|
||||||||||||
Home
Tutorials
Exam Formatter
Upload
FAQ
Contact
|
||||||||||||
|
Practice Exams:
Microsoft
Cisco
CompTIA
RedHat
Citrix
|
||||||||||||
|
HP
IBM
CheckPoint
CIW
LPI
Novell
VMware
CWNP
EXIN
Other
|
||||||||||||
|
||||||||||||
|
It is still valid...
I have passed today with 876
Thank you very much.
I went back two weeks ago: two first questions I learned from Anonymous 468q.vce and the rest of FixedAnswers 468q.vce and I knew them perfectly, four new questions and got 735.
Dump 70% good
You should not go to lower the number of questions to learn
And correct the answers
You plan to add users from fabrikam.com to groups in contoso.com.
You need to identify which group you must use to assign users in fabrikam.com access to the shared folders in contoso.com.
To which group should you add the users?
Group 3: Security Group - Global.
Group 5: Security Group - Universal.
Which One Is Right (Universal Or Global)?? can anyone verify !!
http://technet.microsoft.com/en-us/library/cc732590%28v=ws.10%29.aspx
see my response in the fixed thread.
Am I thinking too much like microsoft. the question does not ask about changing group membership. the question is asking how to apply a solution.
yes, you would need to plan and create your security groups in advance.
F - Q18
Replicate new user
Current: A. Active directory sites and services
Should be: C. Repadmin
the question is:
Your network contains two Active Directory forests named contoso.com and fabrikam.com. Each forest contains one domain. A two-way forest trust exists between the forests.
You plan to add users from fabrikam.com to groups in contoso.com.
You need to identify which group you must use to assign users in fabrikam.com access to the shared folders in contoso.com.
Planning is to assign user from fabrikam to a group present in contoso.
If you create global group in contoso, you can assign only user of same domain, in this case contoso, if you create a group Domain local in contoso, you can assign user from fabrikam .
According to this -
http://technet.microsoft.com/en-us/library/cc739505%28v=ws.10%29.aspx
Only CA administrators and certificate managers are assigned by using the Certification Authority snap-in. To change the permissions of a user or group, you must change the user's security permissions, group membership, or user rights.
My understanding is the only way to do this is by using users and computers or group policy to change the user or group membership.
exam G Q37
Both questions
You need to ensure that all of the members of a group named Group1 can view the event log entries for Certificate Services.
My answer for both, (same question, different answers is CA Certification Authority)
that is where you configure permissions and roles for the CA.
refer to
http://www.kurtdillard.com/StudyGuides/70-640/6.html (1/3 deep into the article)
Figure 6: Configuring CA Permissions.
Can someone confirm if the logic is correct.
If you want me to add corrections please use the same format. It makes it much easier for me to process.
Much thanks :)
EXAM G:
Q8: B. [Repadmin] http://technet.microsoft.com/en-us/library/cc835086(v=ws.10).aspx
EXAM I:
Q18: ???
------------------------------------------------------------
EXAM J:
Q18: C. [Group 3: Security Group - Global.]
Q24: A. [Active Directory Sites And Services console]
Q37: A. [Enable the Audit directory service access setting in the Default Domain Controllers Policy Group Policy Object.] http://technet.microsoft.com/en-us/library/cc731607(v=WS.10).aspx
------------------------------------------------------------
EXAM K:
Q11: D. [Enable loopback processing in merge mode.]
Q31: C. [Repadmin]
Q41: D. [Set-ADForest]
------------------------------------------------------------
EXAM L:
Q3: B,D,E [!@#$1234ABCD/1-2-3-4-5-a-b-c-e/%%PASS1234%%]
Q5: D. [Enable-ADOptionalFeature] http://technet.microsoft.com/en-us/library/dd379481(v=ws.10).aspx
Q13: Seattle > Servers > DC2 >> NTDS Settings << http://www.petri.co.il/configure_a_new_global_catalog.htm
------------------------------------------------------------
It is a selective trust so you have to give group 1 the allowed to authenticate permission to access the shared resource from the server's computer account.
http://technet.microsoft.com/en-us/library/cc732590%28v=ws.10%29.aspx
exam K Q14 Group policy management can assign to those groups
exam G Q37 Users and computers can assign to those groups
about question:
exam K Q14
exam G Q37
can you help me?
You have an Active Directory domain named contoso.com.
You need to view the account lockout threshold and duration for the domain.
Which tool should you use?
Computer Management
Net Config
Active Directory Users and Computers
Gpresult
Net User
Active Directory Users and Computers
Group Policy Management Console (GPMC)
Computer Management
**computer mangement, net config, net user does not have the information.**
leaves, Active Directory Users and Computers
Group Policy Management Console (GPMC) to configure
Gpresult /h gives an HTML report
Active Directory Users and Computers >advanced feature option turned on,attribute editor tab.
(I don't have a server in front of me so I can not confirm that Active directory users and computers is the correct answer)
but my answer would be > Active Directory Users and Computers < for both.
exam G Q37
someone have info?
About question K Q12 is identical of K Q44 but with different answer
@ssniyer
Thanks for help
exam K Q10, I agree with answer (UPN is not the question being asked for the forest), when assigning permissions, they are assigned to the local resource. So talking about about changing computer >account< permissions is wrong. by process of elimination, leaves A: the permissions of the Group1 group
exam K Q29 Start of Authority 2 places where you delegate the person in charge.
b:From DNS Manager, open the properties of the Start of Authority (SOA) record ofcontoso.com, Specify admin1.contoso.com as the responsible person.
c:Open the %SystemrootSystem32DNSContoso.com.dns file by using Notepad and change all instances of "hostmaster@contoso.com" to "adminl@contoso.com"
The difference is the GUI properties is >person.domain.com<, the dns database file is >person@domain.com<
http://technet.microsoft.com/en-us/library/cc816941(v=ws.10).aspx#BKMK_winui
exam K Q12 A:Active Directory Users and Computers, Gpresult /h file.html also works
exam K Q37 b: dsmod http://technet.microsoft.com/en-us/library/cc732406(v=ws.10).aspx
Modifies attributes of one or more existing partitions in the directory.
exam K Q30
A: and D: explanation for D: http://technet.microsoft.com/en-us/library/cc778798(WS.10).aspx
J Q7 answer is correct, you need to activate DS changes auditing. needs to be activated at the command line, the subcategories is the giveaway in this question. if auditing DS changes, it needs to be applied against the default domain controller policy.
J Q37 DS auditing is done in 2 parts.
correct answer is A:Enable the Audit directory service access setting in the Default Domain Controllers Policy Group Policy Object.
turning on the GPO alone would not be a complete answer. You would then need to activate with the command line, auditpol.exe (for DS changes)
Are you planning to upload a fixed version of this?
@Astraor - Exam J, Q7 answer is D because none of the other answers are correct and answer D is the best course of action. I had reasoned the answer for Q37 earlier and I am pretty sure A is the right answer for Q37, that is, Audit Directory Access has to be enabled in Domain Controller Group Policy.
exam J Q7 and Q37
Your company has an Active Directory domain. All servers run Windows Server 2008 R2. Your
company uses an Enterprise Root certification authority (CA) and an Enterprise Intermediate CA.
The Enterprise Intermediate CA certificate expires.
You need to deploy a new Enterprise Intermediate CA certificate to all computers in the domain.
What should you do?
A. Import the new certificate into the Intermediate Certification Store on the Enterprise Root CA
server,
B. Import the new certificate into the Intermediate Certification Store on the Enterprise
Intermediate CA server,
C. Import the new certificate into the Intermediate Certification Store in the Default Domain
Controllers group policy object,
D. Import the new certificate into the Intermediate Certification Store in the Default Domain group
policy object.
you have missed the question 411 from pdf dump
Answer is H
Yes I'm still planning on updating the .vce but only between Monday[Tomorrow] and Wednesday as I want to wait for all the Questions to be corrected and discussed.
If someone else wants to correct them for me your more than welcome to do so and it will be much appreciated. I dont have allot of time on my hands and when I do have some time I study most of the time.
Thanks to everyone contributing with corrections and sources.
If you have input please help.
exam K Q37
exam K Q30
exam K Q42
exam K Q49
thanks for help :)
Seems that this dump have a lot of error...
I'have another doubt
exam K Q10
exam K Q29
@jose123 for question please post exam and question
exam F Q28,exam G Q8,exam J Q24,exam K Q8,exam K Q31
Correct answer for ALL is repadmin /syncall
http://technet.microsoft.com/en-us/library/cc835086(v=ws.10).aspx
In the case where (Exam J, Q24) Repadmin is not an answer option, I will go with AD Sites and Services because it allows to force AD replication across connection objects.
Both DNSLint and nslookup are diagnostic tools. DNSLint is useful to make sure RRs are associated with the right services and nslookup for domain namespace resolution issues. There is no diagnostic need in this question.
Dnscmd is useful to administer/maintain a DNS server or zone using a command line tool. It is also the right tool to create Application Directory Partition. However, I don't see literature to suggest it as a good replication tool for AD integrated zones.
The answer is not B, is D: Active directory sites and services.
you think the same?
managin the zone: the test say B and C. but I was looking and in both cases must write admin1.contoso.com without @, meaning that the answer is: A and B
Answer in test is A: from group police management console..But in other test the answer is d: from windows powershell, run the backup-gpo cmdlt. This is correct for me.
Are you still planning to upload a fixed version of this?
The answer to this does not seem right to me. It says you are in Directory Services Restore Mode (DSRM) so,
I think it should be:
1. Run the Ntdsutil utility
2. Perform a restore of system state data to a time before the OU was deleted
3. ???
and I would think you need to restart in normal mode but that is not a option.
on this dump there are some question apparently identical but with different reply
I'm little confused.
I know that the command DSlint is used for check replication but for replication when is used DNSCMD and when REPADMIN?
the question are:
exam F Q28
exam G Q8
exam J Q24
exam K Q8
exam K Q31
some reply seems wrong
Q14 is a little more tricky. Take a look at - http://technet.microsoft.com/en-us/library/cc732590 - note that Auditing is an Operating System feature and Auditor is an OS role. The question is about viewing event log entries for Certificate Services, which means auditing CS is already enabled. The Role and Activities table in the technet article says - By default the Local Administrator holds the System Audit user right. Therefore by making the Manager group member of the local Administrators group, they can be made to view the event log entries for the CS. This can be achieved through a GPO. Therefore, I would suggest Group Policy Management as the answer.
Sorry
exam K Q27 correct reply seems D not E
exam K Q37 correct reply seems D not A
exam K Q48 correct reply seems B not C
Exam K, Q14
Exam K, Q31
Thanks in advance
Exam K, Q18
forest wide UPN Q18 correct answer of B: Set-ADForest
Set-ADForest
Syntax:
To add values:
-UPNSuffixes @{Add=value1,value2,...}
To remove values:
-UPNSuffixes @{Remove=value3,value4,...}
To replace values:
-UPNSuffixes @{Replace=value1,value2,...}
To clear all values:
-UPNSuffixes $null
The GUI tool for UPN modifications is Active Directory Domains and Trusts.
http://technet.microsoft.com/en-us/library/cc772007.aspx
Exam K, Q41
same scenario UPN to multiple domains in the same forest
correct answer is D:Set-ADForest
forest wide UPN
UPN works at win2k level
correct answer is A: Active Directory Sites and Services
http://technet.microsoft.com/en-us/library/cc772007.aspx
correct answer is group A because Domain Local Group Can have member from other trusted domain but is visible on one domain. Global group is visible on multiple domain but can have member only from the same domain
cheerz
Active Directory recycle Bin is activated by
D: Enable-ADOptionalFeature
http://technet.microsoft.com/en-us/library/dd379481(v=ws.10).aspx
hot spot answer is
Seattle > Servers > DC2 >> NTDS Settings <<
http://www.petri.co.il/configure_a_new_global_catalog.htm
The DNS zone for contoso.com is Active Directory-integrated.
You deploy a read-only domain controller (RODC) named R0DC1. You install the DNS Server server role on R0DC1.
You discover that R0DC1 does not have any DNS application directory partitions.
You need to ensure that R0DC1 has a copy of the DNS application directory partition of contoso.com.
What should you do? (Each correct answer presents a complete solution. Choose two.)
A. From DNS Manager, right-click RODC1 and click Create Default Application Directory Partitions.
B. Run ntdsutil.exe. From the Partition Management context, run the create nc command.
C. Run dnscmd.exe and specify the /createbuiltindirectorypartitions parameter.
D. Run ntdsutil.exe. From the Partition Management context, run the add nc replica command.
E. Run dnscmd.exe and specify the /enlistdirectorypartition parameter.
Answer: A,D
I think the answer should be D, E
http://technet.microsoft.com/en-us/library/cc742490%28v=ws.10%29.aspx
A corporate network includes an Active Directory-integrated zone. All DNS servers that host the zone are domain controllers. You add multiple DNS records to the zone. You need to ensure that the new records are available on all DNS servers as soon as possible. Which tool should you use?
A. Ntdsutil
B. Dnscmd
C. Repadmin
D. Nslookup
answer: D
Exam L Question 13
A.**** is incorrect it must be D.****
Thanks
We need all the help we can get. I'm still new to network administration, I only have 1 and 1/2 years experience from doing Microsoft courses and my A+ and Network+
@Everyone This dump is very valid and you will pass your test if you study it well. Some of the questions are incorrect but not enough of them to let you fail. You need to get more than 15 question incorrect to fail your test. Good Luck
Please check if the Q48 krom K shouldn't be answer" Configure DC4 as a preferead bridgehed.." ? I think it's the correct because if you use prefered bridgehead nothing else replicates changes. Chech it if you can ;)
Thanks I will go check on technet and do revision on those questions.
@Mar
Thanks for pointing that one out.
A. 1-2-3-4-5-a-b-c-e
D. 123456!@#$%^ Must be: E. %%PASS1234%%
F. !@#$1234ABCD
Letters, numbers and special characters.
The correct should be B,D,E not A because in A you use only 2 types of characters :)
exam K Q10
exam K Q11
exam L Q5
exam L Q13
the reply for those question seems wrong
Chad, please let us know if this dump is valid
does it have the correct answers of new questions or like 461q dump
I am from south africa and taking the exam on thursday, I will keep everyone posted.
This dump is a combination of "InfiniteKewl " and the new questions from the latest "pass4sure.pdf" contributed by "Anonimo".
I added Exam K and L with a total of 65 new questions. I'm not sure but there might be a few repeated questions from previous exams and I apologise for this as I created the ".vce" ASAP after the ".pdf" was shared with us late at night.
Drag & Drop and Hot Area questions are fully interactive and I corrected Question 8 from Exam G from B.repadmin to H.dnscmd. ref: http://technet.microsoft.com/en-us/library/cc778513(WS.10).aspx
Good Luck with your exam and please reply here on how it went as I'm also almost writing my exam.. :P