最近更新testpassport 83-640题库

shijunhua618

考试名称: TS:WindowsServer2008ActiveDirectory,(83-640)
题目数量: 52 Q&A
7 n8 j5 o8 |* G. k" k更新: 2009-07-20
6 u& S) S6 `/ I' W7 ?3 E3 n

最新83-640题库拿出来分享（1-10题）1.Yourcompany,Contoso,Ltd.,hasamainofficeandabranchoffice.TheofficesareconnectedbyaWANlink.Cont

osohasanActiveDirectoryforestthatcontainsasingledomainnamedad.contoso.com.

Thead.contoso.comdomaincontainsonedomaincontrollernamedDC1thatislocatedinthemainoffice.

DC1isconfiguredasaDNSserverforthead.contoso.comDNSzone.Thiszoneisconfiguredasastandardprimary

zone.YouinstallanewdomaincontrollernamedDC2inthebranchoffice.YouinstallDNSonDC2.

YouneedtoensurethattheDNSservicecanupdaterecordsandresolveDNSqueriesintheeventthataWANlinkfail

s.Whatshouldyoudo?

A.Createanewstubzonenamedad.contoso.comonDC2.

B.ConfiguretheDNSserveronDC2toforwardrequeststoDC1.

C.Createanewstandardsecondaryzonenamedad.contoso.comonDC2.

D.Convertthead.contoso.comzoneonDC1toanActiveDirectory-integratedzone.

Answer

2.YourcompanyhasaDNSserverthathas10ActiveDirectory integratedzones.

YouneedtoprovidecopiesofthezonefilesoftheDNSservertothesecuritydepartment.

Whatshouldyoudo?

A.Runthednscmd/ZoneInfocommand.

B.Runtheipconfig/registerdnscommand.

C.Runthednscmd/ZoneExportcommand.

D.Runthentdsutil>artitionManagement>Listcommands.

Answer:C

3.YourcompanyhasasingleActiveDirectorydomainnamedintranet.adatum.com.ThedomaincontrollersrunWi

ndowsServer2008andtheDNSserverrole.

Allcomputers,includingnon-domainmembers,dynamicallyregistertheirDNSrecords.

Youneedtoconfiguretheintranet.adatum.comzonetoallowonlydomainmemberstodynamicallyregisterDNSre

cords.Whatshouldyoudo?

A.SetdynamicupdatestoSecureOnly.

B.EnablezonetransferstoNameServers.

C.RemovetheAuthenticatedUsersgroup.

D.DenytheEveryonegrouptheCreateAllChildObjectspermission.

Answer:A

4.Yourcompanyhasamainofficeandabranchoffice.Thecompanyhasasingle-domainActiveDirectoryforest.

ThemainofficehastwodomaincontrollersnamedDC1andDC2thatrunWindowsServer2008.Thebranchofficeh

asaWindowsServer2008read-onlydomaincontroller(RODC)namedDC3.

AlldomaincontrollersholdtheDNSServerroleandareconfiguredasActiveDirectory-integratedzones.

TheDNSzonesonlyallowsecureupdates.

YouneedtoenabledynamicDNSupdatesonDC3.

Whatshouldyoudo?

A.RuntheNtdsutil.exe>DSBehaviorcommandsonDC3.

B.RuntheDnscmd.exe/ZoneResetTypecommandonDC3.

C.ReinstallActiveDirectoryDomainServicesonDC3asawritabledomaincontroller.

D.CreateacustomapplicationdirectorypartitiononDC1.ConfigurethepartitiontostoreActiveDirectory-integrat

edzones.

Answer:C

5.YounetworkconsistsofanActiveDirectoryforestnamedcontoso.com.AllserversrunWindowsServer2008.All

domaincontrollersareconfiguredasDNSservers.Thecontoso.comDNSzoneisstoredintheForestDnsZonesA

ctiveDirectoryapplicationpartition.

YouhaveamemberserverthatcontainsastandardprimaryDNSzonefordev.contoso.com.

Youneedtoensurethatalldomaincontrollerscanresolvenamesfordev.contoso.com.

Whatshouldyoudo?

A.CreateaNSrecordinthecontoso.comzone.

B.Createadelegationinthecontoso.comzone.

C.CreateastandardsecondaryzoneonaGlobalCatalogserver.

D.ModifythepropertiesoftheSOArecordinthecontoso.comzone.

Answer:B

6.YournetworkconsistsofanActiveDirectoryforestthatcontainsonedomainnamedcontoso.com.Alldomainco

ntrollersrunWindowsServer2008andareconfiguredasDNSservers.YouhavetwoActiveDirectory-integratedz

ones:contoso.comandnwtraders.com.

Youneedtoensureauserisabletomodifyrecordsinthecontoso.comzone.Youmustpreventtheuserfrommodifyi

ngtheSOArecordinthenwtraders.comzone.

Whatshouldyoudo?

A.FromtheDNSManagerconsole,modifythepermissionsofthecontoso.comzone.

B.FromtheDNSManagerconsole,modifythepermissionsofthenwtraders.comzone.

C.FromtheActiveDirectoryUsersandComputersconsole,runtheDelegationofControlWizard.

D.FromtheActiveDirectoryUsersandComputersconsole,modifythepermissionsoftheDomainControllersorg

anizationalunit(OU).

Answer:A

7.YournetworkconsistsofanActiveDirectoryforestthatcontainsonedomain.AlldomaincontrollersrunWindows

Server2008andareconfiguredasDNSservers.YouhaveanActiveDirectory-integratedzone.

YouhavetwoActiveDirectorysites.Eachsitecontainsfivedomaincontrollers.

YouaddanewNSrecordtothezone.

YouneedtoensurethatalldomaincontrollersimmediatelyreceivethenewNSrecord.

Whatshouldyoudo?

A.FromtheDNSManagerconsole,reloadthezone.

B.FromtheServicessnap-in,restarttheDNSServerservice.

C.Fromthecommandprompt,runrepadmin/syncall.

D.FromtheDNSManagerconsole,increasetheversionnumberoftheSOArecord.

Answer:C

8.YouhaveadomaincontrollernamedDC1thatrunsWindowsServer2008.DC1isconfiguredasaDNSServerfor

contoso.com.

YouinstalltheDNSServerroleonamemberservernamedServer1andthenyoucreateastandardsecondaryzone

forcontoso.com.YouconfigureDC1asthemasterserverforthezone.

YouneedtoensurethatServer1receiveszoneupdatesfromDC1.

Whatshouldyoudo?

A.OnServer1,addaconditionalforwarder.

B.OnDC1,modifythepermissionsofcontoso.comzone.

C.OnDC1,modifythezonetransfersettingsforthecontoso.comzone.

D.AddtheServer1computeraccounttotheDNSUpdateProxygroup.

Answer:C

9.YournetworkconsistsofasingleActiveDirectorydomain.AlldomaincontrollersrunWindowsServer2008anda

reconfiguredasDNSservers.AdomaincontrollernamedDC1hasastandardprimaryzoneforcontoso.com.Ado

maincontrollernamedDC2hasastandardsecondaryzoneforcontoso.com.

Youneedtoensurethatthereplicationofthecontoso.comzoneisencrypted.Youmustnotloseanyzonedata.

Whatshouldyoudo?

A.Onbothservers,modifytheinterfacethattheDNSserverlistenson.

B.ConverttheprimaryzoneintoanActiveDirectory-integratedzone.Deletethesecondaryzone.

C.ConverttheprimaryzoneintoanActiveDirectory-integratedstubzone.Deletethesecondaryzone.

D.Configurethezonetransfersettingsofthestandardprimaryzone.ModifytheMasterServerslistsonthesecond

aryzone.

Answer:B

10.YournetworkconsistsofasingleActiveDirectorydomain.Thedomaincontains10domaincontrollers.

ThedomaincontrollersrunWindowsServer2008andareconfiguredasDNSservers.

YouplantocreateanewActiveDirectory-integratedzone.

Youneedtoensurethatthenewzoneisonlyreplicatedtofourofyourdomaincontrollers.

Whatshouldyoudofirst?

A.CreateanewdelegationintheForestDnsZonesapplicationdirectorypartition.

B.CreateanewdelegationintheDomainDnsZonesapplicationdirectorypartition.

C.Fromthecommandprompt,rundnscmdandspecifythe/enlistdirectorypartitionparameter.

D.Fromthecommandprompt,rundnscmdandspecifythe/createdirectorypartitionparameter.

Answer