Pass Your Microsoft 70-640 Exam Easy!

Why is the answer put in Zone file and use DNSSEC? DNSSEC doesn't encrypt the transfer??? Correct answer is put the zone in the forestDNSZone. Answer B just my take

OK. you guys are using pass4s pdf files. i agree it must be gpresults for viewing account lockout and and lock threshold. not sure why people are putting AD users and computers

how do you guys reference test questions by #s? I don't see any test questions number 441? I see test A Qestion 11 and so on. Whats up?

Passed on 23rd August with 841. Dump that i studied is :

http://www.examcollection.com/microsoft/Microsoft.Pass4Sures.70-640.v2012-08-19.by.FixedAnswers.468q.vce.file.html

100% valid in Malaysia

The key word for the quest 443 & 212 is - You need to export the token-signing certificate from Server1, and then import the certificate to Server2.

The answer is Personal Information Exchange PKCS #12 (.pfx).

Explanation: http://technet.microsoft.com/en-us/library/cc784075(v=ws.10).aspx

Every federation server in an Active Directory Federation Services (ADFS) server farm must have access to the private key of the token-signing certificate. If you are implementing a server farm of federation servers that share a single, exportable private key certificate that is issued by an enterprise certification authority (CA), the private key portion of the existing token-signing certificate must be exported to make it available for importing into the certificate store on the new server.

@Majer
are you sure about question 441?

look this link:

http://technet.microsoft.com/en-us/library/hh341466(v=ws.10).aspx

the questions talk about ADFS 2.0 and in this case for work you need to export also the private key

About ADFS certificate on question 443 and 212 look those links

http://technet.microsoft.com/it-it/library/cc737522(v=ws.10).aspx
http://technet.microsoft.com/en-us/library/cc784075(v=ws.10).aspx

I thinks all depends if you want export public key or also personal key

199 - I agree should be A

308 - I agree it should be B - this question is repeated a few times in the practice tests and I think they are all repadmin

406 - B - When a user principal name (UPN) is used at logon and the forest has more than one domain, a global catalog server is required to resolve the name.

http://technet.microsoft.com/en-us/library/cc728188%28v=ws.10%29.aspx

419 - D - dnscmd /zoneadd creates the zone -
http://technet.microsoft.com/en-us/library/cc772069%28v=ws.10%29.aspx

444 - B - open the Active Directory Schema snap-in, view the desired attribute properties, and select (or clear) the Attribute is copied when duplicating user check box
http://technet.microsoft.com/en-us/library/cc771231.aspx

454 - A - Yes global catalog


For 443 - the only references I found was in the 70-640 training kit that used DER Encoded Binary X.509 in their directions to export the key. Not 100% sure on why but my logic is if it is used in the book then it would be the answer on the test.

@ KT You have to set the filter to Constructed to see the lockout threshhold attribute in Users and computers.

@ Tristan - you want to set the preferred bridgehead server on the only server that you want to replicate outside the site - choose the one that is grouped with other servers in the same site - I believe for that question it is DC 1 - there is another question that you have to choose DC 4

I see conflicting answers for this question, can some please elaborate on what the real answer really is. Please take note that this question has a exhibit which I obviously can't show here. The question reads as follow:

You need to ensure that DC1 and DC4 are the only servers that replicate Active Directory changes between sites. What should you do?

A. Configure DC1 as a preferred bridgehead server for IP transport.
B. Configure DC4 as a preferred bridgehead server for IP transport.
C. From DC4 server object, create a connection object for DC1.
D. From DC1 server object, create a connection object for DC4.

(Some dumps say the answer is C while others say its A. Which is really the right answer here??)

@Majer
199 - Should be A?
444 - B? It has to be?
406 - B, Global catalog?
454 - A, Global catalog?
419 - How can: D be the right, when you have to create the zone first?
308 - B. IT should be repadmin?

did you find anything more on question 443?
AS you said i think Q 440 - D its the right answare, because of the seriel nr are the same on both zone
415 and 457, i dont understand how i could be User and computers. I have search through Attrubute Editors. Did not find anything about

account lockout threshold. I Found this about gpresult: http://www.redspin.com/blog/2011/09/02/viewing-gpos-on-the-commandline/ -see

bottom of page

This is what I think are the correct answers:

260 - A is correct - http://technet.microsoft.com/en-us/library/cc732443%28v=ws.10%29.aspx

272 - B - Correct - On a stand-alone or member server, you would enable auditing by using Local Security Policy or a GPO scoped to the server - MCTS Self Paced training Kit Chap 7 pg 372

301 - C - Backup system state - GPMC does not back up the links -
http://social.technet.microsoft.com/Forums/en-US/winserverGP/thread/c361339f-7266-4991-8309-c957a123a455/

378 - D - this is disabled by default so you have to run -
auditpol /set/subcategory:"directory service changes" /success:enable - to enable this, other choices won't work.

http://technet.microsoft.com/en-us/library/cc731607%28v=ws.10%29.aspx

395 - A is correct - scavenging has to be enabled in 2 places - on the zone and on the server for it to work.

411 - H - Search for preference item level targeting - http://technet.microsoft.com/en-us/library/cc733022.aspx

If this was Windows server 2003 I would say WMI as that was the only way to do it back then but for 2008 you would use the new Preferences. Unfair question as you can complete this with both options.

412 - C - Users and computers - Enable Advanced features - Select domain - click on properties - view in attributes tab.

415 - G - Need to assign the auditor role or make the managers local admins - Users and computers would be best but The only option I see here to allow that is Group Policy management -
http://technet.microsoft.com/en-us/library/cc732590%28v=ws.10%29.aspx

425 - A - I agree - Correct

439 - B, C - Correct - in GUI use Dot instead of @ and in the text file use @

457 - A - Users and computers - Password replication policy tab - click advanced and select "accounts that have been authenticated to this read only domain controller" - shows users that attempted to authenticate

457 - as far as I can see i think its A - http://technet.microsoft.com/en-us/library/rodc-guidance-for-administering-the-password-replication-policy(v=ws.10).aspx - I cant see answares C give you more information. anyone else can help ?

@KT you are right.

425 is A
have you more info about question 457?

425 - How can that be C? http://technet.microsoft.com/en-us/library/administer-prp-for-rodc-with-repadmin.exe(v=ws.10).- repadmin /prp

my opinion

411 ?
260 answer A
272 answer C
301 answer C
378 ?
395 answer D because Scavenging already enabled
415 ?
439 AB

if you need contact me on neptune7@inwind.it

2 question

425 correct answer seems C not A
457 correct answer seems C not A

@Major.

Input on 411 again. See link: http://4sysops.com/archives/group-policy-preferences-best-practices/ I Cant find nothing about disk space under Group Policy Preferances.

Have you some input on this questions?

260 - It should be - A - http://technet.microsoft.com/en-us/library/cc725565.aspx ?
272 - B, Should be C? Do you have more information here?
301 - A - DO you get links and premission when you use gpo management console?
378 - C - What about D?
395 - A - In the last teste from NowAnonymous its D. I get confused
415 - G - How can Group Policy Management be the right answers here?
439 - B,C, - B is right, but what about C? (did not find any information on this.)

What do you think about the input from Astraor?

question 412

You need to view the account lockout threshold and duration for the domain

I think the answer is D not C.

370 - Agree C is the answer - Enable Try Next Closest Site setting in Group policy in the default domain policy

http://technet.microsoft.com/en-us/library/cc733142%28v=ws.10%29.aspx

407 - B - I stated it backwards before - site link bridging on DC4 will only replicate with DC1 outside the site.

411 - I originally thought WMI too but since Group policy preferences is new to server 2008 and allows you to do the same thing, I think H would be a better answer.

429 - BDE I agree - each has 3 of the 5 requirements -
http://technet.microsoft.com/en-us/library/cc786468%28v=ws.10%29.aspx

440 & 443 will double check on - if anyone else can help out here would be appreciated.

Thansk @Majer

Have some input:

443 - i found this site: http://pipe2text.com/?page_id=395 - Here thy talk about: Personal Information Exchange = PKCS #12 (.PFX)

411 - i found this site: http://technet.microsoft.com/en-us/library/cc779036%28v=WS.10%29.aspx - using WMI filterering for disk space

440 - i found this site: http://technet.microsoft.com/en-us/library/cc958966.aspx - here you transmits the entirer database.

429 - What are your thoughts about this one? SOme people says it: B,D,E?

370 - Herer i think its C. If you delete the site link to Montereal, what do you do if Quebec sites go done?

Here is what I think are the answers for the new questions in the Passforsures pdf

345 - B

378 - D - auditpol /set /subcategory:"directory service changes" /success:enable

http://technet.microsoft.com/en-us/library/cc731607%28v=ws.10%29.aspx

389 - A - Domain local can accept users from other domains

407 - A - DC 1 Bridgehead server then no other server will replicate outside the site to DC4

408 - D - Need to select allow to authenticate on Server 1 for Group 1.

410 - D - Loopback processing in Merge mode on the engineering OU for Sales GPO

411 - H - Group Policy Preferences - Use item level targeting and select disk space targeting

http://technet.microsoft.com/en-us/library/cc733022.aspx


424 - NTDS Site Settings under DC2

434 - D - enable recycle bin with powershell

440 - D - my understanding is that a transfer will not work if IP addresses are the same

441 - D,E - http://technet.microsoft.com/en-us/library/dd807040%28v=ws.10%29.aspx

442 - C - all references I found pointed to repadmin /syncall to force replication in an active directory-integrated zone. DNSCMD used for refreshing zone for Primary & Secondary zones that are not Active Directory integrated.

443 - B - Der encoded binary x.509 - A token-signing certificate is an X509 certificate

http://technet.microsoft.com/en-us/library/dd807040%28v=ws.10%29.aspx

445 - C, D - Windows server 2008r2 and Win 7 only -

http://technet.microsoft.com/pt-pt/library/ff625687%28v=ws.10%29.aspx


446 - ?? not sure couldn't find this


452 - C - http://technet.microsoft.com/en-us/library/cc732887%28v=ws.10%29.aspx

453 - D - Active directory Sites and Services

456 - D - http://technet.microsoft.com/en-us/library/dd391925%28v=ws.10%29.aspx

@ KT sure I can try. I am still trying looking up the answers from the PDF

Hi Majer,
I have some more questions, do you have the opportunity to help me? Thanks.

@ KT Answer is D Set-ADForest

http://technet.microsoft.com/en-us/library/dd391925%28v=ws.10%29.aspx

hi again.

On Pass4sure PDF. I've tried to find solution to this, but did not find nothing. Can somebody tell my why Site and services are the right answares her? Thanks.

Your network contains an Active Directory forest named contoso.com. The forest contains six domains. You need to ensure that the administrators of any of the domains can specify a user principal name (UPN) suffix oflitwareinc.com when they create user accounts by using Active Directory Users and Computers.
Which tool should you use?
A. Active Directory Administrative Center
B. Set-ADDomain
C. Active Directory Sites and Services
D. Set-ADForest
Answer: C

I passed today in Holland with 788. There were a few questions on the exam from the last 100 questions of the pdf file.

You need to study the material!!

@MK from Poland: pass4sures.com is valid.

Guys, this pdf is not from pass4sure.com but from pass4sureS.com
I don't know which site is better, but i think it might be important.

@KT - I agree it should be the NTDS settings under DC2

http://technet.microsoft.com/en-us/library/cc755257.aspx
^^
See step 3

hi.

On Pass4sure PDF. Questions nr 424, about site. How can SMTP be the correct answers here? I think it is, NTDS setting under DC2.
Can anyone explain why? Thanks

On Pass4sure PDF Question 411 - I believe the answer is F - WMI Filtering.
its not F. WMI filtering is windows versioning.

On Pass4sure PDF Question 370, the Answer is D? I see the 402 dump the answer is C, Who can telle me the anwser is ?? please help

On Pass4sure PDF Question 411 - I believe the answer is F - WMI Filtering.

http://technet.microsoft.com/en-us/library/cc779036%28v=WS.10%29.aspx

Hello Ole,

I don't know for sure but I think it is answer D because, with nslookup you can lookup dns records, so you can verify if the dns records exists.

But I would chose answer C, then you will know if all domain controllers successfully replicate.

Does anyone have the right answer?

hi.

I've had a look at PDF from pass4sures. Questions nr 442.can anyone explain why nslookup are the right answers.

A corporate network includes an Active Directory-integrated zone. All DNS servers that host the
zone are domain controllers.
You add multiple DNS records to the zone.
You need to ensure that the new records are available on all DNS servers as soon as possible.
Which tool should you use?
A. Ntdsutil
B. Dnscmd
C. Repadmin
D. Nslookup
Answer: D

hi.

I've had a look at PDF from pass4sures. Questions nr 424, about site. How can SMTP be the correct answers here? I think it is, NTDS setting under DC2. Can anyone explain why? Thanks

South African guys. were can book for the exam in JHB.
please advice

Dumb is not valid. i just did this exam 2hours ago. there was about 20-30% questions that was not on this or any other dumb. passed 780/1000. http://www.sendspace.com/file/68swm4 this one is the most valid.

This dump is NOT valid anymore! I keep on saying this. I've written twice and same result. Its only about 60-70% valid. Not enough to pass the exam without having a great knowledge about this stuff for real. There is a lot of questions like point and shoot, drag and drops and multipul choice which are still not found in these dumps. The multipul choise ones had a choise between about 10+ possible answers which is insane and NOT found in any of the current dumps. The point and shoot ones have a choise between about 10+ possible answers each as well so its impossible to guess your way through

I took the exam today failed. can anyone tell me how to prepare

failed for the 2nd time now, plz give us the latest dump!!!!!this is not funny. Study hard at the end we fail

awais plz sent me or share the link where the Infinitekew dumps are available because i trying so much but cant find that dumps . plz i m waiting my email id is gulparang@hotmail.com

Passed today with an 823/1000.
Used this dump, the "InfiniteKewl" and the "Andyfix" one.
Luckily Anonimo posted the link to the pass4sures pdf as I ended up having a couple of questions that were in the last 50 of the PDF that I hadn't seen before. Primarily the questions about sites.
Thanks for the dumps and keep up the gopod work.

thank you Anonimo

I passed today with 717. SJ |Costa RICA

Send you a PDF from pass4sures
http://www.sendspace.com/file/68swm4

Please provide me all paper so i can prepare for MCITP..

thanks in advance
Call me: 09930124068

I tried yesterday in Luxembourg but I got 615. A lot of questions were not in this dump especially about Sites and Services.

Actual one. version 12.39.

@rodc :

The actual one or the older one from April?

passguide dumbs are 90% same as this one.

@ White boy as I already told you that 90% question were from Infinitekewl dump. However if you want to be further confident, then go through Andyfix as well.

@naeem: Brother i am referring the dump "InfiniteKewl" which is available here at this same site.

Awais: would you please share these dump to me i also going to go for 70-640 exam but so far don't find a valid dump.

Is this legit?
I took this exam 2 weeks back and have not seen several questions that gave me quite a bit of trouble.
ie.
Global catalog.
Drag and drops
Point and shoot

I need an updated dump. Can anyone help?

@ John congrats man I feel you on that word.. as it is so true.. Amen

@ Awais I am here at Pakistan to. So was everything from that dump. I plan to give exam next week and been really studing. But need a little more to enure a 700 or better. Pls respond back with any details

MT 19:26
Jesus looked at them and said, "With man this is impossible, but with God all things are possible."

I Passed today. 75%

I passed today in Pakistan by using InfiniteKewl Dumps. 90% question came from that.

@marvin.is this latest Dump?, I really need to pass exam this week. Please help