Configuring Active Directory Server Roles Exam 70-640

Front 1

Will, the administrator for your organization, has decided to implement certificates for all of your internal users. What type of root certificate authority (CA) would he implement?

Back 1

Enterprise

Front 2

You are hired as a contractor for a new organization that has no network currently in place. You decide to implement an Active Directory domain and the Active Directory Domain Services (AD DS). Which of the follow are requirements to install Active Directory?

Back 2

DNS

Front 3

You have decided to implement certificate authority (CA) servers and you want all of your users to receive their certificates automatically without any user intervention. What two ways can you accomplish this goal?

Back 3

Autoenrollment
GPO enrollment

Front 4

What role provides Internet-based clients a secure identity access solution that works on both Windows and non-Windows operating systems?

Back 4

Active Directory Federation Services (AD FS)

Front 5

You have decided to place DNS on a read-only domain controller (RODC). What type of DNS zone do you now have?

Back 5

Read-only DNS

Front 6

What AD role allows administrators to configure services for issuing and managing public key certificates, which help organizations implement network security?

Back 6

Active Directory Certificate Services (AD CS)

Front 7

What role gives administrators the ability to enroll users into the certificate services program and allows for the issue and management of certificate requests?

Back 7

Enrollment agents

Front 8

You have decided to implement a certificate authority on your network. You have hired a third-party company to create and issue you the certificates you need to hand out to your Internet users. What type of certificate authority do you need to set up?

Back 8

Stand Alone Subordinate CA

Front 9

Alexandria, the network administrator, has just hired a new junior administrator named Paige. Paige needs to be able to recover keys from the certificate authority server. What role does Alexandria need to give Paige so that she can recover keys?

Back 9

Key recovery agent

Front 10

What file outlines the set of rules that a Federation Service uses to recognize partners, certificates, account stores, claims, and the numerous properties that are associated with the Federation Service?

Back 10

Trust policy

Front 11

What is the Lightweight Directory Access Protocol (LDAP) directory service that allows directory-enabled applications to store and retrieve data without needing the dependencies AD DS requires?

Back 11

Active Directory Lightweight Directory Services (AD LDS)

Front 12

You are the administrator of a network. Your company has decided to use server virtualization to help save money and add fault tolerance to your servers. What role-based utility is included with Windows Server 2008 making this possible?

Back 12

Hyper-V

Front 13

Your manager has explained to you that due to security requirements, you need to secure documents and emails using Microsoft Office 2007 Enterprise. What service do you need to install to help secure documents and emails?

Back 13

Active Directory Rights Management Service (AD RMS)

Front 14

Your company has one main location and five remote sites. One of the remote sites is having a problem with Active Directory and DNS being hacked into. What can you use to help solve this problem?

Back 14

Implement a
Read-only domain controller and a
Read-only DNS server

Front 15

Your company has one main location and one remote site. The remote site is 300 miles from the main location and it has no IT staff on site. What type of domain controller can you install so that a normal user can have the rights to manage it?

Back 15

Read-only domain controller (RODC)

Front 16

You have decided to implement a certificate authority on your network. You have hired a third-party company to create and issue you the certificates you need to hand out to your internal users. What type of certificate authority do you need to set up?

Back 16

Enterprise Subordinate CA

Front 17

Your company has decided to install a certificate authority (CA). After you install the CA, you publish the certificate revocation list (CRL) to a central location for all CAs to use. What is this central location called?

Back 17

CRL distribution point

Front 18

Your company currently uses Windows Server 2008 domain controllers. Your company wants to use multiple account lockout policies depending on what department people are in. What does Windows Server 2008 offer so that you can do this?

Back 18

Fine-grained password policy

Front 19

You have decided to implement certificate authority servers. You have routers located on your network. What component allows systems to receive a certificate even though they do not have an Active Directory account?

Back 19

Network Device Enrollment Service