Microsoft 70-648

TS: Upgrading from Windows Server 2003 MCSA to,

Windows Server 2008, Technology SpecializationsVersion: Demo 45.0

Topic 1, Volume D

QUESTION NO: 1 Your company has two servers that run Windows Server 2008 R2 named Server2 and Server3.Both servers have the DNS Server server role installed. Server3 is configured to forward all DNSrequests to Server2. You update a DNS record on Server2. You need to ensure that Server3 is able to immediately resolve the updated DNS record. What should you do? A. Run the dnscmd . /clearcache command on Server3. B. Run the ipconfig /flushdns command on Server3. C. Decrease the Time-to-Live (TTL) on the Start of Authority (SOA) record of na.contoso.com to15 minutes. D. Increase the Retry Interval value on the Start of Authority (SOA) record of na.contoso.com to 15minutes.

Answer: A

Explanation:

Topic 2, Volume A

QUESTION NO: 2 Your network contains a server named Server1. The Active Directory Rights ManagementServices (AD RMS) server role is installed on Server1. An administrator changes the password ofthe user account that is used by AD RMS. You need to update AD RMS to use the new password. Which console should you use? A. Active Directory Rights Management Services B. Active Directory Users and Computers C. Component Services D. Services

Microsoft 70-648 Exam

"Excellent Results in Minimum Time" - SelfTestExams.com 2

Answer: A

Explanation:

Topic 3, Volume E

QUESTION NO: 3 Your network contains a server named Server1 that runs Windows Server 2008 R2. Server1 hasthe Network_Policy Server (NPS) role installed. You need to ensure that the NPS log files on Server1 contain information of clientconnections. What should you do? A. Enable the Accounting requests settings. B. Enable the Authentication requests settings. C. Configure the IAS (Legacy) log file format. D. Configure the DTS Compilant log file format.

Answer: D

Explanation:

The DTS Compliant log format is the newest one and only its XML have attributes fot session

duration such as Acct-Session-Time = "The length of time (in seconds) for which the session has

been active.

Topic 2, Volume A

QUESTION NO: 4 Your network consists of a single Active Directory domain. User accounts for engineeringdepartment are located in an OU named Engineering. You need to create a password policy for the engineering department that is different fromyour domain password policy.

Microsoft 70-648 Exam

"Excellent Results in Minimum Time" - SelfTestExams.com 3

What should you do? A. Create a new GPO. Link the GPO to the Engineering OU. B. Create a new GPO. Link the GPO to the domain. Block policy inheritance on all OUs except fortheEngineering OU. C. Create a global security group and add all the user accounts for the engineering department tothe group. Create a new Password Policy Object (PSO) and apply it to the group. D. Create a domain local security group and add all the user accounts for the engineeringdepartment to the group. From the Active Directory Users and Computer console, select the groupand run the Delegation of Control Wizard.

Answer: C

Explanation:

QUESTION NO: 5 Your network contains an Active Directory domain named contoso.com. You need to create a central store for the Group Policy Administrative templates. What should you do? A. Run dfsrmig.exe /createglobalobjects. B. Run adprep.exe /domainprep /gpprep. C. Copy the %SystemRoot%\PolicyDefinitions folder to the\\contoso.com\SYSVOL\contoso.com\Policiesfolder. D. Copy the %SystemRoot%\System32\GroupPolicy folder to the\\contoso.com\SYSVOL\contoso.com\Policies folder.

Answer: C

Explanation:

Topic 4, Volume C

QUESTION NO: 6 Your network contains a single Active Directory domain named contoso.com. An administrator

Microsoft 70-648 Exam

"Excellent Results in Minimum Time" - SelfTestExams.com 4

accidentally deletes the _msdsc.contoso.com zone. You recreate the _msdsc.contoso.com zone. You need to ensure that the _msdsc.contoso.com zone contains all of the required DNSrecords. What should you do on each domain controller? A. Restart the Netlogon service. B. Restart the DNS Server service. C. Run dcdiag.exe /fix. D. Run ipconfig.exe /registerdns.

Answer: A

Explanation:

Topic 5, Volume B

QUESTION NO: 7 You have a domain controller named DC1 that runs Windows Server 2008 R2. DC1 is configuredas a DNS server for contoso.com. You install the DNS Server server role on a member servernamed Server1 and then you create a standard secondary zone for contoso.com. You configureDC1 as the master server for the zone. You need to ensure that Server1 receives zone updates from DC1. What should you do? A. On Server1, add a conditional forwarder. B. On DC1, modify the permissions of contoso.com zone. C. On DC1, modify the zone transfer settings for the contoso.com zone. D. Add the Server1 computer account to the DNSUpdateProxy group.

Answer: C

Explanation:

Topic 4, Volume C

Microsoft 70-648 Exam

"Excellent Results in Minimum Time" - SelfTestExams.com 5

QUESTION NO: 8 Your network contains an Active Directory forest. The forest contains one domain and three sites.Each site contains two domain controllers. All domain controllers are DNS servers. You create anew Active Directoryintegrated zone. You need to ensure that the new zone is replicated to the domain controllers in only one ofthe sites. What should you do first? A. Modify the NTDS Site Settings object for the site. B. Modify the replication settings of the default site link. C. Create an Active Directory connection object. D. Create an Active Directory application directory partition.

Answer: D

Explanation:

Topic 5, Volume B

QUESTION NO: 9 Your network contains a single Active Directory domain. The functional level of the forest isWindows Server 2008. The functional level of the domain is Windows Server 2008 R2. All DNSservers run Windows Server 2008. All domain controllers run Windows Server 2008 R2. You need to ensure that you can enable the Active Directory Recycle Bin. What should you do? A. Change the functional level of the forest. B. Change the functional level of the domain. C. Modify the Active Directory schema. D. Modify the Universal Group Membership Caching settings.

Answer: A

Explanation:

Microsoft 70-648 Exam

"Excellent Results in Minimum Time" - SelfTestExams.com 6

QUESTION NO: 10 You need to receive an e-mail message whenever a domain user account is locked out. Which tool should you use? A. Active Directory Administrative Center B. Event Viewer C. Resource Monitor D. Security Configuration Wizard

Answer: B

Explanation:

Microsoft 70-648 Exam

"Excellent Results in Minimum Time" - SelfTestExams.com 7