Pass Your Microsoft 70-640 Exam Easy!

Thank Anonimus.95% Valid.

Many thanks Anonimus and all of you guys . for all your work.
It is still valid.
I have passed today with 876

still valid get 841 today

to Anonymous, I test today is passed 858 score
Thank you very much.

This dump is still valid. Took exam today, studied material from book, this dump and maxbox. Got 805!! This dump was 80% valid.Thanks guys!!

I can exam change and correct the answers! Thanks you all people!!

I went a month ago and I failed the 635 and learned from Newton 329q.vce, Max Books and more 35 Andy's questions.
I went back two weeks ago: two first questions I learned from Anonymous 468q.vce and the rest of FixedAnswers 468q.vce and I knew them perfectly, four new questions and got 735.
Dump 70% good
You should not go to lower the number of questions to learn
And correct the answers

Your network contains two Active Directory forests named contoso.com and fabrikam.com. Each forest contains one domain. A two-way forest trust exists between the forests.

You plan to add users from fabrikam.com to groups in contoso.com.

You need to identify which group you must use to assign users in fabrikam.com access to the shared folders in contoso.com.

To which group should you add the users?

Group 3: Security Group - Global.

Group 5: Security Group - Universal.

Which One Is Right (Universal Or Global)?? can anyone verify !!

@ whiskey@cia.ca - sorry for wrong link -

http://technet.microsoft.com/en-us/library/cc732590%28v=ws.10%29.aspx

see my response in the fixed thread.

I just uploaded a fixed copy of this so we can start a new thread with questions and answers. It should be up in a few hours.

wrong link, Create Default Application Directory Partitions.

Am I thinking too much like microsoft. the question does not ask about changing group membership. the question is asking how to apply a solution.
yes, you would need to plan and create your security groups in advance.

Plz explain:
F - Q18
Replicate new user
Current: A. Active directory sites and services
Should be: C. Repadmin

Exam J Q18 is A not C

the question is:

Your network contains two Active Directory forests named contoso.com and fabrikam.com. Each forest contains one domain. A two-way forest trust exists between the forests.

You plan to add users from fabrikam.com to groups in contoso.com.

You need to identify which group you must use to assign users in fabrikam.com access to the shared folders in contoso.com.

Planning is to assign user from fabrikam to a group present in contoso.
If you create global group in contoso, you can assign only user of same domain, in this case contoso, if you create a group Domain local in contoso, you can assign user from fabrikam .

@ whiskey@cia.ca

According to this -
http://technet.microsoft.com/en-us/library/cc739505%28v=ws.10%29.aspx

Only CA administrators and certificate managers are assigned by using the Certification Authority snap-in. To change the permissions of a user or group, you must change the user's security permissions, group membership, or user rights.

My understanding is the only way to do this is by using users and computers or group policy to change the user or group membership.

Q39 from exam E. Te question is about offline joining of the server to the domain, but answet is about Windows 7 ;/

exam K Q14
exam G Q37
Both questions
You need to ensure that all of the members of a group named Group1 can view the event log entries for Certificate Services.

My answer for both, (same question, different answers is CA Certification Authority)

that is where you configure permissions and roles for the CA.
refer to
http://www.kurtdillard.com/StudyGuides/70-640/6.html (1/3 deep into the article)
Figure 6: Configuring CA Permissions.

Can someone confirm if the logic is correct.

Ok guys. I have created a list of questions that need to be corrected. Please go over them and check if everything is in order.

If you want me to add corrections please use the same format. It makes it much easier for me to process.

Much thanks :)

EXAM G:
Q8: B. [Repadmin] http://technet.microsoft.com/en-us/library/cc835086(v=ws.10).aspx

EXAM I:
Q18: ???

------------------------------------------------------------
EXAM J:
Q18: C. [Group 3: Security Group - Global.]

Q24: A. [Active Directory Sites And Services console]

Q37: A. [Enable the Audit directory service access setting in the Default Domain Controllers Policy Group Policy Object.] http://technet.microsoft.com/en-us/library/cc731607(v=WS.10).aspx

------------------------------------------------------------
EXAM K:
Q11: D. [Enable loopback processing in merge mode.]

Q31: C. [Repadmin]

Q41: D. [Set-ADForest]

------------------------------------------------------------
EXAM L:
Q3: B,D,E [!@#$1234ABCD/1-2-3-4-5-a-b-c-e/%%PASS1234%%]

Q5: D. [Enable-ADOptionalFeature] http://technet.microsoft.com/en-us/library/dd379481(v=ws.10).aspx

Q13: Seattle > Servers > DC2 >> NTDS Settings << http://www.petri.co.il/configure_a_new_global_catalog.htm

------------------------------------------------------------

exam K Q10 - I would say it is D.

It is a selective trust so you have to give group 1 the allowed to authenticate permission to access the shared resource from the server's computer account.

could someone check Q 25 and Q36 from F andQ2 from A? I'm not sure if the answers are true.

I would say both are correct. You need to add the managers as a local admin or assigned the auditors role through group membership.

http://technet.microsoft.com/en-us/library/cc732590%28v=ws.10%29.aspx

exam K Q14 Group policy management can assign to those groups
exam G Q37 Users and computers can assign to those groups

damn can someone put most of the good questions in a updated separate dump? its a mess boys !

@whiskey@cia.ca you are right, in Active directory users and computers, attribute editor tab, I can see the account lockout.

about question:

exam K Q14
exam G Q37

can you help me?

About question K Q12 is identical of K Q44 but with different answer

You have an Active Directory domain named contoso.com.
You need to view the account lockout threshold and duration for the domain.
Which tool should you use?

Computer Management
Net Config
Active Directory Users and Computers
Gpresult

Net User
Active Directory Users and Computers
Group Policy Management Console (GPMC)
Computer Management

**computer mangement, net config, net user does not have the information.**
leaves, Active Directory Users and Computers
Group Policy Management Console (GPMC) to configure
Gpresult /h gives an HTML report
Active Directory Users and Computers >advanced feature option turned on,attribute editor tab.
(I don't have a server in front of me so I can not confirm that Active directory users and computers is the correct answer)
but my answer would be > Active Directory Users and Computers < for both.

exam K Q14
exam G Q37

someone have info?

@whiskey@cia.ca

About question K Q12 is identical of K Q44 but with different answer

@whiskey@cia.ca
@ssniyer

Thanks for help

@Astraor from Italy,
exam K Q10, I agree with answer (UPN is not the question being asked for the forest), when assigning permissions, they are assigned to the local resource. So talking about about changing computer >account< permissions is wrong. by process of elimination, leaves A: the permissions of the Group1 group

exam K Q29 Start of Authority 2 places where you delegate the person in charge.
b:From DNS Manager, open the properties of the Start of Authority (SOA) record ofcontoso.com, Specify admin1.contoso.com as the responsible person.
c:Open the %SystemrootSystem32DNSContoso.com.dns file by using Notepad and change all instances of "hostmaster@contoso.com" to "adminl@contoso.com"
The difference is the GUI properties is >person.domain.com<, the dns database file is >person@domain.com<
http://technet.microsoft.com/en-us/library/cc816941(v=ws.10).aspx#BKMK_winui

exam K Q12 A:Active Directory Users and Computers, Gpresult /h file.html also works
exam K Q37 b: dsmod http://technet.microsoft.com/en-us/library/cc732406(v=ws.10).aspx
Modifies attributes of one or more existing partitions in the directory.
exam K Q30
A: and D: explanation for D: http://technet.microsoft.com/en-us/library/cc778798(WS.10).aspx
J Q7 answer is correct, you need to activate DS changes auditing. needs to be activated at the command line, the subcategories is the giveaway in this question. if auditing DS changes, it needs to be applied against the default domain controller policy.
J Q37 DS auditing is done in 2 parts.
correct answer is A:Enable the Audit directory service access setting in the Default Domain Controllers Policy Group Policy Object.
turning on the GPO alone would not be a complete answer. You would then need to activate with the command line, auditpol.exe (for DS changes)

@NowAnonymous

Are you planning to upload a fixed version of this?

@Olaf - You are right. Answer is D.
@Astraor - Exam J, Q7 answer is D because none of the other answers are correct and answer D is the best course of action. I had reasoned the answer for Q37 earlier and I am pretty sure A is the right answer for Q37, that is, Audit Directory Access has to be enabled in Domain Controller Group Policy.

someone can get me clarification about 2 question

exam J Q7 and Q37

How Can this be B? Should be D?
Your company has an Active Directory domain. All servers run Windows Server 2008 R2. Your
company uses an Enterprise Root certification authority (CA) and an Enterprise Intermediate CA.
The Enterprise Intermediate CA certificate expires.
You need to deploy a new Enterprise Intermediate CA certificate to all computers in the domain.
What should you do?
A. Import the new certificate into the Intermediate Certification Store on the Enterprise Root CA
server,
B. Import the new certificate into the Intermediate Certification Store on the Enterprise
Intermediate CA server,
C. Import the new certificate into the Intermediate Certification Store in the Default Domain
Controllers group policy object,
D. Import the new certificate into the Intermediate Certification Store in the Default Domain group
policy object.

@NowAnonymous

you have missed the question 411 from pdf dump

Answer is H

@Anon from United States
Yes I'm still planning on updating the .vce but only between Monday[Tomorrow] and Wednesday as I want to wait for all the Questions to be corrected and discussed.
If someone else wants to correct them for me your more than welcome to do so and it will be much appreciated. I dont have allot of time on my hands and when I do have some time I study most of the time.

Thanks to everyone contributing with corrections and sources.

Take a look here: http://www.examcollection.com/microsoft/Microsoft.certkey.70-640.v2012-08-11.by.Marvin.369q.vce.file.html
If you have input please help.

exam K Q12
exam K Q37
exam K Q30

Another question

exam K Q42

i hope this is last question

exam K Q49

exam K Q20 the right answer seems C not A

@ssniyer, @whiskey@cia.ca,
thanks for help :)
Seems that this dump have a lot of error..
I'have another doubt

exam K Q10
exam K Q29

@jose123 for question please post exam and question

@Astraor from Italy, for your question
exam F Q28,exam G Q8,exam J Q24,exam K Q8,exam K Q31
Correct answer for ALL is repadmin /syncall
http://technet.microsoft.com/en-us/library/cc835086(v=ws.10).aspx

Seems like most of the exam has wrong answers.

from test K, Q 37 say the answer B:Dsmod?.I think it's A: AD Sites and Services or D: Dsmgmt, what say you?

@Anon: Exam I, Q18 - I think the 3rd option is given incorrectly and there should be an option that says - Restart DC. However, in your choices, option - Perform a restore of system state data to a time before the OU was deleted - should come first followed by - Run the NTDSUtil - to mark the restoration as Authoritative.

@Astraor - I have gone through all the same/similar DNS questions pointed out. In all but one (Exam J, Q24), Repadmin is shown as one of the answer options. I would go with Repadmin in all the cases. Reason - One of the prime benefits of AD integrated zones is that no separate DNS replication topology is needed for DNS zone updates and zone replication happens along with AD replication. The best tool to force AD replication for DCs is Repadmin.

In the case where (Exam J, Q24) Repadmin is not an answer option, I will go with AD Sites and Services because it allows to force AD replication across connection objects.

Both DNSLint and nslookup are diagnostic tools. DNSLint is useful to make sure RRs are associated with the right services and nslookup for domain namespace resolution issues. There is no diagnostic need in this question.

Dnscmd is useful to administer/maintain a DNS server or zone using a command line tool. It is also the right tool to create Application Directory Partition. However, I don't see literature to suggest it as a good replication tool for AD integrated zones.

Q: you need to ensure that only members of a group named Admin can create certificate templates. Which tool should you use to assing permissiones to admin1?

The answer is not B, is D: Active directory sites and services.

you think the same?

Q: you need to specify a user named Admin1 as the person responsible for
managin the zone: the test say B and C. but I was looking and in both cases must write admin1.contoso.com without @, meaning that the answer is: A and B

you need back up all of the GPOs, group police permissions and group police links for the domain. What should you do?

Answer in test is A: from group police management console.But in other test the answer is d: from windows powershell, run the backup-gpo cmdlt. This is correct for me.

@NowAnonymous

Are you still planning to upload a fixed version of this?

Exam I Q18

The answer to this does not seem right to me. It says you are in Directory Services Restore Mode (DSRM) so,

I think it should be:

1. Run the Ntdsutil utility
2. Perform a restore of system state data to a time before the OU was deleted
3. ???

and I would think you need to restart in normal mode but that is not a option.

@Astraor - Thank you for pointing out this question. The answer to Exam J, Q37 is A - Enable the Audit Directory Service Access setting in the Default Domain Controllers Policy. Refer to Technet article - http://technet.microsoft.com/en-us/library/cc731607(v=WS.10).aspx - for details. I will get back to you on the DNS question tomorrow. Need to research it out.

@Astraor - Q38 and Q48 - I think you are right. Q27 - I would stick to E. Answer D reloads the zone from the locally stored zone file. Selecting - Transfer new copy of zone from master - Transfers a full copy of the zone from the Master server, Server1 in this case.

@ssniyer thanks for reply.
on this dump there are some question apparently identical but with different reply
I'm little confused.
I know that the command DSlint is used for check replication but for replication when is used DNSCMD and when REPADMIN?
the question are:

exam F Q28
exam G Q8
exam J Q24
exam K Q8
exam K Q31

some reply seems wrong

@Astraor - Q31: Answer is Repadmin (C). DNS is active directory integrated and all DNS are domain controllers. Therefore, DNS records are replicated along with AD replication. Repadmin can be used to force replication. I am pretty sure about this and I did see somebody else agree on this point.

Q14 is a little more tricky. Take a look at - http://technet.microsoft.com/en-us/library/cc732590 - note that Auditing is an Operating System feature and Auditor is an OS role. The question is about viewing event log entries for Certificate Services, which means auditing CS is already enabled. The Role and Activities table in the technet article says - By default the Local Administrator holds the System Audit user right. Therefore by making the Manager group member of the local Administrators group, they can be made to view the event log entries for the CS. This can be achieved through a GPO. Therefore, I would suggest Group Policy Management as the answer.

on previous post question from K exam is number 38 not 37
Sorry

question:

exam K Q27 correct reply seems D not E
exam K Q37 correct reply seems D not A
exam K Q48 correct reply seems B not C

Please check the question
Exam K, Q14
Exam K, Q31

Someone can tell me if reply from Exam J, Q37 are correct? Why?
Thanks in advance

Took the exam today and passed 845. These questions were absolutely 100% valid. In fact, I could not have passed without this test. Awesome work, man!

Ignore previous post, Q18 correct, K,Q41 answer is wrong

Exam K, Q18
forest wide UPN Q18 correct answer of B: Set-ADForest

Set-ADForest
Syntax:
To add values:
-UPNSuffixes @{Add=value1,value2,..}
To remove values:
-UPNSuffixes @{Remove=value3,value4,..}
To replace values:
-UPNSuffixes @{Replace=value1,value2,..}
To clear all values:
-UPNSuffixes $null

The GUI tool for UPN modifications is Active Directory Domains and Trusts.


http://technet.microsoft.com/en-us/library/cc772007.aspx

Exam K, Q41
same scenario UPN to multiple domains in the same forest
correct answer is D:Set-ADForest

Exam K, Q18
forest wide UPN

UPN works at win2k level
correct answer is A: Active Directory Sites and Services
http://technet.microsoft.com/en-us/library/cc772007.aspx

@Mar
correct answer is group A because Domain Local Group Can have member from other trusted domain but is visible on one domain. Global group is visible on multiple domain but can have member only from the same domain

I passed today with 900 using the ones from a month ago and just looked at the K and L sections of this one. Quite a lot were valid. I would google some of the questions in this one for the correct answers though.

can someone edit the dump and fix the bad answer with the good ones and up them in another topic please?

cheerz

Q18 from J have wrong answer. Correct is Group 3 - Global security group, because you have 2 domains and Domain Local group could have only members from 1 domain.

Exam L, Q5
Active Directory recycle Bin is activated by
D: Enable-ADOptionalFeature
http://technet.microsoft.com/en-us/library/dd379481(v=ws.10).aspx

Exam L, Q13
hot spot answer is
Seattle > Servers > DC2 >> NTDS Settings <<

http://www.petri.co.il/configure_a_new_global_catalog.htm

Your network contains an Active Directory forest named contoso.com. The functional level of the forest is Windows Server 2008 R2

The DNS zone for contoso.com is Active Directory-integrated.
You deploy a read-only domain controller (RODC) named R0DC1. You install the DNS Server server role on R0DC1.

You discover that R0DC1 does not have any DNS application directory partitions.

You need to ensure that R0DC1 has a copy of the DNS application directory partition of contoso.com.

What should you do? (Each correct answer presents a complete solution. Choose two.)

A. From DNS Manager, right-click RODC1 and click Create Default Application Directory Partitions.
B. Run ntdsutil.exe. From the Partition Management context, run the create nc command.
C. Run dnscmd.exe and specify the /createbuiltindirectorypartitions parameter.
D. Run ntdsutil.exe. From the Partition Management context, run the add nc replica command.
E. Run dnscmd.exe and specify the /enlistdirectorypartition parameter.

Answer: A,D

I think the answer should be D, E

http://technet.microsoft.com/en-us/library/cc742490%28v=ws.10%29.aspx

Exam K, must be wrong. C has to be the right answares.

A corporate network includes an Active Directory-integrated zone. All DNS servers that host the zone are domain controllers. You add multiple DNS records to the zone. You need to ensure that the new records are available on all DNS servers as soon as possible. Which tool should you use?
A. Ntdsutil
B. Dnscmd
C. Repadmin
D. Nslookup
answer: D

Exam L. About Site and DC 2 as a global catalog. It can not be smtp, its NTDS setting under DC2

@anon from United Kingdom Your going to have to be more specific than that. The answers randomize on some of our clients. :) Use this format:
Exam L Question 13
A.**** is incorrect it must be D.****

Thanks

@Mar My location is GMT+2. I will look into those questions tonight. If you see anything else just post them here and I will scan through them tonight. Thanks
We need all the help we can get. I'm still new to network administration, I only have 1 and 1/2 years experience from doing Microsoft courses and my A+ and Network+

@Everyone This dump is very valid and you will pass your test if you study it well. Some of the questions are incorrect but not enough of them to let you fail. You need to get more than 15 question incorrect to fail your test. Good Luck

Test L Q13 is D

All new questions in this dump are correct but i don't know the answers are right or wrong can anyone please reassures us. Thanks

Q18 and Q 40 from K are very similar questions but answers are not the same.. Can someone check this?

Q11 from K should be loopback processing in merge mode

I have a other order list of answers in this question about passwords but I see that You know what i want to say ;)
Please check if the Q48 krom K shouldn't be answer" Configure DC4 as a preferead bridgehed." ? I think it's the correct because if you use prefered bridgehead nothing else replicates changes. Chech it if you can ;)

@NowAnonymous from Unknown - can you do that today ?:P I am make this exam monday.. It would be very helpful

@Astraor
Thanks I will go check on technet and do revision on those questions.

@Mar
Thanks for pointing that one out.
A. 1-2-3-4-5-a-b-c-e
D. 123456!@#$%^ Must be: E. %%PASS1234%%
F. !@#$1234ABCD

Letters, numbers and special characters.

Q3 from exam L seem to be wrong..
The correct should be B,D,E not A because in A you use only 2 types of characters :)

also verify
exam K Q10

also verify the question:
exam K Q11

Can You verify the question :
exam L Q5
exam L Q13
the reply for those question seems wrong

Also from South Africa. Will be taking the exam next week Sat if studying goes as planned :P

Chad, please let us know if this dump is valid

Hi Chad, i am also from South Africa, please keep me posted as well thanks :-)

@ Anon

does it have the correct answers of new questions or like 461q dump

Hi

I am from south africa and taking the exam on thursday, I will keep everyone posted.

good job Anonymous ,thank you

Hi everyone.
This dump is a combination of "InfiniteKewl " and the new questions from the latest "pass4sure.pdf" contributed by "Anonimo".
I added Exam K and L with a total of 65 new questions. I'm not sure but there might be a few repeated questions from previous exams and I apologise for this as I created the ".vce" ASAP after the ".pdf" was shared with us late at night.

Drag & Drop and Hot Area questions are fully interactive and I corrected Question 8 from Exam G from B.repadmin to H.dnscmd. ref: http://technet.microsoft.com/en-us/library/cc778513(WS.10).aspx

Good Luck with your exam and please reply here on how it went as I'm also almost writing my exam. :P