070-640 Exam Dumps Questions & Answers

Your network contains an Active Directory forest. The forest contains one domain named contoso.com.
You attempt to create a new child domain and you receive the following error message: "An LDAP read of operational attributes failed."
You need to ensure that you can add a new child domain to the forest.
What should you do?

• A.Move the PDC emulator role.
• B.Move the domain naming master role.
• C.Move the global catalog server.
• D.Move the infrastructure master role.
• E.Move the bridgehead server.
• F.Move the schema master role.
• G.Install a read-only domain controller (RODC).
• H.Move the RID master role.
• I.Restart the Active Directory Domain Services (AD DS) service.
• J.Deploy an additional global catalog server.

Your network contains an Active Directory domain named contoso.com.
You plan to deploy a child domain named sales.contoso.com.
The domain controllers in sales.contoso.com will be DNS servers for sales.contoso.com.
You need to ensure that users in contoso.com can connect to servers in sales.contoso.com by using fully qualified domain names (FQDNs).
What should you do?

• A.Configure an alternate DNS server on all client computers.
• B.Configure root hint servers.
• C.Create a DNS forwarder.
• D.Create a DNS delegation.

Your company has a server that runs an instance of Active Directory Lightweight Directory Service (AD LDS).
You need to create new organizational units in the AD LDS application directory partition.
What should you do?

• A.Use the dsadd OU <OrganizationalUnitDN> command to create the organizational units.
• B.Use the Active Directory Users and Computers snap-in to create the organizational units on the AD LDS application directory partition.
• C.Use the dsmod OU <OrganizationalUnitDN> command to create the organizational units.
• D.Use the ADSI Edit snap-in to create the organizational units on the AD LDS application directory partition.

You are the systems administrator for a medium-sized Active Directory domain.
Currently, the environment supports many different domain controllers, some of which are running Windows NT 4 and others that are running Windows 2003 and Server 2008 R2.
When you are running domain controllers in this type of environment, which of the following types of groups can you not use? (Choose Two)

• A.Domain local groups
• B.Global groups
• C.Computer groups
• D.Universal security groups

ABC.com has a network that is comprise of a single Active Directory Domain.
As an administrator at ABC.com, you install Active Directory Lightweight Directory Services (AD LDS) on a server that runs Windows Server 2008. To enable Secure Sockets Layer (SSL) based connections to the AD LDS server, you install certificates from a trusted Certification Authority (CA) on the AD LDS server and client computers.
Which tool should you use to test the certificate with AD LDS?

• A.None of the above
• B.ntdsutil.exe
• C.Ldp.exe
• D.wsamain.exe
• E.Active Directory Domain services
• F.Lds.exe