Free Microsoft 70-640 Exam Dumps Questions & Answers

HOTSPOT
Your network contains an Active Directory domain that has the password policy shown in the following exhibit. (Click the Exhibit button.)

To answer, complete each statement according to the information presented in the exhibit.

Correct Answer:

You need to deploy a read-only domain controller (RODC) that runs Windows Server 2008 R2.
What is the minimal forest functional level that you should use?

• A.Windows 2000
• B.Windows Server 2008 R2
• C.Windows Server 2003
• D.Windows Server 2008

Your network contains an Active Directory domain. The relevant servers in the domain are configured as shown in the following table.

You need to ensure that all device certificate requests use the MD5 hash algorithm. What should you do?

• A.On Server2, run the Certutil tool.
• B.On Server1, update the CEP Encryption certificate template.
• C.On Server1, update the Exchange Enrollment Agent (Offline Request) template.
• D.On Server3, set the value of the HKLM\Software\Microsoft\Cryptography\MSCEP\ HashAlgorithm\HashAlgorithm registry key.

Your network contains an Active Directory domain. The domain contains 1,000 user accounts.
You have a list that contains the mobile phone number of each user. You need to add the mobile number of each user to Active Directory.
What should you do?

• A.From Active Directory Users and Computers, select all of the users, and then modify the properties of the users.
• B.Create a file that contains the mobile phone numbers, and then run csvde.exe.
• C.From Adsiedit, select the CN=Users container, and then modify the properties of the container.
• D.Create a file that contains the mobile phone numbers, and then run ldifde.exe.

Your network contains an enterprise certification authority (CA) that runs Windows Server 2008 R2 Enterprise.
You have a custom certificate template named Template 1. Template1 is published to the CA.
You need to ensure that all of the members of a group named Group1 can enroll for certificates that use Template1.
Which snap-in should you use?

• A.Certification Authority
• B.TPM Management
• C.Group Policy Management
• D.Certificates
• E.Enterprise PKI
• F.Active Directory Users and Computers
• G.Authorization Manager
• H.Security Templates
• I.Certificate Templates