MS 70-640

45 Questions | Total Attempts: 497

SettingsSettingsSettings
Microsoft Certification Exam Quizzes & Trivia

MS 70-640 practice exam


Questions and Answers
  • 1. 
    Which of the following are required to create a domain controller successfully? (Choose all that apply.)chapter 1 lesson 1  
    • A. 

      A valid DNS domain name

    • B. 

      A valid NetBIOS name

    • C. 

      A DHCP server to assign an IP address to the domain controller

    • D. 

      A DNS server

  • 2. 
    You are logged on as Administrator to SERVER02, one of four domain controllers in thecontoso.com domain that run Server Core. You want to demote the domain controller. Which of the following is required?chapter 1 lesson 2
    • A. 

      The local Administrator password

    • B. 

      The credentials for a user in the Domain Admins group

    • C. 

      The credentials for a user in the Domain Controllers group

    • D. 

      The address of a DNS server

  • 3. 
    SERVER02 is running Server Core. It is already configured with the AD DS role. You want to add Active Directory Certificate Services (AD CS) to the server. What must you do?chapter 1 lesson 2
    • A. 

      Install the Active Directory Certificate Services role.

    • B. 

      Install the Active Directory Federated Services role.

    • C. 

      Install the AD RMS role.

    • D. 

      Reinstall the server as Windows Server 2008 (Full Installation).

  • 4. 
    You are a support professional for Contoso, Ltd. The domain’s administrators have distributed a custom console with the Active Directory Users and Computers snap-in. When you open the console and attempt to reset a user’s password, you receive Access Denied errors. You are certain that you have been delegated permission to reset passwords for users. What is the best solution?
    • A. 

      Close the custom console and open Server Manager. Use the Active Directory Users and Computers snap-in in Server Manager.

    • B. 

      Close the custom console and open a command prompt. Type dsa.msc.

    • C. 

      Close the custom console, and then right-click the console and choose Run As Administrator. Type the credentials for your secondary administrative account.

    • D. 

      Close the custom console, and then right-click the console and open a command prompt. Use the DSMOD USER command with the –p switch to change the user’s password

  • 5. 
    You have opened a command prompt, using Run As Administrator, with credentials in the Domain Admins group. You use the Dsrm command to remove an OU that had been created accidentally by James, a member of the Administrators group of the domain. You receive the response: Dsrm Failed: Access Is Denied. What is the cause of the error? chapter 2 lesson 2
    • A. 

      You must launch the command prompt as a member of Administrators to perform Active Directory tasks.

    • B. 

      Only Administrators can delete OUs.

    • C. 

      Only the owner of the OU can delete an OU.

    • D. 

      The OU is protected from deletion.

  • 6. 
    You want to enable your help desk to reset user passwords and unlock user accounts. Which of the following tools can be used? (Choose all that apply.)chapter 2 lesson 3
    • A. 

      The Delegation of Control Wizard

    • B. 

      DSACLS

    • C. 

      DSUTIL

    • D. 

      The Advanced Security Settings dialog box

  • 7. 
    You are an administrator at a large university, and you have just been sent an Excel file containing information about 2,000 students who will enter the school in two weeks. You want to create user accounts for the new students with as little effort as possible. Which of the following tasks should you perform? chapter 3 lesson 1
    • A. 

      Create a user account template and copy it for each student.

    • B. 

      Run LDIFDE -i.

    • C. 

      Use CSVDE -i.

    • D. 

      Run the DSADD USER command.

  • 8. 
    You are an administrator at a large university. Which command can be used to delete user accounts for students who graduated? chapter 3 lesson 1
    • A. 

      LDIFDE

    • B. 

      Dsmod

    • C. 

      DEL

    • D. 

      CSVDE

  • 9. 
    You want to create a user object with Windows PowerShell. Which of the following must you do? chapter 3 lesson 2
    • A. 

      Use the Create-User cmdlet.

    • B. 

      Use the NewUser method of ADSI.

    • C. 

      Invoke the Create method of an OU.

    • D. 

      Use the set objUser=CreateObject statement.

  • 10. 
    You want to create a user object with a single command. Which of the following should you do? chapter 3 lesson 2
    • A. 

      Use the Create-Item cmdlet.

    • B. 

      Use the SetInfo method.

    • C. 

      Use the Create method of an OU.

    • D. 

      Use the Dsadd command.

  • 11. 
    Which of the following lines of Windows PowerShell code are necessary to create a user object in the People OU? (Choose all that apply. Each correct answer is a part of the solution.) chapter 3 lesson 2
    • A. 

      $objUser=$objOU.Create("user","CN=Jeff Ford")

    • B. 

      $objUser.SetInfo()

    • C. 

      $objUser=CreateObject("LDAP://CN=Jeff Ford,OU=People,DC=contoso,DC=com")

    • D. 

      $objOU=[ADSI]"LDAP://OU=People,DC=contoso,DC=com"

  • 12. 
    You want to set the Office property of ten users in two different OUs. The users currently have the Office property configured as Miammi. You recently discovered the typographic error and want to change it to Miami. What can you do to make the change? (Choose all that apply.) chapter 3 lesson 3
    • A. 

      Select all ten users by holding the Ctrl key and opening the Properties dialog box.

    • B. 

      Use Dsget and Dsmod.

    • C. 

      Use Dsquery and Dsmod.

    • D. 

      Use Get-Item and Move-Item.

  • 13. 
    You want to move a user from the Paris OU to the Moscow OU. Which tools can you use? (Choose all that apply.)chapter 3 lesson 3
    • A. 

      Move-Item

    • B. 

      The MoveHere method of the Moscow OU

    • C. 

      Dsmove

    • D. 

      Redirusr.exe

    • E. 

      Active Directory Migration Tool

  • 14. 
    A user reports that she is receiving a logon message that states, "Your account is configured to prevent you from using the computer. Please try another computer." What should you do to enable her to log on to the computer? chapter 3 lesson 3
    • A. 

      Click the Log On To button on the Account tab of her user account.

    • B. 

      Click the Allowed To Join Domain button in the New Computer dialog box.

    • C. 

      Use the Dsmove command.

    • D. 

      Give her the right to log on locally, using the local security policy of the computer.

  • 15. 
    A new project requires that users in your domain and in the domain of a partner organization have access to a shared folder on your file server. Which type of group should you create to manage the access to the shared folder?   Chapter 4 lesson 1
    • A. 

      Universal security group

    • B. 

      Domain local security group

    • C. 

      Global security group

    • D. 

      Domain local distribution group

  • 16. 
    Your domain includes a global distribution group named Company Update. It has been used to send company news by e-mail to its members. You have decided to allow all members to contribute to the newsletter by creating a shared folder on a file server. What must you do to allow group members access to the shared folder?   Chapter 4 lesson 1
    • A. 

      Change the group scope to domain local.

    • B. 

      Change the group scope to universal.

    • C. 

      Add the group to the Domain Users group.

    • D. 

      Use Dsmod with the –secgrp yes switch.

  • 17. 
    You have created a global security group in the contoso.com domain named Corporate Managers. Which members can be added to the group? (Choose all that apply.)   Chapter 4 lesson 1
    • A. 

      Sales Managers, a global group in the tailspintoys.com domain, a domain in the contoso. com forest

    • B. 

      Linda Mitchell, a user in the tailspintoys.com domain, a domain in the contoso.com forest

    • C. 

      Jeff Ford, a user in the fabrikam.com domain, a trusted domain of a partner company

    • D. 

      Mike Danseglio, a user in the contoso.com domain

    • E. 

      Sales Executives, a global group in the contoso.com domain

  • 18. 
    Which of the following can be used to remove members from a group? (Choose all that apply.)   Chapter 4 lesson 2
    • A. 

      Remove-Item

    • B. 

      Dsrm

    • C. 

      Dsmod

    • D. 

      D. LDIFDE

    • E. 

      CSVDE

  • 19. 
    You are using Dsmod to add a domain local group named GroupA to a global group named GroupB. You are receiving errors. Which command will solve the problem so that you can then add GroupA to GroupB? (Choose all that apply.)   Chapter 4 lesson 2
    • A. 

      Dsrm.exe

    • B. 

      Dsmod.exe

    • C. 

      Dsquery.exe

    • D. 

      Dsget.exe

  • 20. 
    Your management has asked you to produce a list of all users who belong to the Special Project group, including those users belonging to groups nested into Special Project. Which of the following can you use?   Chapter 4 lesson 2
    • A. 

      Get-Members

    • B. 

      Dsquery.exe

    • C. 

      LDIFDE

    • D. 

      Dsget.exe

  • 21. 
    Your company is conducting a meeting for a special project. The data is particularly confidential. The team is meeting in a conference room, and you have configured a folder on the conference room computer that grants permission to the team members. You want to ensure that team members access the data only while logged on to the computer in the conference room, not from other computers in the enterprise. What must you do?   Chapter 4 lesson 3
    • A. 

      Assign the Allow Read permission to the Interactive group.

    • B. 

      Assign the Allow Read permission to the team group.

    • C. 

      Assign the Deny Traverse Folders permission to the team group.

    • D. 

      Assign the Deny Full Control permission to the Network group.

  • 22. 
    You want to allow a user named Mike Danseglio to add and remove users from a group called Special Project. Where can you configure this permission? Chapter 4 lesson 3
    • A. 

      The Members tab of the group

    • B. 

      The Security tab of Mike Danseglio’s user object

    • C. 

      The Member Of tab of Mike Danseglio’s user object

    • D. 

      The Managed By tab of the group

  • 23. 
    Which of the following groups can shut down a domain controller? (Choose all that apply.)   Chapter 4 lesson 3
    • A. 

      Account Operators

    • B. 

      Print Operators

    • C. 

      Backup Operators

    • D. 

      Server Operators

    • E. 

      Interactive

  • 24. 
    You want to require all new computer accounts created when computers join the domain to be placed in the Clients OU. Which command should you use?   Chapter 5 lesson 1
    • A. 

      Dsmove

    • B. 

      Move-Item

    • C. 

      Netdom

    • D. 

      Redircmp

  • 25. 
    You want to prevent non administrative users from joining computers to the domain. What should you do?   Chapter 5 lesson 1
    • A. 

      Set ms-DS-MachineAccountQuota to zero.

    • B. 

      Set ms-DS-DefaultQuota to zero.

    • C. 

      Remove the Add Workstations To Domain user right from Authenticated Users.

    • D. 

      On the domain, deny the Authenticated Users group the Create Computer Objects permission.

Related Topics
Back to Top Back to top