显示标签为“070-649”的博文。显示所有博文
显示标签为“070-649”的博文。显示所有博文

2013年9月9日星期一

Microsoft certification 070-649 exam training methods

To pass the Microsoft 070-649 exam is a dream who are engaged in IT industry. If you want to change the dream into reality, you only need to choose the professional training. IT-Tests.com is a professional website that providing IT certification training materials. Select IT-Tests.com, it will ensure your success. No matter how high your pursuit of the goal, IT-Tests.com will make your dreams become a reality.

Selecting IT-Tests.com can 100% help you pass the exam. According to Microsoft 070-649 test subjects' changing, we will continue to update our training materials and will provide the latest exam content. IT-Tests.com can provide a free 24-hour online customer service for you . If you do not pass Microsoft certification 070-649 exam, we will full refund to you.

IT-Tests.com Microsoft 070-649 exam information is proven. We can provide the questions based on extensive research and experience. IT-Tests.com has more than 10 years experience in IT certification 070-649 exam training, including questions and answers. On the Internet, you can find a variety of training tools. IT-Tests.com 070-649 exam questions and answers is the best training materials. We offer the most comprehensive verification questions and answers, you can also get a year of free updates.

Our latest training material about Microsoft certification 070-649 exam is developed by IT-Tests's professional team's constantly study the outline. It can help a lot of people achieve their dream. In today's competitive IT profession, if you want to stabilize your own position, you will have to prove your professional knowledge and technology level. Microsoft certification 070-649 exam is a very good test to prove your ability. If you have a Microsoft 070-649 certification, your work will have a lot of change that wages and work position will increase quickly.

Exam Code: 070-649
Exam Name: Microsoft (TS: Upgrading Your MCSE on Windows Server 2003 to Windows Server 2008, Technology Specialist)
Free One year updates to match real exam scenarios, 100% pass and refund Warranty.
Total Q&A: 250 Questions and Answers
Last Update: 2013-09-09

You just need to get IT-Tests's Microsoft certification 070-649 exam exercises and answers to do simulation test, you can pass the Microsoft certification 070-649 exam successfully. If you have a Microsoft 070-649 the authentication certificate, your professional level will be higher than many people, and you can get a good opportunity of promoting job. Add IT-Tests's products to cart right now! IT-Tests.com can provide you with 24 hours online customer service.

070-649 (TS: Upgrading Your MCSE on Windows Server 2003 to Windows Server 2008, Technology Specialist) Free Demo Download: http://www.it-tests.com/070-649.html

NO.1 Your network contains a server named Server1 that runs Windows Server 2008 R2. Server1 has the
Windows Deployment Services (WDS) server role and the Windows Automated Installation Kit (Windows
AIK)installed. You create a new x86 Microsoft Windows Preinstallation Environment (Windows PE) image
and add it as a boot image to Server1. You run the Create Capture Image wizard and receive the following
error message: "The Windows Deployment Services Image Capture Wizard could not be located in the
specified Windows PE image." You need to ensure that you can create a capture image by using the
Create Capture Image wizard. What should you do first?
A. Create an x64 Windows PE image and add the image to Server1 as a boot image.
B. Add a new boot image to Server1 and specify the Sources\Boot.wim file from the Windows Server
2008 R2 installation media.
C. Mount the Windows PE boot image and add the contents of the% program Files%\Windows
AIK\Tools\amd64 folder to the image.
D. Mount the Windows PE boot image and add the contents of the %program Files%\Windows
AIK\Tools\PE Tools folder to the image.
Answer: B

Microsoft test   070-649   070-649   070-649   070-649

NO.2 Your network contains two servers.
The servers are configured as shown in the following table.
You need to limit the display quality of Remote Desktop connections. What should you do?
A. Create a Remote Desktop resource allocation policy (RD RAP) on Server2.
B. Create a Windows System Resource Manager (WSRM) resource allocation policy on Server1.
C. Edit the properties of the RDP-Tcp connection on Server1.
D. Edit the properties of the Remote Desktop connection authorization policy (RD CAP) on Server2.
Answer: C

Microsoft questions   070-649   070-649   070-649   070-649   070-649

NO.3 You have a test lab that contains 20 client computers and a server named Server1. The client
computers run Windows 7. Server1 runs Windows Server 2008 Service Pack 2 (SP2). You install the Key
Management Service (KMS) on Server1. You need to ensure that the client computers can successfully
activate by using Server1. What should you do?
A. Upgrade Server 1 to Windows Server 2008 R2.
B. Deploy five additional client computers that run Windows 7.
C. On each client computer, run slmgr.vbs /rearm.
D. On Server1, restart the Windows Activation Technologies service.
Answer: B

Microsoft pdf   070-649 study guide   070-649 exam

NO.4 Your network contains a server named Server1 that has the Hyper-V server role installed. Server1 hosts
a virtual machine (VM) named VM1. You add an additional hard disk to Server1. The hard disk is
configured as a basic disk. You need to configure VM1 to use the new hard disk as a pass-through disk.
What should you do before you configure the pass-through disk?
A. Create a simple volume.
B. Take the new hard disk offline.
C. Convert the new hard disk to a GPT disk.
D. Convert the new hard disk to a dynamic disk.
Answer: B

Microsoft   070-649   070-649   070-649   070-649 practice test

NO.5 Your network contains a server named Server1 that runs Windows Server 2008 R2. You plan to create
an image of Server1 to deploy to additional servers. You need to identify how many more times you can
rearm the Windows activation clock. What should you run on Server1?
A. msinfo32.exe
B. slmgr.vbs /dlv
C. slui.exe
D. winrm.vbs enumerate
Answer: B

Microsoft   070-649   070-649   070-649 exam simulations   070-649 exam simulations

NO.6 Your network contains two servers named Server1 and Server2 that run Windows Server 2008 R2.
Server1 and Server2 have the Hyper-V server role and the Failover Clustering feature installed. You
deploy a new virtual machine (VM) named VM1 on Server1.You need to ensure that VM1 is available if
one of the Hyper-V servers fails. What should you do?
A. Install the Network Load Balancing (NLB) feature on VM1.
B. Install the Network Load Balancing (NLB) feature on Server1.
C. Install the Failover Clustering feature on VM1. From Failover Cluster Manager on VM1, click Configure
a Service or Application.
D. From Failover Cluster Manager on Server1, click Configure a Service or Application.
Answer: D

Microsoft dumps   070-649 exam simulations   070-649 study guide   070-649 dumps

NO.7 Your network contains a server named Server1 that runs Windows Server 2008 R2. Server1 has the
following Remote Desktop Services (RDS) role services installed: Remote Desktop Session Host (RD
Session Host) Remote Desktop Web Access (RD Web Access) You publish 10 Remote App programs on
Server1 by using RD Web Access. You need to ensure that when users log on to the RD Web Access
page, they see only the Remote App programs assigned to them.
What should you modify from Remote App Manager?
A. the properties of each Remote App program
B. the RD Gateway Settings
C. the RDP Settings
D. the RD Session Host Server Settings
Answer: A

Microsoft practice test   070-649 pdf   070-649 questions   070-649 demo   070-649 test questions

NO.8 Your network contains three servers that run Windows Server 2008 R2. The servers are configured as
shown in the following table.
Server1 has Remote Desktop Services Per Device client access licenses (RDS Per Device CALs)
installed. Server2 and Server3 are members of a Remote Desktop Connection Broker (RD Connection
Broker) farm. Four months after Server2 and Server3 are deployed, you discover that users can no longer
establish Remote Desktop sessions on Server3. You verify that Server3 is online and that all required
services on Server3 run properly. You verify that the users can establish Remote Desktop sessions on
Server2. You need to ensure that the users connecting to the RD Connection Broker farm can establish
sessions on Server3. What should you do?
A. On Server3, enable dedicated farm redirection.
B. On Server3, configure the Remote Desktop licensing settings.
C. On Server1, install additional RDS Per Device CALs.
D. On Server1, run the Manage RDS CALs wizard and click the Migrate action.
Answer: B

Microsoft answers real questions   070-649   070-649 exam simulations

NO.9 Your network contains a server named Server1 that runs Windows Server 2008 R2. Server1 has the
Remote Desktop Session Host (RD Session Host) role service installed. You need to ensure that Remote
Desktop users can use the user interface elements of Windows Aero. What should you do on Server1?
A. Change the display settings.
B. Add the Desktop Experience feature.
C. Install a DirectX 10 compliant video adapter.
D. Add the Quality Windows Audio Video Experience feature.
Answer: B

Microsoft certification   070-649 exam simulations   070-649

NO.10 Your network contains a server named Server1 that runs Windows Server 2008 R2. Server1 has the
Hyper-V server role installed. Server1 hosts a virtual machine (VM) named VM1. You take a snapshot of
VM1 at 05:00 and at 19:00. You use Hyper-V Manager to delete the snapshot taken at 05:00. You need to
ensure that the files created by the 05:00 snapshot are deleted from the hard disk on Server1. What
should you do?
A. At the command prompt, run the rmdir.exe command.
B. From Windows Power Shell, run the Remove-Item cmdlet.
C. From the Hyper-V Manager console, shut down VM1.
D. From the Hyper-V Manager console, right-click VM1 and click Revert.
Answer: C

Microsoft   070-649 answers real questions   070-649   070-649 answers real questions   070-649

NO.11 Your network contains a server named Server1. Server1 has the Remote Desktop Session Host (RD
Session Host) role service installed. You need to ensure that when a user disconnects a Remote Desktop
connection, the connection is forcibly terminated after 30 minutes. Which RDP-Tcp settings should you
configure?
A. Client Settings
B. Environment
C. Log on Settings
D. Sessions
Answer: D

Microsoft questions   070-649   070-649 demo

NO.12 Your network contains an Active Directory domain named contoso.com. All servers run Windows Server
2008 R2. Routers on the network support multicast transmissions. A server named Server1 has the
Windows Deployment Services (WDS) server role installed. A custom Windows 7 image is available for
download from Server1. You need to deploy the image to 100 new computers by using multicast. The
solution must prevent computers that use low-bandwidth connections from slowing the deployment to
computers that use high-bandwidth connections. What should you do.?
A. Enable Auto-Cast.
B. Enable Scheduled-Cast.
C. From the WDS server properties, adjust the Transfer Settings.
D. From the WDS server properties, modify the Multicast IP Address settings.
Answer: C

Microsoft pdf   070-649 answers real questions   070-649   070-649 test answers   070-649 certification training

NO.13 Your network contains a Web server that runs Windows Server 2008 R2. Remote management is
configured for Internet Information Services (IIS). From IIS Manager Permissions, you add a user to a
Web site. You need to prevent the user from using Internet Information Services (IIS) Manager to modify
the authorization rules of the Web site. Which settings should you configure?
A. Authorization Rules
B. Feature Delegation
C. IIS Manager Permissions
D. IIS Manager Users
Answer: B

Microsoft   070-649 certification training   070-649

NO.14 Your network contains a server named Server1 that runs Windows Server 2008 R2. Server1 has the
Remote Desktop Gateway (RD Gateway) role service installed. You add the Domain Users group to a
connection authorization policy named TS_CAP_01. You need to ensure that only client computers that
have Windows Firewall enabled can connect to Remote Desktop resources through the RD Gateway.
What should you do?
A. From Remote Desktop Gateway Manager, modify the properties of the TS_RAP_01 resource
authorization policy.
B. From Remote Desktop Gateway Manager, modify the properties of the TS_CAP_01 connection
authorization policy.
C. From the Network Policy Server console, modify the properties of the TS_CAP_01 network policy.
D. From the Network Policy Server console, modify the properties of the TS GATEWAY AUTHORIZATION
POLICY connection request policy.
Answer: C

Microsoft exam   070-649 test answers   070-649 test answers   070-649

NO.15 Your network contains two standalone servers named Server1 and Server2. Server1 has Microsoft
SQL Server 2008 Reporting Services installed. Server2 has the SMTP Server feature installed. You
configure the Reporting Services on Server1 to send reports by using Server2. You need to ensure that
Server2 sends the reports. What should you do on Server2?
A. Configure a smart host.
B. Configure TLS encryption.
C. Modify the Relay restrictions settings.
D. Modify the Connection control settings.
Answer: C

Microsoft answers real questions   070-649   070-649 questions

NO.16 Your network contains an Active Directory domain. The domain contains two servers named Server1
and Server2. You connect Server1 and Server2 to a logical unit number (LUN) on a Storage Area Network
(SAN). You need to ensure that you can use the LUN in a failover cluster. What should you do?
A. From Server Manager, run the Best Practices Analyzer.
B. From File Server Resource Manager, generate a storage report.
C. From Failover Cluster Manager, run the Validate a Configuration Wizard.
D. From Share and Storage Management, verify the advanced settings of the LUN.
Answer: C

Microsoft dumps   070-649 answers real questions   070-649   070-649 test answers   070-649 questions

NO.17 Your network contains a server that has the Remote Desktop Session Host (RD Session Host) role
service installed. You need to increase the bandwidth that is allocated for printing and for file transfers
between the RD Session Host server and the Remote Desktop clients. What should you do?
A. On the server, modify the RDP-Tcp settings.
B. On the server, modify the Flow Control Channel Band width registry setting.
C. On the clients, modify the Flow Control Display Band width registry setting.
D. On the clients, modify the Local Resources settings of the Remote Desktop connections.
Answer: B

Microsoft exam dumps   070-649   070-649   070-649 test questions   070-649

NO.18 You manage a member server that runs Windows Server 2008 R2. The server has the Web Server (IIS)
server role installed. The Web server hosts a Web site named Intranet1. Only internal Active Directory
user accounts have access to the Web site. The authentication settings for Intranet1 are configured as
shown in the exhibit. (Click the Exhibit button.)
You need to ensure that users authenticate to the Web site by using only the Microsoft Challenge
Handshake Authentication Protocol version 2 (MS-CHAPv2) encrypted Active Directory credentials.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
A. Add the Digest Authentication role service and the URL Authorization role service to the server.
B. Add the Windows Authentication roleserviceto IIS.Configure the Windows Authentication setting to
Enabled in the Intranet1 properties.
C. Configure the Basic Authentication setting to Disabled in the Intranet1 properties.
D. Configure the Default domain field for the Basic Authentication settings on Intranet1 by adding the
name of the Active Directory domain.
E. Configure the Basic Authentication setting to Disabled and the Anonymous Authentication setting to
Enabled in the Intranet1 properties.
Answer: BC

Microsoft   070-649   070-649 test questions   070-649 test

NO.19 Your network contains three servers that run Windows Server 2008 R2. The servers are configured as
shown in the following table.
Server1 and Server2 are members of an RD Session Host server farm named farm1.contoso.com. You
configure the RD Connection Broker role service on Server3 to support farm1.contoso.com. You need to
create DNS records to support RD Connection Broker load balancing. Which record or records should
you create for farm1.contoso.com?
A. one Alias (CNAME) record
B. one Host (AAAA) record
C. two Host (A) records
D. two service location (SRV) records
Answer: C

Microsoft   070-649 pdf   070-649 test questions

NO.20 Your network contains a server named Server1 that has two volumes named C and D. You add a new
volume. You need to ensure that you can access data on the new volume by using the path D:\data. What
should you do?
A. From Disk Management, create a volume mount point.
B. From Disk Management, attach a virtual hard disk (VHD).
C. At the command prompt, run the diskraid.exe command and specify the /v parameter.
D. At the command prompt, run the dism.exe command and specify the /mount-wim parameter.
Answer: A

Microsoft   070-649   070-649   070-649   070-649 braindump

IT-Tests.com offer the latest CUR-009 Questions & Answers and high-quality LOT-951 PDF Practice Test. Our 70-481 VCE testing engine and 70-321 study guide can help you pass the real exam. High-quality HP0-J62 Real Exam Questions can 100% guarantee you pass the exam faster and easier. Pass the exam to obtain certification is so simple.

Article Link: http://www.it-tests.com/070-649.html

2013年7月27日星期六

Microsoft certification 070-649 070-648 070-647 070-643 070-642 exam free exercises updates

Are you one of them? Are you still worried and confused because of the the various exam materials and fancy training courses exam? IT-Tests.com is the right choice for you. Because we can provide you with a comprehensive exam, including questions and answers. All of these will help you to acquire a better knowledge, we are confident that you will through IT-Tests.com the Microsoft 070-649 070-648 070-647 070-643 070-642 certification exam. This is our guarantee to all customers.


Only to find ways to success, do not make excuses for failure. To pass the Microsoft 070-649 070-648 070-647 070-643 070-642 exam, in fact, is not so difficult, the key is what method you use. IT-Tests.com's Microsoft 070-649 070-648 070-647 070-643 070-642 exam training materials is a good choice. It will help us to pass the exam successfully. This is the best shortcut to success. Everyone has the potential to succeed, the key is what kind of choice you have.


Exam Code: 070-649

Exam Name: Microsoft (TS: Upgrading Your MCSE on Windows Server 2003 to Windows Server 2008, Technology Specialist)

Exam Code: 070-648

Exam Name: Microsoft (TS: Upgrading MCSA on Windows serv 2003 to Windows Serv 2008)

Exam Code: 070-647

Exam Name: Microsoft (Windows Server 2008,Enterprise Administrator)

Exam Code: 070-643

Exam Name: Microsoft (Windows Server 2008 Applications Infrastructure, Configuring)

Exam Code: 070-642

Exam Name: Microsoft (TS: Windows Server 2008 Network Infrastructure, Configuring Certification )

Everyone has their own life planning. Different selects will have different acquisition. So the choice is important. IT-Tests.com's Microsoft 070-649 070-648 070-647 070-643 070-642 exam training materials are the best things to help each IT worker to achieve the ambitious goal of his life. It includes questions and answers, and issimilar with the real exam questions. This really can be called the best training materials.


God wants me to be a person who have strength, rather than a good-looking doll. When I chose the IT industry I have proven to God my strength. But God forced me to keep moving. Microsoft 070-649 070-648 070-647 070-643 070-642 exam is a major challenge in my life, so I am desperately trying to learn. But it does not matter, because I purchased IT-Tests.com's Microsoft 070-649 070-648 070-647 070-643 070-642 exam training materials. With it, I can pass the Microsoft 070-649 070-648 070-647 070-643 070-642 exam easily. Road is under our feet, only you can decide its direction. To choose IT-Tests.com's Microsoft 070-649 070-648 070-647 070-643 070-642 exam training materials, and it is equivalent to have a better future.


070-648 (TS: Upgrading MCSA on Windows serv 2003 to Windows Serv 2008) Free Demo Download: http://www.it-tests.com/070-648.html


NO.1 Your company has a main office and five branch offices that are connected by WAN links. The
company has an Active Directory domain named contoso.com. Each branch office has a member server
configured as a DNS server. All branch office DNS servers host a secondary zone for contoso.com.
You need to configure the contoso.com zone to resolve client queries for at least four days in the event
that a WAN link fails.
What should you do?
A. Configure the Expires after option for the contoso.com zone to 4 days.
B. Configure the Retry interval option for the contoso.com zone to 4 days.
C. Configure the Refresh interval option for the contoso.com zone to 4 days.
D. Configure the Minimum (default) TTL option for the contoso.com zone to 4 days.
Answer: A

Microsoft study guide   070-648 study guide   070-648 test questions   070-648 pdf   070-648

NO.2 Note : This is part of a series of questions that use the same set of answer choices. Each answer choice
may be used once, more than once, or not at all.
Your network contains an enterprise certification authority (CA) that runs Windows Server 2008 R2
Enterprise.
You enable key archival on the CA. The CA is configured to use custom certificate templates for
Encrypted File System (EFS) certificates.
You need to archieve the private key for all new EFS certificates.
Which snap-in should you use?
A. TPM Management
B. Enterprise PKI
C. Active Directory Users and Computers
D. Certificates
E. Group Policy Management
F. Certificate Templates
G. Certification Authority
H. Security Templates
I. Authorization Manager
Answer: F

Microsoft exam dumps   070-648 original questions   070-648 exam prep   070-648 practice test   070-648 original questions

NO.3 You have a domain controller that runs Windows Server 2008 R2 and is configured as a DNS server.
You need to record all inbound DNS queries to the server. What should you configure in the DNS
Manager console?
A. Enable debug logging.
B. Enable automatic testing for simple queries.
C. Enable automatic testing for recursive queries.
D. Configure event logging to log errors and warnings.
Answer: A

Microsoft questions   070-648   070-648 questions   070-648

NO.4 Your company has an Active Directory domain named ad.contoso.com. The domain has two domain
controllers named DC1 and DC2. Both domain controllers have the DNS Server server role installed. You
install a new DNS server named DNS1.contoso.com on the perimeter network. You configure DC1 to
forward all unresolved name requests to DNS1.contoso.com.
You discover that the DNS forwarding option is unavailable on DC2. You need to configure DNS
forwarding on the DC2 server to point to the DNS1.contoso.com server. Which two actions should you
perform? (Each correct answer presents part of the solution. Choose two.)
A. Clear the DNS cache on DC2.
B. Delete the Root zone on DC2.
C. Configure conditional forwarding on DC2.
D. Configure the Listen On address on DC2.
Answer: BC

Microsoft certification training   070-648 exam   070-648 original questions   070-648

NO.5 Your company has two domain controllers that are configured as internal DNS servers. All zones on
the DNS servers are Active Directory-integrated zones. The zones allow all dynamic updates. You
discover that the contoso.com zone has multiple entries for the host names of computers that do not exist.
You need to configure the contoso.com zone to automatically remove expired records.
What should you do?
A. Enable only secure updates on the contoso.com zone.
B. Enable scavenging and configure the refresh interval on the contoso.com zone.
C. From the Start of Authority tab, decrease the default refresh interval on the contoso.com zone.
D. From the Start of Authority tab, increase the default expiration interval on the contoso.com zone.
Answer: B

Microsoft braindump   070-648 exam   070-648   070-648

NO.6 Your network contains an Active Directory domain. You have a server named Server1 that runs
Windows Server 2008 R2. Server1 is an enterprise root
certification authority (CA). You have a client computer named Computer1 that runs Windows 7. You
enable automatic certificate
enrollment for all client computers that run Windows 7. You need to verify that the Windows 7 client
computers can automatically enroll for certificates. Which command should you run on Computer1?
A. certreq.exe -retrieve
B. certreq.exe -submit
C. certutil.exe -getkey
D. certutil.exe -pulse
Answer: D

Microsoft practice test   070-648   070-648 practice test   070-648 exam simulations

NO.7 Your network contains an Active Directory domain. The relevant servers in the domain are configured
as shown in the following table:
You need to ensure that all device certificate requests use the MD5 hash algorithm. What should you do?
A. On Server2, run the Certutil tool.
B. On Server1, update the CEP Encryption certificate template.
C. On Server1, update the Exchange Enrollment Agent (Offline Request) template.
D. On Server3, set the value of the HKLM\Software\Microsoft\Cryptography\MSCEP\HashAlgorithm
\HashAlgorithm registry key.
Answer: D

Microsoft   070-648   070-648 exam dumps

NO.8 Your network contains an Active Directory forest. All domain controllers run Windows Server 2008 R2
and are configured as DNS servers. You have an Active Directory-integrated zone for contoso.com. You
have a UNIX-based DNS server.
You need to configure your Windows Server 2008 R2 environment to allow zone transfers of the contoso.
com zone to the UNIX-based DNS server.
What should you do in the DNS Manager console?
A. Disable recursion.
B. Create a stub zone.
C. Create a secondary zone.
D. Enable BIND secondaries.
Answer: D

Microsoft   070-648   070-648   070-648   070-648   070-648

NO.9 Your network contains an enterprise root certification authority (CA). You need to ensure that a
certificate issued by the CA is valid.
What should you do?
A. Run syskey.exe and use the Update option.
B. Run sigverif.exe and use the Advanced option.
C. Run certutil.exe and specify the -verify parameter.
D. Run certreq.exe and specify the -retrieve parameter.
Answer: C

Microsoft   070-648 dumps   070-648   070-648   070-648 original questions

NO.10 Note : This is part of a series of questions that use the same set of answer choices. Each answer
choice may be used once, more than once, or not at all.
Your network contains an enterprise certification authority (CA) that runs Windows Server 2008 R2
Enterprise.
You have a custom certificate template named Template1. Template1 is published to the CA.
You need to ensure that all of the members of a group named Group1 can enroll for certificates that use
Template1.
Which snap-in should you use?
A. Security Templates
B. Group Policy Management
C. Certificate Templates
D. Certificates
E. TPM Management
F. Active Directory Users and Computers
G. Certification Authority
H. Enterprise PKI
I. Authorization Manager
Answer: C

Microsoft braindump   070-648   070-648 test answers

NO.11 You have a domain controller named DC1 that runs Windows Server 2008 R2. DC1 is configured as a
DNS server for contoso.com.
You install the DNS Server server role on a member server named Server1 and then you create a
standard secondary zone for contoso.com. You configure DC1 as the master server for the zone.
You need to ensure that Server1 receives zone updates from DC1.
What should you do?
A. On Server1, add a conditional forwarder.
B. On DC1, modify the permissions of contoso.com zone.
C. On DC1, modify the zone transfer settings for the contoso.com zone.
D. Add the Server1 computer account to the DNSUpdateProxy group.
Answer: C

Microsoft   070-648 answers real questions   070-648 exam

NO.12 Your network consists of an Active Directory forest that contains two domains. All servers run
Windows Server 2008 R2. All domain controllers are configured as DNS servers. You have a standard
primary zone for dev.contoso.com that is stored on a member server. You need to ensure that all domain
controllers can resolve names from the dev.contoso.com zone. What should you do?
A. On the member server, create a stub zone.
B. On the member server, create a NS record for each domain controller.
C. On one domain controller, create a conditional forwarder. Configure the conditional forwarder to
replicate to all DNS servers in the forest.
D. On one domain controller, create a conditional forwarder. Configure the conditional forwarder to
replicate to all DNS servers in the domain.
Answer: C

Microsoft   070-648 demo   070-648   070-648 exam simulations

NO.13 Your network contains two Active Directory forests named contoso.com and adatum.com. The
functional level of both forests is Windows Server 2008 R2. Each forest contains one domain. Active
Directory Certificate Services (AD CS) is configured in the contoso.com forest to allow users from both
forests to automatically enroll user certificates.
You need to ensure that all users in the adatum.com forest have a user certificate from the contoso.com
certification authority (CA).
What should you configure in the adatum.com domain?
A. From the Default Domain Controllers Policy, modify the Enterprise Trust settings.
B. From the Default Domain Controllers Policy, modify the Trusted Publishers settings.
C. From the Default Domain Policy, modify the Certificate Enrollment policy.
D. From the Default Domain Policy, modify the Trusted Root Certification Authority settings.
Answer: C

Microsoft   070-648   070-648 test questions   070-648 test questions   070-648 exam dumps

NO.14 Your network contains a server that runs Windows Server 2008 R2. The server is configured as an
enterprise root certification authority (CA). You have a Web site that uses x.509 certificates for
authentication. The Web site is configured to use a
many-to-one mapping.
You revoke a certificate issued to an external partner. You need to prevent the external partner from
accessing the Web site. What should you do?
A. Run certutil.exe -crl.
B. Run certutil.exe -delkey.
C. From Active Directory Users and Computers, modify the membership of the IIS_IUSRS group.
D. From Active Directory Users and Computers, modify the Contact object for the external partner.
Answer: A

Microsoft   070-648   070-648 dumps   070-648 certification training   070-648 test questions

NO.15 Note : This is part of a series of questions that use the same set of answer choices. Each answer choice
may be used once, more than once, or not at all.
Your network contains an Active Directory domain. All domain controllers run Windows Server 2008 R2.
You need to compact the Active Directory database.
What should you do?
A. Run the repadmin.exe command.
B. Create a Data Collector Set (DCS).
C. Run the dsamain.exe command.
D. Configure the Active Directory Diagnostics Data Contoller Set (DCS).
E. Run the ntdsutil.exe command.
F. Create custom views from Event Viewer.
G. Run the Get-ADForest cmdlet.
H. Run the dsquery.exe command.
I. Configure subscriptions from Event Viewer.
J. Run the eventcreate.exe command.
Answer: E

Microsoft test   070-648   070-648 practice test   070-648

NO.16 Your network consists of an Active Directory forest that contains one domain. All domain controllers
run
Windows Server 2008 R2 and are configured as DNS servers. You have an Active Directory-integrated
zone. You have two Active Directory sites. Each site contains five domain controllers. You add a new NS
record to the zone. You need to ensure that all domain controllers immediately receive the new NS record.
What should you do?
A. From the DNS Manager console, reload the zone.
B. From the Services snap-in, restart the DNS Server service.
C. From the command prompt, run repadmin /syncall.
D. From the DNS Manager console, increase the version number of the SOA record.
Answer: C

Microsoft   070-648   070-648 exam prep   070-648

NO.17 Your network contains an Active Directory domain. The domain contains two domain controllers named
DC1 and DC2.
You perform a full backup of the domain controllers every night by using Windows Server Backup.
You update a script in the SYSVOL folder. The new script fails to run properly.
You need to restore the previous version of the script in the SYSVOL folder. The solution must minimize
the amount of time required to restore the script.
What should you do first?
A. Run the Restore-ADObject cmdlet.
B. Restore the system state to its original location.
C. Run the NTDSUtil.exe command-line tool.
D. Attach the VHD file created by Windows Server Backup.
Answer: D

Microsoft   070-648 exam simulations   070-648 dumps   070-648   070-648 test questions

NO.18 Your network consists of an Active Directory forest that contains one domain named contoso.com. All
domain controllers run Windows Server 2008 R2 and are configured as DNS servers. You have two
Active Directory-integrated zones: contoso.com and nwtraders.com.
You need to ensure a user is able to modify records in the contoso.com zone. You must prevent the user
from modifying the SOA record in the nwtraders.com zone. What should you do?
A. From the DNS Manager console, modify the permissions of the contoso.com zone.
B. From the DNS Manager console, modify the permissions of the nwtraders.com zone.
C. From the Active Directory Users and Computers console, run the Delegation of Control Wizard.
D. From the Active Directory Users and Computers console, modify the permissions of the Domain
Controllers organizational unit (OU).
Answer: A

Microsoft braindump   070-648   070-648 test answers   070-648 test   070-648 test answers   070-648

NO.19 Your company has a main office and a branch office. The company has a single-domain Active
Directory forest.
The main office has two domain controllers named DC1 and DC2 that run Windows Server 2008 R2. The
branch office has a Windows Server 2008 R2 read-only domain controller (RODC) named DC3. All
domain controllers hold the DNS Server server role and are configured as Active Directory-integrated
zones. The DNS zones only allow secure updates.
You need to enable dynamic DNS updates on DC3.
What should you do?
A. Run the Ntdsutil.exe DS Behavior commands on DC3.
B. Run the Dnscmd.exe /ZoneResetType command on DC3.
C. Reinstall Active Directory Domain Services on DC3 as a writable domain controller.
D. Create a custom application directory partition on DC1. Configure the partition to store Active
Directory-integrated zones.
Answer: C

Microsoft   070-648 braindump   070-648 exam prep   070-648

NO.20 Your company, Contoso, Ltd., has a main office and a branch office. The offices are connected by a
WAN link. Contoso has an Active Directory forest that contains a single domain named ad.contoso.com.
The ad.contoso.com domain contains one domain controller named DC1 that is located in the main office.
DC1 is configured as a DNS server for the ad.contoso.com DNS zone. This zone is configured as
a standard primary zone.
You install a new domain controller named DC2 in the branch office. You install DNS on DC2. You need
to ensure that the DNS service can update records and resolve DNS queries in the event that a WAN link
fails.
What should you do?
A. Create a new stub zone named ad.contoso.com on DC2.
B. Configure the DNS server on DC2 to forward requests to DC1.
C. Create a new secondary zone named ad.contoso.com on DC2.
D. Convert the ad.contoso.com zone on DC1 to an Active Directory-integrated zone.
Answer: D

Microsoft   070-648 exam simulations   070-648 demo   070-648   070-648 questions   070-648

NO.21 Contoso, Ltd. has an Active Directory domain named ad.contoso.com. Fabrikam, Inc. has an Active
Directory domain named intranet.fabrikam.com. Fabrikam's security policy prohibits the transfer of
internal DNS zone data outside the Fabrikam network. You need to ensure that the Contoso users are
able to resolve names from the intranet.fabrikam.com
domain. What should you do?
A. Create a new stub zone for the intranet.fabrikam.com domain.
B. Configure conditional forwarding for the intranet.fabrikam.com domain.
C. Create a standard secondary zone for the intranet.fabrikam.com domain.
D. Create an Active Directory-integrated zone for the intranet.fabrikam.com domain.
Answer: B

Microsoft original questions   070-648   070-648   070-648 answers real questions   070-648

NO.22 Note : This is part of a series of questions that use the same set of answer choices. Each answer choice
may be used once, more than once, or not at all.
Your network contains an Active Directory domain. All domain controllers run Windows Server 2008 R2.
You mount an Active Directory snapshot.
You need to ensure that you can query the snapshot by using LDAP.
What should you do?
A. Run the repadmin.exe command.
B. Create custom views from Event Viewer.
C. Run the eventcreate.exe command.
D. Create a Data Collector Set (DCS).
E. Run the dsamain.exe command.
F. Run the ntdsutil.exe command.
G. Run the dsquery.exe command.
H. Configure the Active Directory Diagnostics Data Collector Set (DCS).
I. Configure subscriptions from Event Viewer.
J. Run the Get-ADForest cmdlet.
Answer: E

Microsoft   070-648 study guide   070-648 test questions

NO.23 Your network consists of an Active Directory forest named contoso.com. All servers run Windows
Server
2008 R2. All domain controllers are configured as DNS servers. The contoso.com DNS zone is stored in
the ForestDnsZones Active Directory application partition. You have a member server that contains a
standard primary DNS zone for dev.contoso.com. You need to ensure that all domain controllers can
resolve names for dev.contoso.com. What should you do?
A. Create a NS record in the contoso.com zone.
B. Create a delegation in the contoso.com zone.
C. Create a standard secondary zone on a Global Catalog server.
D. Modify the properties of the SOA record in the contoso.com zone.
Answer: B

Microsoft   070-648   070-648 test questions

NO.24 You add an Online Responder to an Online Responder Array. You need to ensure that the new Online
Responder resolves synchronization conflicts for all members of the Array. What should you do?
A. From Network Load Balancing Manager, set the priority ID of the new Online Responder to 1.
B. From Network Load Balancing Manager, set the priority ID of the new Online Responder to 32.
C. From the Online Responder Management Console, select the new Online Responder, and then select
Set as Array Controller.
D. From the Online Responder Management Console, select the new Online Responder, and then select
Synchronize Members with Array Controller.
Answer: C

Microsoft   070-648   070-648 study guide   070-648   070-648

NO.25 Note : This is part of a series of questions that use the same set of answer choices. Each answer choice
may be used once, more than once, or not at all.
Your network contains an Active Directory domain. All domain controllers run Windows Server 2008 R2.
You need to create a snapshot of Active Directory.
What should you do?
A. Configure subscriptions from Event Viewer.
B. Create custom views from Event Viewer.
C. Create a Data Collector Set (DCS).
D. Run the dsquery.exe command.
E. Run the dsamain.exe command.
F. Configure the Active Directory Diagnostics Data Controller Set (DCS).
G. Run the repadmin.exe command.
H. Run the ntdsutil.exe command.
I. Run the eventcreate.exe command.
J. Run the GET-ADForest cmdlet.
Answer: H

Microsoft certification   070-648   070-648   070-648 certification training

NO.26 Your company has an Active Directory domain named contoso.com. FS1 is a member server in
contoso. com.
You add a second network interface card, NIC2, to FS1 and connect NIC2 to a subnet that contains
computers in a DNS domain named fabrikam.com. Fabrikam.com has a DHCP server and a DNS server.
Users in fabrikam.com are unable to resolve FS1 by using DNS. You need to ensure that FS1 has an A
record in the fabrikam.com DNS zone. What are two possible ways to achieve this goal?
(Each correct answer presents a complete solution. Choose two.)
A. Configure the DHCP server in fabrikam.com with the scope option 044 WINS/NBNS Servers.
B. Configure the DHCP server in fabrikam.com by setting the scope option 015 DNS Domain Name to the
domain name fabrikam.com.
C. Configure NIC2 by configuring the Append these DNS suffixes (in order): option.
D. Configure NIC2 by configuring the Use this connection's DNS suffix in DNS registration option.
E. Configure the DHCP server in contoso.com by setting the scope option 015 DNS Domain Name to the
domain name fabrikam.com.
Answer: BD

Microsoft   070-648 certification training   070-648   070-648   070-648

NO.27 You have a server named Server1 that has the following Active Directory Certificate Services (AD CS)
role services installed:
-Enterprise root certification authority (CA) -Certificate Enrollment Web Service -Certificate Enrollment
Policy Web Service
You create a new certificate template. External users report that the new template is unavailable when
they request a new certificate. You verify that all other templates are available to the external users. You
need to ensure that the external users can request certificates by using the new template.
What should you do on Server1?
A. Run iisreset.exe /restart.
B. Run gpupdate.exe /force.
C. Run certutil.exe -dspublish.
D. Restart the Active Directory Certificate Services service.
Answer: A

Microsoft original questions   070-648   070-648   070-648   070-648 certification training   070-648

NO.28 You have an enterprise subordinate certification authority (CA). The CA issues smart card logon
certificates. Users are required to log on to the domain by using a smart card. Your company's corporate
security policy
states that when an employee resigns, his ability to log on to the network must be immediately revoked.
An employee resigns. You need to immediately prevent the employee from logging on to the domain.
What should you do?
A. Revoke the employee's smart card certificate.
B. Disable the employee's Active Directory account.
C. Publish a new delta certificate revocation list (CRL).
D. Reset the password for the employee's Active Directory account.
Answer: B

Microsoft certification   070-648 test   070-648   070-648 original questions   070-648   070-648 study guide

NO.29 Note : This is part of a series of questions that use the same set of answer choices. Each answer choice
may be used once, more than once, or not at all.
Your network contains an enterprise certification authority (CA) that runs Windows Server 2008 R2
Enterprise.
You need to approve a pending certificate request.
Which snap-in should you use?
A. Active Directory Users and Computers.
B. Certificate Templates
C. TPM Management
D. Enterprise PKI
E. Authorization Manager
F. Certificates
G. Certification Authority
H. Security Templates
I. Group Policy Management
Answer: G

Microsoft   070-648   070-648   070-648 test

NO.30 Your company has an Active Directory domain named contoso.com. The company network has two
DNS servers named DNS1 and DNS2.
The DNS servers are configured as shown in the following table:
Domain users, who are configured to use DNS2 as the preferred DNS server, are unable to connect to
Internet Web sites.
You need to enable Internet name resolution for all client computers. What should you do?
A. Create a copy of the .(root) zone on DNS1.
B. Update the list of root hints servers on DNS2.
C. Update the Cache.dns file on DNS2. Configure conditional forwarding on DNS1.
D. Delete the .(root) zone from DNS2. Configure conditional forwarding on DNS2.
Answer: D

Microsoft   070-648   070-648 questions   070-648