killtest問題集70-640 (Windows Server 2008 Active Directory. Configuring)は、Active Directory テクノロジ スペシャリストを対象に、分散環境で Active Directory ドメイン サービスの構成、グループ ポリシーの実装、バックアップと復元の実行、および Active Directory 関連の問題を監視しトラブルシューティングを行うための70-640試験の知識とスキルを教授することです。
70-640試験の対象となる主な受講者は、分散環境での AD の実装方法、グループ ポリシーを使用したドメインの保護方法、70-640試験問題なく操作を行うための AD 構成のバックアップ、復元、監視とトラブルシューティングの実行方法の習得を目指す AD テクノロジ スペシャリスト、サーバー管理者、およびエンタープライズ管理者です。
試験コード：70-640
試験名称：Windows Server 2008 Active Directory. Configuring
1.You have a single Active Directory domain.All domain controllers run Windows Server 2008 and are
configured as DNS servers.The domain contains one Active Directory-integrated DNS zone.You need to
ensure that outdated DNS records are automatically removed from the DNS zone.What should you do?
A.From the properties of the zone, modify the TTL of the SOA record.
B.From the properties of the zone, enable scavenging.
C.From the command prompt, run ipconfig /flushdns.
D.From the properties of the zone, disable dynamic updates.
Answer: B
2.Your network consists of a single Active Directory domain.All domain controllers run Windows Server
2008 R2.The Audit account management policy setting and Audit directory services access setting are
enabled for the entire domain.
You need to ensure that changes made to Active Directory objects can be logged.The logged changes
must include the old and new values of any attributes.
What should you do?
A.Run auditpol.exe and then configure the Security settings of the Domain Controllers OU.
B.From the Default Domain Controllers policy, enable the Audit directory service access setting and
enable directory service changes.
C.Enable the Audit account management policy in the Default Domain Controller Policy.
D.Run auditpol.exe and then enable the Audit directory service access setting in the Default Domain
policy.
Answer: A
3.Your company, Contoso, Ltd., has a main office and a branch office.The offices are connected by a
WAN link.Contoso has an Active Directory forest that contains a single domain named ad.contoso.com.
The ad.contoso.com domain contains one domain controller named DC1 that is located in the main
office.DC1 is configured as a DNS server for the ad.contoso.com DNS zone.This zone is configured as a
standard primary zone.
You install a new domain controller named DC2 in the branch office.You install DNS on DC2.
You need to ensure that the DNS service can update records and resolve DNS queries in the event that a
WAN link fails.
What should you do?
A.Create a new stub zone named ad.contoso.com on DC2.
B.Create a new standard secondary zone named ad.contoso.com on DC2.
C.Configure the DNS server on DC2 to forward requests to DC1.
D.Convert the ad.contoso.com zone on DC1 to an Active Directory-integrated zone.
Answer: D
70-640試験の対象となる主な受講者は、分散環境での AD の実装方法、グループ ポリシーを使用したドメインの保護方法、70-640試験問題なく操作を行うための AD 構成のバックアップ、復元、監視とトラブルシューティングの実行方法の習得を目指す AD テクノロジ スペシャリスト、サーバー管理者、およびエンタープライズ管理者です。
試験コード：70-640
試験名称：Windows Server 2008 Active Directory. Configuring
1.You have a single Active Directory domain.All domain controllers run Windows Server 2008 and are
configured as DNS servers.The domain contains one Active Directory-integrated DNS zone.You need to
ensure that outdated DNS records are automatically removed from the DNS zone.What should you do?
A.From the properties of the zone, modify the TTL of the SOA record.
B.From the properties of the zone, enable scavenging.
C.From the command prompt, run ipconfig /flushdns.
D.From the properties of the zone, disable dynamic updates.
Answer: B
2.Your network consists of a single Active Directory domain.All domain controllers run Windows Server
2008 R2.The Audit account management policy setting and Audit directory services access setting are
enabled for the entire domain.
You need to ensure that changes made to Active Directory objects can be logged.The logged changes
must include the old and new values of any attributes.
What should you do?
A.Run auditpol.exe and then configure the Security settings of the Domain Controllers OU.
B.From the Default Domain Controllers policy, enable the Audit directory service access setting and
enable directory service changes.
C.Enable the Audit account management policy in the Default Domain Controller Policy.
D.Run auditpol.exe and then enable the Audit directory service access setting in the Default Domain
policy.
Answer: A
3.Your company, Contoso, Ltd., has a main office and a branch office.The offices are connected by a
WAN link.Contoso has an Active Directory forest that contains a single domain named ad.contoso.com.
The ad.contoso.com domain contains one domain controller named DC1 that is located in the main
office.DC1 is configured as a DNS server for the ad.contoso.com DNS zone.This zone is configured as a
standard primary zone.
You install a new domain controller named DC2 in the branch office.You install DNS on DC2.
You need to ensure that the DNS service can update records and resolve DNS queries in the event that a
WAN link fails.
What should you do?
A.Create a new stub zone named ad.contoso.com on DC2.
B.Create a new standard secondary zone named ad.contoso.com on DC2.
C.Configure the DNS server on DC2 to forward requests to DC1.
D.Convert the ad.contoso.com zone on DC1 to an Active Directory-integrated zone.
Answer: D