Pass Your Microsoft 70-640 Exam Easy!

Get 100% Real Exam Questions, Accurate & Verified Answers By IT Experts

Fast Updates & Instant Download!

Certification Exam: 70-640 (Windows Server 2008 Active Directory, Configuring)

Download Free 70-640 Exam Questions

Exam 70-640 - Windows Server 2008 Active Directory, Configuring
Size: 2.45 MB
Posted Date: Sunday, August 12, 2012
# of downloads: 17
Free Download: This file is outdated. Browse other 70-640 VCE Files
Exam
70-640 - Windows Server 2008 Active Directory, Configuring
Size
2.45 MB
Posted Date
Sunday, August 12, 2012
# of downloads
17
Free Download
This file is outdated. Browse other 70-640 VCE Files
Comments
* The most recent comment are at the top
  • BillyBoy
  • United States
  • Oct 31, 2012

Why is the answer put in Zone file and use DNSSEC? DNSSEC doesn't encrypt the transfer??? Correct answer is put the zone in the forestDNSZone. Answer B just my take

  • Oct 31, 2012
  • BillyBoy
  • United States
  • Oct 31, 2012

OK. you guys are using pass4s pdf files. i agree it must be gpresults for viewing account lockout and and lock threshold. not sure why people are putting AD users and computers

  • Oct 31, 2012
  • Billyboy
  • United States
  • Oct 31, 2012

how do you guys reference test questions by #s? I don't see any test questions number 441? I see test A Qestion 11 and so on. Whats up?

  • Oct 31, 2012
  • Pam
  • Malaysia
  • Aug 25, 2012

Passed on 23rd August with 841. Dump that i studied is :

http://www.examcollection.com/microsoft/Microsoft.Pass4Sures.70-640.v2012-08-19.by.FixedAnswers.468q.vce.file.html

100% valid in Malaysia

  • Aug 25, 2012
  • Pam
  • Malaysia
  • Aug 22, 2012

The key word for the quest 443 & 212 is - You need to export the token-signing certificate from Server1, and then import the certificate to Server2.

The answer is Personal Information Exchange PKCS #12 (.pfx).

Explanation: http://technet.microsoft.com/en-us/library/cc784075(v=ws.10).aspx

Every federation server in an Active Directory Federation Services (ADFS) server farm must have access to the private key of the token-signing certificate. If you are implementing a server farm of federation servers that share a single, exportable private key certificate that is issued by an enterprise certification authority (CA), the private key portion of the existing token-signing certificate must be exported to make it available for importing into the certificate store on the new server.

  • Aug 22, 2012
  • Astraor
  • Italy
  • Aug 21, 2012

@Majer
are you sure about question 441?

  • Aug 21, 2012
  • Astraor
  • Italy
  • Aug 21, 2012

look this link:

http://technet.microsoft.com/en-us/library/hh341466(v=ws.10).aspx

the questions talk about ADFS 2.0 and in this case for work you need to export also the private key

  • Aug 21, 2012
  • Astraor
  • Italy
  • Aug 21, 2012

About ADFS certificate on question 443 and 212 look those links

http://technet.microsoft.com/it-it/library/cc737522(v=ws.10).aspx
http://technet.microsoft.com/en-us/library/cc784075(v=ws.10).aspx

I thinks all depends if you want export public key or also personal key

  • Aug 21, 2012
  • Majer
  • United States
  • Aug 21, 2012

199 - I agree should be A

308 - I agree it should be B - this question is repeated a few times in the practice tests and I think they are all repadmin

406 - B - When a user principal name (UPN) is used at logon and the forest has more than one domain, a global catalog server is required to resolve the name.

http://technet.microsoft.com/en-us/library/cc728188%28v=ws.10%29.aspx

419 - D - dnscmd /zoneadd creates the zone -
http://technet.microsoft.com/en-us/library/cc772069%28v=ws.10%29.aspx

444 - B - open the Active Directory Schema snap-in, view the desired attribute properties, and select (or clear) the Attribute is copied when duplicating user check box
http://technet.microsoft.com/en-us/library/cc771231.aspx

454 - A - Yes global catalog


For 443 - the only references I found was in the 70-640 training kit that used DER Encoded Binary X.509 in their directions to export the key. Not 100% sure on why but my logic is if it is used in the book then it would be the answer on the test.

@ KT You have to set the filter to Constructed to see the lockout threshhold attribute in Users and computers.

@ Tristan - you want to set the preferred bridgehead server on the only server that you want to replicate outside the site - choose the one that is grouped with other servers in the same site - I believe for that question it is DC 1 - there is another question that you have to choose DC 4

  • Aug 21, 2012
  • Tristan
  • South Africa
  • Aug 20, 2012

I see conflicting answers for this question, can some please elaborate on what the real answer really is. Please take note that this question has a exhibit which I obviously can't show here. The question reads as follow:

You need to ensure that DC1 and DC4 are the only servers that replicate Active Directory changes between sites. What should you do?

A. Configure DC1 as a preferred bridgehead server for IP transport.
B. Configure DC4 as a preferred bridgehead server for IP transport.
C. From DC4 server object, create a connection object for DC1.
D. From DC1 server object, create a connection object for DC4.

(Some dumps say the answer is C while others say its A. Which is really the right answer here??)

  • Aug 20, 2012
  • KT
  • Norway
  • Aug 20, 2012

@Majer
199 - Should be A?
444 - B? It has to be?
406 - B, Global catalog?
454 - A, Global catalog?
419 - How can: D be the right, when you have to create the zone first?
308 - B. IT should be repadmin?

did you find anything more on question 443?
AS you said i think Q 440 - D its the right answare, because of the seriel nr are the same on both zone
415 and 457, i dont understand how i could be User and computers. I have search through Attrubute Editors. Did not find anything about

account lockout threshold. I Found this about gpresult: http://www.redspin.com/blog/2011/09/02/viewing-gpos-on-the-commandline/ -see

bottom of page

  • Aug 20, 2012
  • Majer
  • United States
  • Aug 19, 2012

This is what I think are the correct answers:

260 - A is correct - http://technet.microsoft.com/en-us/library/cc732443%28v=ws.10%29.aspx

272 - B - Correct - On a stand-alone or member server, you would enable auditing by using Local Security Policy or a GPO scoped to the server - MCTS Self Paced training Kit Chap 7 pg 372

301 - C - Backup system state - GPMC does not back up the links -
http://social.technet.microsoft.com/Forums/en-US/winserverGP/thread/c361339f-7266-4991-8309-c957a123a455/

378 - D - this is disabled by default so you have to run -
auditpol /set/subcategory:"directory service changes" /success:enable - to enable this, other choices won't work.

http://technet.microsoft.com/en-us/library/cc731607%28v=ws.10%29.aspx

395 - A is correct - scavenging has to be enabled in 2 places - on the zone and on the server for it to work.

411 - H - Search for preference item level targeting - http://technet.microsoft.com/en-us/library/cc733022.aspx

If this was Windows server 2003 I would say WMI as that was the only way to do it back then but for 2008 you would use the new Preferences. Unfair question as you can complete this with both options.

412 - C - Users and computers - Enable Advanced features - Select domain - click on properties - view in attributes tab.

415 - G - Need to assign the auditor role or make the managers local admins - Users and computers would be best but The only option I see here to allow that is Group Policy management -
http://technet.microsoft.com/en-us/library/cc732590%28v=ws.10%29.aspx

425 - A - I agree - Correct

439 - B, C - Correct - in GUI use Dot instead of @ and in the text file use @

457 - A - Users and computers - Password replication policy tab - click advanced and select "accounts that have been authenticated to this read only domain controller" - shows users that attempted to authenticate

  • Aug 19, 2012
  • KT
  • Norway
  • Aug 19, 2012

457 - as far as I can see i think its A - http://technet.microsoft.com/en-us/library/rodc-guidance-for-administering-the-password-replication-policy(v=ws.10).aspx - I cant see answares C give you more information. anyone else can help ?

  • Aug 19, 2012
  • Astraor
  • Italy
  • Aug 19, 2012

@KT you are right.

425 is A
have you more info about question 457?

  • Aug 19, 2012
  • KT
  • Norway
  • Aug 19, 2012

425 - How can that be C? http://technet.microsoft.com/en-us/library/administer-prp-for-rodc-with-repadmin.exe(v=ws.10).- repadmin /prp

  • Aug 19, 2012
  • Astraor
  • Italy
  • Aug 19, 2012

my opinion

411 ?
260 answer A
272 answer C
301 answer C
378 ?
395 answer D because Scavenging already enabled
415 ?
439 AB

if you need contact me on neptune7@inwind.it

  • Aug 19, 2012
  • Astraor
  • Italy
  • Aug 19, 2012

2 question

425 correct answer seems C not A
457 correct answer seems C not A

  • Aug 19, 2012
  • KT
  • Norway
  • Aug 19, 2012

@Major.

Input on 411 again. See link: http://4sysops.com/archives/group-policy-preferences-best-practices/ I Cant find nothing about disk space under Group Policy Preferances.

Have you some input on this questions?

260 - It should be - A - http://technet.microsoft.com/en-us/library/cc725565.aspx ?
272 - B, Should be C? Do you have more information here?
301 - A - DO you get links and premission when you use gpo management console?
378 - C - What about D?
395 - A - In the last teste from NowAnonymous its D. I get confused
415 - G - How can Group Policy Management be the right answers here?
439 - B,C, - B is right, but what about C? (did not find any information on this.)

What do you think about the input from Astraor?

  • Aug 19, 2012
  • Astraor
  • Italy
  • Aug 19, 2012

question 412

You need to view the account lockout threshold and duration for the domain

I think the answer is D not C.

  • Aug 19, 2012
  • Majer
  • United States
  • Aug 19, 2012

370 - Agree C is the answer - Enable Try Next Closest Site setting in Group policy in the default domain policy

http://technet.microsoft.com/en-us/library/cc733142%28v=ws.10%29.aspx

407 - B - I stated it backwards before - site link bridging on DC4 will only replicate with DC1 outside the site.

411 - I originally thought WMI too but since Group policy preferences is new to server 2008 and allows you to do the same thing, I think H would be a better answer.

429 - BDE I agree - each has 3 of the 5 requirements -
http://technet.microsoft.com/en-us/library/cc786468%28v=ws.10%29.aspx

440 & 443 will double check on - if anyone else can help out here would be appreciated.

  • Aug 19, 2012
  • KT
  • Norway
  • Aug 18, 2012

Thansk @Majer

Have some input:

443 - i found this site: http://pipe2text.com/?page_id=395 - Here thy talk about: Personal Information Exchange = PKCS #12 (.PFX)

411 - i found this site: http://technet.microsoft.com/en-us/library/cc779036%28v=WS.10%29.aspx - using WMI filterering for disk space

440 - i found this site: http://technet.microsoft.com/en-us/library/cc958966.aspx - here you transmits the entirer database.

429 - What are your thoughts about this one? SOme people says it: B,D,E?

370 - Herer i think its C. If you delete the site link to Montereal, what do you do if Quebec sites go done?

  • Aug 18, 2012
  • Majer
  • United States
  • Aug 18, 2012

Here is what I think are the answers for the new questions in the Passforsures pdf

345 - B

378 - D - auditpol /set /subcategory:"directory service changes" /success:enable

http://technet.microsoft.com/en-us/library/cc731607%28v=ws.10%29.aspx

389 - A - Domain local can accept users from other domains

407 - A - DC 1 Bridgehead server then no other server will replicate outside the site to DC4

408 - D - Need to select allow to authenticate on Server 1 for Group 1.

410 - D - Loopback processing in Merge mode on the engineering OU for Sales GPO

411 - H - Group Policy Preferences - Use item level targeting and select disk space targeting

http://technet.microsoft.com/en-us/library/cc733022.aspx


424 - NTDS Site Settings under DC2

434 - D - enable recycle bin with powershell

440 - D - my understanding is that a transfer will not work if IP addresses are the same

441 - D,E - http://technet.microsoft.com/en-us/library/dd807040%28v=ws.10%29.aspx

442 - C - all references I found pointed to repadmin /syncall to force replication in an active directory-integrated zone. DNSCMD used for refreshing zone for Primary & Secondary zones that are not Active Directory integrated.

443 - B - Der encoded binary x.509 - A token-signing certificate is an X509 certificate

http://technet.microsoft.com/en-us/library/dd807040%28v=ws.10%29.aspx

445 - C, D - Windows server 2008r2 and Win 7 only -

http://technet.microsoft.com/pt-pt/library/ff625687%28v=ws.10%29.aspx


446 - ?? not sure couldn't find this


452 - C - http://technet.microsoft.com/en-us/library/cc732887%28v=ws.10%29.aspx

453 - D - Active directory Sites and Services

456 - D - http://technet.microsoft.com/en-us/library/dd391925%28v=ws.10%29.aspx

  • Aug 18, 2012
  • Majer
  • United States
  • Aug 17, 2012

@ KT sure I can try. I am still trying looking up the answers from the PDF

  • Aug 17, 2012
  • KT
  • Norway
  • Aug 17, 2012

Hi Majer,
I have some more questions, do you have the opportunity to help me? Thanks.

  • Aug 17, 2012
  • Majer
  • United States
  • Aug 17, 2012

@ KT Answer is D Set-ADForest

http://technet.microsoft.com/en-us/library/dd391925%28v=ws.10%29.aspx

  • Aug 17, 2012
  • KT
  • Norway
  • Aug 17, 2012

hi again.

On Pass4sure PDF. I've tried to find solution to this, but did not find nothing. Can somebody tell my why Site and services are the right answares her? Thanks.

Your network contains an Active Directory forest named contoso.com. The forest contains six domains. You need to ensure that the administrators of any of the domains can specify a user principal name (UPN) suffix oflitwareinc.com when they create user accounts by using Active Directory Users and Computers.
Which tool should you use?
A. Active Directory Administrative Center
B. Set-ADDomain
C. Active Directory Sites and Services
D. Set-ADForest
Answer: C

  • Aug 17, 2012
  • NLD
  • Netherlands
  • Aug 17, 2012

I passed today in Holland with 788. There were a few questions on the exam from the last 100 questions of the pdf file.

You need to study the material!!

@MK from Poland: pass4sures.com is valid.

  • Aug 17, 2012
  • MK
  • Poland
  • Aug 16, 2012

Guys, this pdf is not from pass4sure.com but from pass4sureS.com
I don't know which site is better, but i think it might be important.

  • Aug 16, 2012
  • Majer
  • United States
  • Aug 16, 2012

@KT - I agree it should be the NTDS settings under DC2

http://technet.microsoft.com/en-us/library/cc755257.aspx
^^
See step 3

  • Aug 16, 2012
  • KT
  • Norway
  • Aug 16, 2012

hi.

On Pass4sure PDF. Questions nr 424, about site. How can SMTP be the correct answers here? I think it is, NTDS setting under DC2.
Can anyone explain why? Thanks

  • Aug 16, 2012
  • Major Drag
  • United States
  • Aug 16, 2012

On Pass4sure PDF Question 411 - I believe the answer is F - WMI Filtering.
its not F. WMI filtering is windows versioning.

  • Aug 16, 2012
  • leon
  • Taiwan
  • Aug 16, 2012

On Pass4sure PDF Question 370, the Answer is D? I see the 402 dump the answer is C, Who can telle me the anwser is ?? please help

  • Aug 16, 2012
  • Majer
  • United States
  • Aug 15, 2012

On Pass4sure PDF Question 411 - I believe the answer is F - WMI Filtering.

http://technet.microsoft.com/en-us/library/cc779036%28v=WS.10%29.aspx

  • Aug 15, 2012
  • NLD
  • Netherlands
  • Aug 15, 2012

Hello Ole,

I don't know for sure but I think it is answer D because, with nslookup you can lookup dns records, so you can verify if the dns records exists.

But I would chose answer C, then you will know if all domain controllers successfully replicate.

Does anyone have the right answer?

  • Aug 15, 2012
  • Ole
  • Norway
  • Aug 15, 2012

hi.

I've had a look at PDF from pass4sures. Questions nr 442.can anyone explain why nslookup are the right answers.

A corporate network includes an Active Directory-integrated zone. All DNS servers that host the
zone are domain controllers.
You add multiple DNS records to the zone.
You need to ensure that the new records are available on all DNS servers as soon as possible.
Which tool should you use?
A. Ntdsutil
B. Dnscmd
C. Repadmin
D. Nslookup
Answer: D

  • Aug 15, 2012
  • Ole
  • Norway
  • Aug 15, 2012

hi.

I've had a look at PDF from pass4sures. Questions nr 424, about site. How can SMTP be the correct answers here? I think it is, NTDS setting under DC2. Can anyone explain why? Thanks

  • Aug 15, 2012
  • Zolile
  • South Africa
  • Aug 15, 2012

South African guys. were can book for the exam in JHB.
please advice

  • Aug 15, 2012
  • rodc
  • Finland
  • Aug 15, 2012

Dumb is not valid. i just did this exam 2hours ago. there was about 20-30% questions that was not on this or any other dumb. passed 780/1000. http://www.sendspace.com/file/68swm4 this one is the most valid.

  • Aug 15, 2012
  • Tristan
  • South Africa
  • Aug 15, 2012

This dump is NOT valid anymore! I keep on saying this. I've written twice and same result. Its only about 60-70% valid. Not enough to pass the exam without having a great knowledge about this stuff for real. There is a lot of questions like point and shoot, drag and drops and multipul choice which are still not found in these dumps. The multipul choise ones had a choise between about 10+ possible answers which is insane and NOT found in any of the current dumps. The point and shoot ones have a choise between about 10+ possible answers each as well so its impossible to guess your way through

  • Aug 15, 2012
  • sri
  • Oman
  • Aug 15, 2012

I took the exam today failed. can anyone tell me how to prepare

  • Aug 15, 2012
  • Tk. from SA
  • South Africa
  • Aug 15, 2012

failed for the 2nd time now, plz give us the latest dump!!!!!this is not funny. Study hard at the end we fail

  • Aug 15, 2012
  • ASGHAR ALI
  • Pakistan
  • Aug 15, 2012

awais plz sent me or share the link where the Infinitekew dumps are available because i trying so much but cant find that dumps . plz i m waiting my email id is gulparang@hotmail.com

  • Aug 15, 2012
  • tatealec
  • Australia
  • Aug 15, 2012

Passed today with an 823/1000.
Used this dump, the "InfiniteKewl" and the "Andyfix" one.
Luckily Anonimo posted the link to the pass4sures pdf as I ended up having a couple of questions that were in the last 50 of the PDF that I hadn't seen before. Primarily the questions about sites.
Thanks for the dumps and keep up the gopod work.

  • Aug 15, 2012
  • El Capitaine Akram
  • Tunisia
  • Aug 14, 2012

thank you Anonimo

  • Aug 14, 2012
  • Anonimo
  • Costa Rica
  • Aug 14, 2012

I passed today with 717. SJ |Costa RICA

Send you a PDF from pass4sures
http://www.sendspace.com/file/68swm4

  • Aug 14, 2012
  • Kuldeep Singh
  • India
  • Aug 14, 2012

Please provide me all paper so i can prepare for MCITP..

thanks in advance
Call me: 09930124068

  • Aug 14, 2012
  • nicho
  • Luxembourg
  • Aug 14, 2012

I tried yesterday in Luxembourg but I got 615. A lot of questions were not in this dump especially about Sites and Services.

  • Aug 14, 2012
  • rodc
  • Finland
  • Aug 14, 2012

Actual one. version 12.39.

  • Aug 14, 2012
  • Phil
  • Germany
  • Aug 14, 2012

@rodc :

The actual one or the older one from April?

  • Aug 14, 2012
  • rodc
  • Finland
  • Aug 14, 2012

passguide dumbs are 90% same as this one.

  • Aug 14, 2012
  • Awais
  • Pakistan
  • Aug 14, 2012

@ White boy as I already told you that 90% question were from Infinitekewl dump. However if you want to be further confident, then go through Andyfix as well.

@naeem: Brother i am referring the dump "InfiniteKewl" which is available here at this same site.

  • Aug 14, 2012
  • naeem
  • Pakistan
  • Aug 14, 2012

Awais: would you please share these dump to me i also going to go for 70-640 exam but so far don't find a valid dump.

  • Aug 14, 2012
  • Major Drag
  • United States
  • Aug 14, 2012

Is this legit?
I took this exam 2 weeks back and have not seen several questions that gave me quite a bit of trouble.
ie.
Global catalog.
Drag and drops
Point and shoot

I need an updated dump. Can anyone help?

  • Aug 14, 2012
  • WhiteBoy
  • Pakistan
  • Aug 13, 2012

@ John congrats man I feel you on that word.. as it is so true.. Amen

  • Aug 13, 2012
  • Whiteboy from Pakistan
  • Pakistan
  • Aug 13, 2012

@ Awais I am here at Pakistan to. So was everything from that dump. I plan to give exam next week and been really studing. But need a little more to enure a 700 or better. Pls respond back with any details

  • Aug 13, 2012
  • John
  • Myanmar
  • Aug 13, 2012

MT 19:26
Jesus looked at them and said, "With man this is impossible, but with God all things are possible."

I Passed today. 75%

  • Aug 13, 2012
  • Awais
  • Pakistan
  • Aug 13, 2012

I passed today in Pakistan by using InfiniteKewl Dumps. 90% question came from that.

  • Aug 13, 2012
  • ravs
  • India
  • Aug 13, 2012

@marvin.is this latest Dump?, I really need to pass exam this week. Please help

  • Aug 13, 2012

Add Comments

Only Registered Members Can Download VCE Files or View Training Courses

Please fill out your email address below in order to Download VCE files or view Training Courses. Registration is Free and Easy - you simply need to provide an email address.

  • Trusted By 1.2M IT Certification Candidates Every Month
  • VCE Files Simulate Real Exam Environment
  • Instant Download After Registration.
Please provide a correct e-mail address
A confirmation link will be sent to this email address to verify your login.
Already Member? Click Here to Login

Log into your ExamCollection Account

Please Log In to download VCE file or view Training Course

Please provide a correct E-mail address

Please provide your Password (min. 6 characters)

Only registered Examcollection.com members can download vce files or view training courses.

Registration is free and easy - just provide your E-mail address. Click Here to Register

SPECIAL OFFER: GET 10% OFF

ExamCollection Premium

ExamCollection Premium Files

Pass your Exam with ExamCollection's PREMIUM files!

  • ExamCollection Certified Safe Files
  • Guaranteed to have ACTUAL Exam Questions
  • Up-to-Date Exam Study Material - Verified by Experts
  • Instant Downloads
Enter Your Email Address to Receive Your 10% Off Discount Code
A Confirmation Link will be sent to this email address to verify your login
We value your privacy. We will not rent or sell your email address

SPECIAL OFFER: GET 10% OFF

Use Discount Code:

MIN10OFF

A confirmation link was sent to your e-mail.
Please check your mailbox for a message from support@examcollection.com and follow the directions.

Next

Download Free Demo of VCE Exam Simulator

Experience Avanset VCE Exam Simulator for yourself.

Simply submit your e-mail address below to get started with our interactive software demo of your free trial.

Free Demo Limits: In the demo version you will be able to access only first 5 questions from exam.