Pass Your Microsoft 70-640 Exam Easy!

iam pass today score 801

Hi. Everybody. I intetsted how many question in exam?

Passed 2 days ago!!! :-)
grade 800
very good and valid - thank you!!!

Alhamdulilah..damn i got 1000 marks,ths dump is completely valid,around 5 questioin were outside,
lik time service not working in domain
ans was changing the pdc emulator

thn adprep/forestprep is not workin
ans:shift shema master..

but really this guy is great.DUmps worked out extra ordinarily for me

Wow !! Passed today with 825, One or two new questions. This dump is still valid.
Thank you and good luck for all.

Question F/18

the answer in the vce is "Active Directory Siets and Services"
I think this is wrong because this kind of replication will replicate NOT only the new passwort for the user!
i think it should be "repadmin" --> http://technet.microsoft.com/en-us/library/cc742095(v=ws.10).aspx

what do YOU think?

today i did the exam ,,,927/1000. and only use 2012-10-24.by.NowAnonymous.223q.vce dump is 100% valid.
not wanted this all of parts 486. some of parts are expires.

Very good dump . 49 Q from 50 from this dump . passed yesterday go on >Egypt

Brazil, nailed the exam, 2 new questions at best. Dump 95%

i just passed today with 805/1000 so the dumb is 90% accurate. still valid,thank u for ur help

Passed with a 858 The exam is 90% accurate. Still good in the USA

passed yesterday with 800, study with this dump and the manual. The manual is necessary in the real world if you encounter any topic that you do not know.

iam pass today score 805

vaild 90%

Your network contains an Active Directory forest named contoso.com. The forest contains a single domain and 10 domain controllers. All of the domain controllers run Windows Server 2008 R2 Service Pack 1 (SP1).
The forest contains an application directory partition named dc=app1, dc=contoso,dc=com. A domain controller named DC1 has a copy of the application directory partition.
You need to configure a domain controller named DC2 to receive a copy of dc=app1, dc=contoso,dc=corn.
Which tool should you use?

A.Active Directory Sites and Services
B.Dsmod
C.Dcpromo
D.Dsmgmt

Answer needs to be checked. Isn't the answer A?

Passed today 856/1000. Found 3 new questions. Either i got some wrong or some questions are incorrect. Regardless thank you very much who put this dump together. You guys are the best.

I passed yesterday with 752.found 10 new questions
Thanks for everyone who contributed to this dump

I passed yesterday with 788/1000.Thanks for everyone who contributed to this dump

PASSED today!! Valid dump

95% from this dump. Passed with 858/1000. If you study book and this dump, you will definitely pass. United Kingdom

i did the exam today 840/100
97 percent of the questions were available'
thanks a lot!!!!

I studied this dump and i passed the exam yesterday 805/1000
all the question in the dump are still valid,
thank you a lot!!

Dump is still valid. Passed today with 788/1000

Took the exam last weekend and I Passed it.! Scored above 760.! found 2-3 new questions. My advice is to follow all the latest (on or after august) 70-640 exams without sticking only to this dump.! But dont get confused as few answers are different for the same question from dump to dump. But if u do so u can defo pass even without knowing what is MCTS or MCITP stands for.! Gud luck guys.!

Gave the exam today in kuwait. studied all questions from A to L. But failed, as the questions have changed. The dump is 10% valid. The dump needs to be updated. Appreciate your cooperation.

Passed today with 929 all questions came from this dump except 1 (App to computer that has free disk space ---> wmi filter)

Dump is still valid. Passed today with 820/1000

Passed exam with 788.most questions came from dump but lots of different answers. 2 or 3 new questions. I google most of questions when I wasnt sure in the dump are right answer. Read a book will help you to remember. Good luck!!!

Passed the test in Houston, Tx last week. Scored an 894. 100% of the questions were from this dump. Some questions were definitely incorrectly chosen as right answers, but a big thank you to Anon, NowAnonymous, Andyfx, Maxbox, Cooper and Newton. Since microsoft doesn't like to put everything you need to know to pass in their textbooks, this dump was essential.

Is the answer to Exam A Q 10 not D?

Why is it B? I think the answer must be D.

plz reply someone.

Dump completely valid, passed today with 805/1000 only saw 1 new question, and i didnt even learned the entire dump, Thnx alot Anon

I passes exam on last week scored 894.i think still this is valid.
Good luck.
thanks nowanon.

to "khey from Indonesia" about my IMHO on Restricted groups. You are right, there are 2 ways of doing the same thing as I read now the instructions about overriding local Admins group with preferences.

Probably the answer is GP preference. Though with Restricted Groups same thing can be done. (it was the only thing used on old servers till 2008)

Be careful Guys

There is questions Asked For

What The Tool You should use it mean that it is a tool not console or utility

Tools Like Command lines

But Utility Like DCpromo

Consoles Like Sites And Services

Cause There is A questions Asked For Tools and the Answer Is Wrong and Not A tool it is Console or Utility

Good Luck For All

Ok, I can see the sections in the Editor.. :)

And also can someone please verify for 1 last time that all below corrections are right..

That wud be great..

Thanks for everyone who contribute in this dumps. Passed today with 840 score

Thanks to all who contributed to this dump.

Hi Guys Dump is still valid just took the exam 4hrs ago got 805. All the questions was in the dump . especially from exam G to L. Goodluck!

passed today with 858, no new questions

passed yesterday with 735. about 15 new questions

@dave

You Are Welcome :)

And Good Luck for All of us :)

Thanks Islam Zidan and reveur, i didn't get hem, now with explanation i get it!

@dave

The Default Domain Policy Applied On the Domain Contoso.com Cause It Got The priority So All OUs Will Apply This Policy By Inheritance So Answer C is right we should Link GPO1 to Finance OU The Right Answer Is (C)

Your network contains an Active Directory domain. You have five organizational units (OUs) named Finance, HR, Marketing, Sales, and Dev. You link a Group Policy object named GPO1 to the domain as shown in the exhibit. (Click the Exhibit button.)

You need to ensure that GPO1 is applied to users in the Finance, HR, Marketing and Sales OUs. The solution must prevent GPO1 from being applied to users in the Dev OU

A Enforce GPO1.
B Modify the security settings of the Dev OU.
C Link GPO1 to the Finance OU.
D Modify the security settings of the Finance OU.

As shown in Exhibit, Block Inheritance are enable for Finance and Dev OUs. If we modify the security settings of the Dev OU (answer B) GPO1 is NOT applied to users in the Finance OU. That why we need to link GPO1 to the Finance OU (answer C). I tested this in virtual environment.

@dave

I Said That Too The Most Right Answer Is B

Can someone verify Exam G Q4 35of40

Your network contains an Active Directory domain. You have five organizational units (OUs) named Finance, HR, Marketing, Sales, and Dev. You link a Group Policy object named GPO1 to the domain as shown in the exhibit. (Click the Exhibit button.)

A Enforce GPO1.
B Modify the security settings of the Dev OU.
C Link GPO1 to the Finance OU.
D Modify the security settings of the Finance OU.

Answer is C, I think its B ?

took the exam today passed with 841. dump is valid, there is a new question about group policy about applying App to computer that has free disk space.

"
daniel from Israel - Sep 02 2012, 10:58 PM Report Spam
.next: "You need to ensure that when users from OUs Sales and Engineering log on to client Pcs they're automatically added to local Administrators, and at log-out removed" - answer RESTRICTED GROUPS. (Computer ConfigurationWindows SettingsSecurity SettingsRestricted Groups) And not, policy preferences. IMHO. (an 100% IMHO lol). just google for both, pol pref and rest gr."

the correct answer is Group Policy Preference, not Restricted Group. check the case scenario of group policy preference.

valid for GER
passed today
THX everybody

Please help me clarify.
Exam K Q 9

Your network contains a AD Domain. The domain contains 2 AD sites named Sie 1 and Site 2. Site one contains DC1 and DC2. Site 2 contains DC3 and DC4.

Replication between the 2 sites occur between 20:00 and 01:00 every day.

At 07:00 while logged on to DC1 a Admin deletes a user account.

You need to restore the account with the minimal administrive effort.

The dump states A:
on DC3 stop ADDS perform a authoritive restore and start ADDS.
Why would you do the restore on DC3 if the change has not even been replicated yet?

Or is it due to the fact that the questions does not state that there is a different backup medium?

to nt:

http://technet.microsoft.com/en-us/library/cc794837(v=ws.10).aspx

If your domain controllers are upgraded from another operating system to Windows Server 2008, you must install DFS Replication on all domain controllers in the domain, raise the domain functional level to Windows Server 2008, and then follow a migration process to move from using FRS replication of SYSVOL to DFS Replication.

In my opinion, right answer - D. On the domain controller that holds the primary domain controller (PDC) emulator FSMO role, run dfsrmig.exe.

to Whiteboi:

http://technet.microsoft.com/en-us/library/cc794886(v=ws.10).aspx

correct answer - c. Programs and Features in the control panel.

Can some help with this one?

Your network contains a server named Server1. Server1 runs Wind Server 08 R2 and has the AD LDS role installed. Server1 hosts 2 AD lds instance named Instance1 and Instance2. You need to remove Instance2 from Server1 with out affecting Instance1.

A. NTDSUtil.
B. DSdbutil
c. Programs and Features in the control panel.
D. Server Manager.

please someone explain me why the answer is C.

Your network contains an Active Directory domain. All domain controller run Windows Server 2003. You replace all domain controllers with domain controllers that run Windows Server 2008 R2. You raise the functional level of the domain to Windows Server 2008 R2. You need to minimize the amount of SYSVOL replication traffic on the network. What should you do?

A. Raise the functional level of the forest to Windows Server 2008 R2.
B. Modify the path of the SYSVOL folder on all of the domain controllers.
C. On a global catalog server, run repadmin.exe and specify the KCC parameter.
D. On the domain controller that holds the primary domain controller (PDC) emulator FSMO role, run dfsrmig.exe.

And also plz tell me someone how to distinguish Exam A, Exam K, Exam I.. and so on.. I cannot find where it starts and where it ends, help please..

Thanks Daniel buddy, keep it up.. and also plz tell me whether the answer to Q 2 is correct or not the one already discussed below by "mci"

The Auditpol.exe.. one

What is the correct answer there?

you create a new AD domain. Functional Level of the domain is Window Server 2008 R2. The domain contains five domain controllers. you need to monitor the replication of the group policy template files. which tool should you use?

the answer in one question is NTFRSUTL and the other question is DFSRDIAG. can someone clarify please? thanks did some googling but still couldnt find the right answer

your network contains an AD domain named contoso.com. The domain contains a server named Server 1. The AD FS role installed on server 1. Contoso.com is defined as an account store.

A partner company has a Web-based App that uses AD FS authentication. The partner company plans to provide users from contoso.com access to the Web App. you need to configure AD FS on Contoso.com to allow contoso.com users to be authenticaed by the partner company.

What should u create on Server 1?

Answer is: B

but, here is my understanding. Partner Company host a web app, that makes it a resource partner. But again, the question specified that partner company needs to authenticate contoso.com users which makes it an account partner. So, a partner company is both An Account and Resource partner. so, does it mean that Server 1 needs to be a resource partner so that partner company can authenticate contoso.com users?? but again, partner company plans to provide contoso.com users access to its web app. So, Server 1 is again both account and resource partner???

can someone clarify please

JoshK
Thanks. I plan on taking it at the end of the month.

hi anonymous how r u tahxs for help plz tell mee which questions are wrong tell mee the correct answers i will be very thank full to u..

dump is still valid.i passed today with 805.no new questions.but mixed the options place

the dump still valid

passed

@Jaws222
Yes and yes. Test was typical Microsoft exam. I think I got about 3 point and shoot, 3 pick and order. I did get the one drop down that most of the dumps say to be aware of. This dump is 100% valid however some questions are wrong. Make sure you know why the answer is what it is.

Josh K
Nobody
Anon

You guys from the United States, did you test through Prometric?

Passed today with 841 from Spain

Congrats Monti.Planning to take the test within a weeks time.Thats y like to know would it be useful till that time.Thanx for the info

had exam today. all questions from this dump. passed with 770.
dump was 100% valid for me.

PASSED TODAY 792/1000
For me this dump was 100%

Dump is valid in Zimbabwe.passed an hour ago with 911.

Exam J: ".enabled scavenging on DC1, you discover stale records, ensure they're deleted" - answer: D, "dnscmd /startscavenging" (instaed of A "enable scavenging on DC1" :P lol, its already enabled, from the question)

exam K - "You need to ensure that DC1 and DC4 are the only servers that replicate AD between sites" - answer is: SET DC4 AS BRIDGEHEAD. Why? coz current answer is nonsense (create conn obj on dc4? :O then what? it will not sync the sites, only adds another 'road' from one dc to another, doesn't tells them anything to do.)

.next: "You need to ensure that when users from OUs Sales and Engineering log on to client Pcs they're automatically added to local Administrators, and at log-out removed" - answer RESTRICTED GROUPS. (Computer ConfigurationWindows SettingsSecurity SettingsRestricted Groups) And not, policy preferences. IMHO. (an 100% IMHO lol). just google for both, pol pref and rest gr.

The question in exam K about "Get-ADdomainControllerPasswordReplicationPolicyUsage" - need to be fixed, the green line shows "repadmin" :)

Mohammed, yes, it is forest trust and not external. (couple comments below, you can see my 1st post about it :) ). Now, Exam K, 2 mistakes:
"..must config DC2 recieve a copy of dc=app1.." - Not 'dsmod / dcpromo :D / dsmgmt (google?)' ! (dsmgmt is a tool for LDS, "ADAM".). Answer is "AD sites and serv."

2) Issues with DNS copy of the zone on server2, both have same serial number, need to transfer complete copy of zone from server1 to 2" - answer: "Transfer from Master" and not the long one (simple google search reveals that theres NO long command "Transfer a new copy of zone to master" )

@nt and @Joshk

About the trust question, I think that it might be forest trust..

http://technet.microsoft.com/en-us/library/cc755427%28v=ws.10%29.aspx
Since both forest are Win 2000 forest.. Plz reply anyone

Passed yesterday with a 823/1000. Had 50 questions on the Exam.

I have passed today 752, Thanks Allah.

Alot of questions came from these dumps, but also alot of tuff questions about certificates and federation.

Thanks All. and good luck for everybody .it was really tuff ..

concentrate and study well///

FOR ALL YOU CAN TOOK
Get a Free Second Shot Offer to Pass a Certification Exam

Starting August 27, 2012, Microsoft is offering a Second Shot offer to take and pass a Microsoft IT professional or developer certification exam, if you do not pass the exam on your first attempt. This offer is available worldwide, to anyone who registers for Second Shot and fails their first attempt at one of these exams. This is a limited time offer, so register today.
http://www.microsoft.com/learning/en/us/offers/secondshot.aspx

handed over today, the dumping remains in sile.3-5 new questions.

Dump still valid in Dubai.Passed today with 876 score! Most questions found in this dump. More questions came from dns and adcs.Only 5 new questions present. I studied the microsoft study guide and this dump.Thanks to everyone who contributed!!!

Passed today with 900, studied this dump (and corrected a few answers) and used the microsoft official training guide books.
80% were identical to this exam file, the other 20% were worded slightly different or had more answer options to choose from. Best advice is much the same as every elses advice to make sure you know why the answer is what it is (or isn't what it is) instead of just memorizing.

Please, this question is very imortant for me. The most os questions said " choose 2 possible answer from 4" Could anyone tell me is in the real exam say the number of answer you should mark

Thanks in advance

Passed 752 all questions from this dump

Took test today. passed got upper 800's

All questions came from this dump.

@daniel guess you don't know how this website works then.
If you have the correct answers please share them so we can update the vce.

Guys, about the forest trust question: its definitely NOT external trust! coz external is between 2 single DOMAINS in different forests!
+ another mistake: the dns question "resolve to FQDN, point and shoot"(Ex: I, 14) it is not in reverse lookup.. who's the noob making these dumps? :P
cmon .. around 20% wrong answers, and I'm looking through the dumps with my teacher, so. better just study it - don't remember all from dumps.

Pass Today with 788 score.Few modified questions.Dump vaild.

I passed with 940 today i only studied from the dumps anon have released
just like he says dont just memorize try to understand the questions
and a word of advice i had about 10 question where you have 8-10 answer options so study these good guys .
Thank you anon and everyone who contributed to this dumps .
Good luck to everyone who still study it .

This dump is still vallid.
I just past todat with 841.
All the questions where from here exept for a few new ones about AD FS.
I studied from the official MS book before starting with these questions. There is no quick way of learning. Just sit down and studie and most importantly do all the practical assignments. Those alone are worth more then any exam dump.

Just passed with score 876, dump still valid.
Don't try to memorize answers to all 468 questions, try to understand every answer and you'll pass.

I passed today 752/700
No New question. it's all here. and make sure you read all question on 5 last exam. :)

I failed today with 615/700 , it has been change :((

Hi guys just gave exam 30 minutes ago, i got 788 this dumps is valid in pakistan,thanks everyone who work for this dumps.

@Joshk
A forest trust can be between two ad forest. Reference: http://technet.microsoft.com/en-us/library/cc731607(v=WS.10).aspx
You don't need to raise the forest functional level for an external trust, but for a forest trust you need to raise the forest functional level from windows 2000 for at least windows 2003.

@nt
The fact that the question states that there are TWO AD forests is why it is an external trust.

BTW I'm taking my cert tomorrow I will let you guys know if this is still valid.

Hi guys, I just receive a mail from Microsoft. They start a new round of SECOND SHOT. Good luck!

Very good dump. Passed today 770700. Few questions thath weren't here. I studied ony this dump.

Hey guys.. Secondshot for Microsoft Exams is available!!!

http://www.microsoft.com/learning/en/us/offers/secondshot.aspx

exam I:
Your network contains two forests named contoso.com and fabrikam.com. The functional level of all thedomains is Windows Server 2003. The functional level of both forests is Windows 2000.You need to create a trust between contoso.com and fabrikam.com. The solution must ensure that users from contoso.com can only access the servers in fabrikam.com that have the Allowed to Authenticate permission set.What should you do?
This dump said that steps are:
-Raise the functional level of both forest
-Create an external trust
-Configure selective authentication
I think should be
-Raise the functional level of both forest
-Create a forest trust
-Configure selective authentication
Because in the first step you raise the functional level, you don´t need to raise a forest functional level of windows 2000 for external trust, only for forest trust.
what you think?.

Passed today slightly with 717 based on this dump. Most of the questions
are from the last 5 exams, 12 new questions. thanks guys-)

Hi all,

I've passed today with 895, with studying this exam. There was 1 new question. Answers are 80-85 % correct in my opinion.
Good luck, Guys :) And many thanks!
From Hungary

@Cancer:
"Membership in the AD RMS Enterprise Administrators and the Enterprise Admins group in AD DS, or equivalent, is the minimum required to complete this procedure. " - That is from the article you linked.
"During installation, Active Directory Rights Management Services (AD RMS) creates the AD RMS Service Group on the local computer and grants it appropriate permissions on all of the resources that are required for AD RMS to operate." - This is from the article I linked.
I definitely could be wrong, but I think given the choices for answers, I still would choose "B. AD RMS Service Group"
Domain admin would definitely not be a bare minimum account.

To JoshK: I am not a native English speaker but in question is written that User1 should be able to change SCP for the AD RMS installation! (It could be misunderstanding from my side!) Probably you should see http://technet.microsoft.com/en-us/library/ee849853(v=ws.10).aspx

Your network contains a single Active Directory domain. Active Directory Rights Management Services (AD RMS) is deployed on the network.

A user named User1 is a member of only the AD RMS Enterprise Administrators group.

You need to ensure that User1 can change the service connection point (SCP) for the AD RMS installation.

The solution must minimize the administrative rights of User1.

To which group should you add User1?

Answers:
A. AD RMS Auditors
B. AD RMS Service Group
C. Domain Admins
D. Schema Admins

Test says C. Domain Admins is correct, this is incorrect. The question states that you must use the MINIMUM administrative rights. B. AD RMS Service Group would be the correct answer.

Ref:
http://technet.microsoft.com/en-us/library/cc754418.aspx

exam F, question 47:
Your network contains an Active Directory domain. All domain controller run Windows Server 2003. You replace all domain controllers with domain controllers that run Windows Server 2008 R2. You raise the functional level of the domain to Windows Server 2008 R2. You need to minimize the amount of SYSVOL replication traffic on the network. What should you do?

A. Raise the functional level of the forest to Windows Server 2008 R2.
B. Modify the path of the SYSVOL folder on all of the domain controllers.
C. On a global catalog server, run repadmin.exe and specify the KCC parameter.
D. On the domain controller that holds the primary domain controller (PDC) emulator FSMO role,
run dfsrmig.exe.
in this dump the answer is C, why is not D?
help please, thanks

@ emy
k-29 i guess it's b and c
and for k-37 Dsmgmt id more likely for me

exam K Q37

i confused about the answer
help please

exam K Q29
is it B,C or A,B

hi,
today i taken exam i got 810, go through clearly, because some options confused, 3 or 4 questions some difficult to answer the quetions out of 50. this valid dump.

Passed today with 823 points! Almost all questions in the exam are in this dump. Thanks a lot!!!

Passed today 770, answers in dump not 100% valid but studying this dump is a sure pass..
thanks for the help guys,praise to you lord

Dump is valid. Scored 858. Majority of the questions were from H-L with a couple from the earlier sections

passed with 820 this dump is 100% valid all questions from this dump.

many thanks to Anonymous and anyone how work on these dumps specially Anonymous thanks man you are a life saver ;)

Best luck to all

Who can please tell me why the exams are so divers in difficulty.
For example, exam A is much easier then exam C.

@marilao, You should read the article referenced all the way to the bottom and take note that even you quoted that it is a new audit policy SUBCATEGORY.. While "You need to ensure that changes made to Active Directory objects can be logged.. as the question states, but "you can only view them with the command-line tool Auditpol.exe."

example command:
auditpol /set /subcategory:"directory service changes" /success:enable

http://technet.microsoft.com/en-us/library/cc731764%28v=ws.10%29.aspx

@ NowAnonymous, The answer is C http://technet.microsoft.com/en-us/library/cc775412(v=WS.10).aspx

dumps are 100% valid no new question. passed with 841 marks.

Thanks a lot to Anonymous, AndyFx, MMFSH & dear friends for contributing towards this exam. This dump is valid 95% in Kuwait passed today with 894 marks.

Dont memorize the dumps? what are you mean

Thank you astrator, anon and anonymous and others who contribute to the exam. I pass the exam w/ 823 score. 25% new exam. Dont memorize the dumps.

Exam A Question 2

Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2. The Audit account management policy setting and Audit directory services access setting are enabled for the entire domain. You need to ensure that changes made to Active Directory objects can be logged. The logged changes must include the old and new values of any attributes.

What should you do?

The answer in the VCE is A: Run auditpol.exe and then configure the Security settings of the Domain Controllers OU.

I think it should be B:

From the Default Domain Controllers policy, enable the Audit directory service access setting and enable directory service changes.


In the Windows Server® 2008 operating system, you can now set up Active Directory® Domain Services (AD DS) auditing with a new audit policy subcategory (Directory Service Changes) to log old and new values when changes are made to AD DS objects and their attributes.

http://technet.microsoft.com/en-us/library/cc731764%28v=ws.10%29.aspx

What do you guys think?

@astraor: exam k q 37

check this page

http://technet.microsoft.com/en-us/library/cc725780(v=ws.10).aspx

@ssniyer

I agree with WMI filtering. Can't think of a simpler way to filter a policy by system requirements. But then again, I just woke up.. :)

http://technet.microsoft.com/en-us/library/cc779036%28WS.10%29.aspx

Exam K, Q29:
You create a standard primary zone for contoso.com.
You need to specify a user named Admin1 as the person responsible for managing the zone.
What should you do? (Each correct answer presents a complete solution. Choose two.)

A. Open the %SystemrootSystem32DNSContoso.com.dns file by using Notepad and change all instances of "hostmaster.contoso.com" to "admin1.contoso.com".
B. From DNS Manager, open the properties of the Start of Authority (SOA) record ofcontoso.com, Specify admin1.contoso.com as the responsible person.
C. Open the %SystemrootSystem32DNSContoso.com.dns file by using Notepad and change all instances of "hostmaster@contoso.com" to "adminl@contoso.com".
D. From DNS Manager, open the properties of the Start of Authority (SOA) record ofcontoso.com. Specify admin1@contoso.com as the responsible person.

I think that the answers should be AB, not BC. I've opened sample files on server from folder C:WindowsSystem32dnssamples and in that file stated following:

; <contact email> is the email address if the person responsible
; for this domain's database file. Instead of
; writing an '@' in the email name, write a '.'

ignore my previous comment :) accident happened

it's b. Enable block inheritance

for

The corporate network has an AD domain. The marketing department has a marketing OU which contains users and computer accounts of the Marketing department. You need to install a number of softwares in the Marketing department computers and accordingly design a MarketingApp GPO. You link the GPO to the Marketing OU. You need to make sure that the GPO ensures that sufficient HDD space is available on the computer before installing the softwares. What should you do?

i think it's a. Modify the Group Policy permissions.

Another question that stumped me was:

The network has two forests, namely contoso.com and fabrikam.com. Fabrikam.com has a child domain named eng.fabrikam.com. Users in contoso.com need to access resources in eng.fabrikam.com. What should you do?

a. Enable domain wide authentication.
b. disable selective authentication.
c. Create a forest trust between Contoso.com and Fabrikam.com
d. Enable forest wide authentication.

Ans. I read this question several times and was a little puzzled with the answer options. I am not sure if this is one of the unscored questions, as mentioned in the narrative before the exam starts. Anyways, I selected A - Enable domain wide authentication since is seemed to me the most likely answer.

Another question with a twist was:

The corporate network has an AD domain. The marketing department has a marketing OU which contains users and computer accounts of the Marketing department. You need to install a number of softwares in the Marketing department computers and accordingly design a MarketingApp GPO. You link the GPO to the Marketing OU. You need to make sure that the GPO ensures that sufficient HDD space is available on the computer before installing the softwares. What should you do?

a. Modify the Group Policy permissions.
b. Enable block inheritance
c. Configure the link order
d. Enable loopback processing in merge mode.
e. Enable loopback processing in replace mode
f. Configure WMI filtering
g. Configure Restricted Groups
h. Configure Group Policy Preferences

Ans: I chose f - configure WMI filtering, but please check this out.

I took the exam today and passed with a score of 947. I think I got 3 out of 50 questions wrong. I saw a few new questions. Below is one of them:

The corporate network comprises of an Active Directory forest. All domain controllers run Windows 2008 R2. The domain controllers also function as DNS servers. Contoso.com zone is hosted as an Active Directory integrated zone and the zone information is kept in ForestDNSZones. dev.contoso.com is hosted as a primary zone in a member server in the domain. You need to ensure that domain controllers are able to resolve queries for the dev.contoso.com zone. What should you do?

c. Configure zone delegation.
d. Add the NS records of dev.contoso.com

Ans: I answered C and I think the answer is correct. This is because I scored 100% in the DNS subsection of the exam. But I was in a dilemma as to which of c or d is the answer. I don't remember the a and b options but they were unlikely to be the answer.

K Q44, my opiniono correct answer is Active Directory users and computers

Active Directory Users and Computers >advanced feature option turned on,attribute editor tab

GPMC is used for configure, i Think using Users and Computers is more efficient

Account lockout threshold and duration for the domain are stored in Default Domain Policy GPO. We can see it in Group Policy Management Console (GPMC). In my oppinion answer C is correct.

EXAM K // Q44
________________________________________________________________
You have an Active Directory domain named contoso.com.

You need to view the account lockout threshold and duration for the domain.

Which tool should you use?
A. Net User
B. Active Directory Users and Computers
C. Group Policy Management Console (GPMC)
D. Computer Management
________________________________________________________________
ANSWER: C
I think it should be B. Active Directory Users and Computers.
Thoughts on this question?

the question ask wich group do you need in contoso for assign permission to users from fabrikam

THe question is simple and says

"You plan to add users from fabrikam.com to groups in contoso.com.You need to identify which group you must use to assign users in fabrikam.com access to the shared folders in contoso.com."

the question is to which user you add user from fabricam, the question do not ask to create a group and then nest in the group in contoso.
The only group can have user members from Fabricam and can be assigned to shared folder in contoso is "Domain Local Security Group"

the question ask wich group you need in contoso for assign permission to users in fabrikam

You need to add users from fabrikam to global group in fabrikam and then add that group in contoso domain local group and assign premissions on shared folders in contoso..

I think they ask which group you should create in fabrikam and then add that group in contoso group.. Just read question carefully..

If you create Global Group on contoso you can't* add member from other domains

for question J Q18 correct answer is A "domain local group"

You plan to add users from fabrikam.com to groups in contoso.com

Domain Local group can contain member from forest but is visible only on its own domain and this is the case. If you create Global Group on contoso you can add member from other domain in the forest because global group can have member only from it's own domain.

Sorry EXAM J, Q18

EXAM , Q18: Answer should be C: Security - Global. Global group is the only group which can be nested in other group in TRUSTED EXTERNAL DOMAIN.. Universal group cannot be added to any group in trusted external domain.

MCTS Self-Paced Training Kit (Exam 70-640), Chapter 4, Lesson 1, Table 4-1.

Exam K Q 37
someone can check this question?

EXAM K, Q42: Is wrong answer, it should be A

The question is accounts, not one account..

Get-ADAccountResultantPasswordReplicationPolicy
Gets the resultant password replication policy for an Active Directory account.

http://technet.microsoft.com/en-us/library/cc753470(v=ws.10).aspx

EXAM K, Q48: Answer should be B: Configure DC4 as prefered..

List of corrected questions:
------------------------------------------------------------
EXAM C:
Q31: A.C.F
------------------------------------------------------------
EXAM J:
Q25: A.
------------------------------------------------------------
EXAM K:
Q10: D. [Server 1 grants access to its resources to Group1]
Q20: A. http://ss64.com/ps/get-adomaincontrollerpasswordreplicationpolicyusage.html
Q30: D.E
------------------------------------------------------------
EXAM L:
Q7: C.D http://technet.microsoft.com/pt-pt/library/ff625687%28v=ws.10%29.aspx
Q13: Seattle > Servers > DC2 >> NTDS Settings << http://www.petri.co.il/configure_a_new_global_catalog.htm
------------------------------------------------------------
------------------------------------------------------------
Thanks to everyone who contrebuted to this and good luck with the exam.

TK - This is a continuation of the dumps released in the last couple of weeks with continued corrections to questions in the dump based on crowd sourced answers. I'm also sitting for this test this friday in the US and will be using this dump and a couple of other things to prepare (labs from the MS Press Books, Measureup.com PTs, etc.).

The prior dumps have been reasonably good (70% effective?) for most other people. The main thing, as everyone has posted, is to know the material so if you get a question you don't know or one that isn't in the dump, you can determine the right answer.