Pass Your Microsoft 70-640 Exam Easy!

@someone

on Exam K, Q10 it is a resource access, in this case is Server1 that grant access to its ow resource to group1 then you modify permission on server1

Exam K, Q20 - Repadmin views wich account is allowed to replicate and Get-ADDomainControllerPasswordReplicationPolicyUsage views only users whos passwords are already cached. Question says You need to identify which user accounts CAN have their password cached on RODC1, not already cached..

@ Asaad please advise us about your exam thanks.

Exam G, Q37 - D - To add the Auditor role you add it within AD, not Group Policy
Exam J, Q15 - B - cannot create a partition on RODC.
Exam J, Q 25 - I believe is A as well.
Scavenging has to be enabled on both the domain and the server for /startscavenging or /ageallrecords to work: This command fails unless scavenging is enabled for the DNS server and the zone - per tech net.
Exam K, Q10 - Why would it be D? Permissions are set on a group.
Exam K, Q20 - Still not sure which is right, they both do the job.
Exam K, Q30 - DE, Cannot create partitions in RODC, only enlist partitions from replica.
Exam L, I agree.

sorry Exam J, Q25 is A: From DNS Manager, enable scavenging on DC1.

because the enable scavenging on the zone is different from on the DC1

Your company uses an application that stoares data in an Active Directory Lightweight Directory Services (AD LDS) instance named instance1.
You attempt to create a snapshot of Instance1 as shown in the exhibit. (Click the Exhibit button.)
You need to ensure that you can take a snapshot of Instance1.
What should you do?

I think answer should be D. Set the Start Type for the Volume Shadow Copy Service (VSS) to Manual.

I checked this & specific error appears when VSS is set to disabled. no need to start VSS in cmd, more enough if it is set to manual. snapshot command will start it

Exam J, Q 25: Don't think answer is A because A is already part of the question: "From DNS Manager on DC1, you enable scavenging for the contoso.com zone.

You discover stale DNS records in the zone."
and
Dnscmd startscavenging

Notifies a DNS server to attempt an immediate search for stale resource records in a specified DNS server.
but question also stated that you found stale records already, so I think ageallrecords is the answer, but could someone please very verify? Thanks.
Scavenging of records does not occur unless the records are timestamped. NS (name server), SOA (Start of Authority), and WINS records are not included in the scavenging process and are not timestamped even when the ageallrecords operation is run.

@Astraor. Exam K question 20 A

repadmin /prp view <rodc> allow

allow: .. "The RODC can cache passwords for this list of security principals only."

http://technet.microsoft.com/pt-pt/library/cc835090.aspx

exam J question 15 my opinion correct asnwer is B remember that RODC can only replicate partition from main DC

Exam K question 20 A or C ?????? Please help
Exam K question 30 my opinion correct answer are DE. same think before. we talking about RODC and we can only replicate partition from main DC we cant create partition or modify because it is a Read Only Domain

Ok I think its time for revision Nr.3. I want to upload a corrected version of this dump.

List of questions that should be corrected:
------------------------------------------------------------
EXAM C:
Q31: A.C.F
------------------------------------------------------------
EXAM G:
Q37: G. [Group Policy Managment] http://technet.microsoft.com/en-us/library/cc732590%28v=ws.10%29.aspx
------------------------------------------------------------
EXAM J:
Q15: D.
Q25: A.
------------------------------------------------------------
EXAM K:
Q10: D.
Q20: A. http://ss64.com/ps/get-adomaincontrollerpasswordreplicationpolicyusage.html
Q30: C.E
------------------------------------------------------------
EXAM L:
Q7: C.D http://technet.microsoft.com/pt-pt/library/ff625687%28v=ws.10%29.aspx
------------------------------------------------------------
------------------------------------------------------------
Thanks to everyone helping with the answer corrections.
Good Luck with the exam everyone.

Dump is still valid in US. Just passed it with 823. About 2 new questions were on the exam that are not in this dump.

Pam will u pls tell me which sections are most important or which exam parts are most important,do u have any idea? if yes so pls tell me because i am thinking to give paper on this Wednesday,thank u.

Passed on 23rd August with 841. This dump is 100% valid in Malaysia.

Thank you.

Question L Q2 Should be Win 7 SP1 and Server 2008 R2 SP1
http://technet.microsoft.com/en-us/library/ff625687(v=ws.10)
because of /resourceSACL

Filed Today with getting 466, dump is not valid all answers are wrong.. please check other nice dump..

Filed Today with getting 466, dump is not valid in india..

can someone please tell me the right answer for this question

your network contains an enterprise certification authority (CA) that runs windows server 2008 R2 enterprise. you need to ensure that all of the members of a group named group1 can view the event log entries for certificate services. which snap-in should you use.

A. certificate template
B. certificate authority
C. authorization manager
D Active directory users and computers
E TPM managment
F. security template
G group policy managment
H. enterprise PKI
I. certificates

some dumps answer it with (G). others with (D). i apprecite if someone answer the question. thanks

I passed today with 858, 5 new Qs remaining was from this dump, although this dump have wrong answers but u can pass by go through this.
I follow this dump + cbts + some CA & DNS chapters reading from book MS Training Kit.
Thanks to everyone who give time to make this dump.
Last 5 exams are the keys.
Now going for 646.
Thanks

@someone thanks

@astraor,
I read the /prp command a bit more and I think I was a bit wrong in my explaination as well. The Get-ADDomainControllerPasswordReplicationPolicyUsage command will list an entire group of people. Where as the /prp command you have to use the view command with a username.
Ex:
Syntax: repadmin /prp <OPERATION> <RODC> [ADDITIONAL_ARGS]
You have to list a Operation, which can be ADD, DELETE, VIEW, MOVE and from what it looks like, it can only do operations with 1 user at a time.
Technet Article:
http://technet.microsoft.com/en-us/library/cc835090(v=ws.10).aspx

Yes it is valid in US, i took the exam today but i failed because i didn't study the whole dump, but all question are valid!!! Good luck i will take it again as soon as possible before they change it. Most questions from the last 5 exams.

I passed the exam today.The dump is valid. Only one new question.

Passed today with 823..Go thru all 468 and exam is a no-brainer..Thanks Everyone

pass today 841..almost question in this dump, only one new question.

Zooly: I have a test tomorrow morning, what was the new Qs, pls share with us.

Zooly: can you tell me which tests had the most focus? Thank you!

Passed today 911, few new questions, this dump is 90% valid

@someone you are right in fact the qestion is:

"You need to identify which user accounts can have their password cached on RODC.

i this case the question ask if user CAN have password cached right?

Just passed the Exam with 911/1000
All of the questions from this dump

This dump is valid!! Thanks astrator.

@astraor,
repadmin /prp shows you who *CAN* be cached. Not who has actually logged in and cached their credentials. The Get-ADDomainControllerPasswordReplicationPolicyUsage command shows you who *HAS* logged in. I thought this question was wrong myself, until I read the technet articles 4-5 times.

look this link:

http://technet.microsoft.com/en-us/library/administer-prp-for-rodc-with-repadmin.exe(v=ws.10)

but you can use also repadmin /prp to view users that have password cached

Exam K Q20

I would happen to believe that the answer is correct.

http://ss64.com/ps/get-adomaincontrollerpasswordreplicationpolicyusage.html

-RevealedAccounts
Search for accounts which have passwords stored on the read-only domain controller.

about question:

Exam K Q20
Exam K Q42

Have you more info about?

Hello, finally, after five months, I spent today with 868 and tell them the following:

1. Study the questions that have been discussed for sure are putting these.
2. I studied with http://www.examcollection.com/microsoft/Microsoft.passguide.70-640.v2012-04-27.by.JACK.330q.vce.file.html and after this dump, but beware of the latest, revised discussions of dubious questions.
3. They are using the same questions but are changing the answer choices.

Thank you all for your comments, now I'm on the 70-646, someone tells me what the best dum to study?

@kay ..
i also have exam in 3 days .. kindly guide me about after your exam

Those guys who have passed the exam can point out which exam sections are more important in this dump. Lkie a-b-c-d..?
I have 1 day left, can give some extra time on it.

You manage an Active Directory forest named contoso.com.

The forest contains an empty root domain named contoso.com and a child domain named child.contoso.com. All domain controllers run Windows Server 2008. The functional level of the forest is Windows Server 2008.

You need to raise the functional level of the forest to Windows Server 2008 R2. You must achieve this goal by using the minimum amount of administrative effort.

What should you do?

To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Choices:
A. Upgrade all domain controllers in the forest to Windows Server 2008 R2 SP1
B. IN Each Domain, upgrade only the primary domain controler (PDC) emulator to Windows Server 2008 R2 SP1
C. run adprep /forestprep on the schema operations master in each domain
D. run adprep /domainprep on the infrastructure master in each domain.
E. upgrade only the domain naming master to Windows Server 2008 R2 SP1
F. Raise the functional level of the forest to Windows Server 2008 R2 SP1

Answer is stated in order
C, D, A, F

@whisky:
Is drag & drop,point n shoot are same in the exam I .?

I am gonna give my exam on this Saturday.

i will point out the Qs in which i have difficulty, total 11 Qs need to be sure the answer is right or wrong.

Exam J Question 12 someone have more info?
Please if anyone have more info about new question can share ?
On which topic are new question?

Exam J Question 12

Wouldn't you want to upgrade all of the domain controllers first?
and then /forestprep, /domainprep and then raise the functional lvl?

I find it odd that someone will do the forestprep and dominprep first when you know you will have to upgrade all of the domain controls to R2 SP1.

passed 788 today. 10 new questions but you'll pass with this.
Use it as studie guide, if you fail this you probly have to read more.

hello guys, I've passed today, if you study this dump, you will pass
. my score 805

What's the new questions? Are they difficult or trick?
If the new questions are 20% and new answers are 15%, summary 35%. Moreover in this dump not all questions are right. And you can't memorize all, so it's a bad news :(

Passed today in France, scored 805.
Used this Dump + Microsoft book on 70-640 (Rev2)
New questions are already in place (around 20%) Change answer (15%)

All the rest comes from this dump, so 468 questions is a lot but if you spent a little time with it, this exam is a no brainer..

@whiskey@cia.ca you remember something about those questions?

this dump is only 50 questiones?
what am is missing?

I did exam MCTS 70-680 in Srilanka. my score 850. if i try morely i can get 1000. just miss. I am preparing for MCITP 7-640 exam. in this. inshaallah i'll get 1000 score. may God bless for me.

Exam L, Q13
the answer is
Seattle -> Servers -> DC2 -> NTDS Settings

http://www.petri.co.il/configure_a_new_global_catalog.htm

Passed on 22/08/12 with 805.Still valid in India. Almost all questions from this dumps.Thanks everybody for the great work.Did not have time to complete the full text book so last 2 days just went over this dumps..passed.but none the wiser in the end hahahha
Spasibo bolshoi NowAnonymous for sparing ur time
Best of Luck for the others for the time the Dump is valid

passed today 876, 4 new questions, 4 completely different answers

good luck, this questions valid mostly the last 5 sections.

I just passed the exam with 805 .from Toronto.. thanks to everyone who made the vce...
I got almost all questions from this dumps..

Passed today in Luxembourg with 823 !

Almost all the question were the same as the ones in this dump..

Item 13
@Astraor, Anon

regarding to: http://technet.microsoft.com/en-us/library/cc742490%28v=ws.10%29.aspx

correct answer should be D, E
The question is to ENSURE operations AND each answer states a complete solution. Assuming that DNS was added after ADDS on RODC, the RODC must be enlisted to DNS application partition. Both commands do just this.

@Astraor from Italy- guess that means the question is invalid.

J Q37, answer is A: to audit directory services changes (not access),needs to be applied to the default domain controller GPO
J Q25, answer is A: From the DNS manager, enable scavenging on DC1
question says scavenging enabled on zone (needs to be enabled in 2 places, zone and the manager), the startscavenging parameter will work but does not fix the problem. Assuming that the question is asking to fix scavenging so it works automatically.

ok just tested on my rodc server.
In DNS Manager
On Writable DC when right click on Server Node in drop down menu appear "create Default Application Directory Partition" this option is inexistent on RODC server then on K question 30 answer A is wrong.

@Astraor

I get what you are saying and to be on honest I don't know if either one is right or wrong, I'm just guessing. I've seen it listed as either /createbuiltindirectorypartitions or /enlistdirectorypartition.

Why I think it is create, is that the other complete solution is to use DNS Manager to create the partitions.

http://technet.microsoft.com/en-us/library/cc739505%28v=ws.10%29.aspx

Do you know if ntdsutil.exe can enlist directory partitions?

btw, Thank you for helping me with this. Active Directory is very new to me still.

I found this:

If you install DNS server after the AD DS installation, you must also enlist the RODC in the DNS application directory partitions. The RODC is not enlisted automatically in the DNS application directory partitions by design because it is a privileged operation. If the RODC were allowed to enlist itself, it would have permissions to add or remove other DNS servers that are enlisted in the application directory partitions.

http://technet.microsoft.com/en-us/library/cc742490%28v=ws.10%29.aspx

Exam C Q31 Should be A C F

sure? both on question J15 and K30, remember thath we talking about a RODC and we can't create a writable partition on a Read only Domain, we can only have a replicated partition from a writable domain Present in forest. Someone says me that on rodc is possible only enlist directory partition but i'm not sure.

exam J Q15 is D. I'm still not sure about exam K Q30.

Dnscmd createdirectorypartition

Creates a DNS application directory partition. When DNS is installed, an application directory partition for the service is created at the forest and domain levels. This operation creates additional DNS application directory partitions.

Exam K, Q30
Answer should be
C and E
The computer name is R0DC1 not RODC1 (zero as opossed to the letter O)
I don't think this question is valid.

there are 2 answers, both valid. B D (using NTDSUTIL) and C E (using DNSCMD).

Took the exam today and passed with a score of 805! Praise the Lord :)

Guys, it's worth after you understand the material fully to spend half a day studying the dumps. More than 85% of the questions are literally from these dumps. All the best for you all!

exam K Q14
exam G Q37

You need to ensure that all of the members of a group named Group1 can view the event log entries for Certificate Services.

My opinion is Group policy Management for both.

Only CA administrators and certificate managers are assigned by using the Certification Authority snap-in. To change the permissions of a user or group, you must change the user's security permissions, group membership, or user rights.

http://technet.microsoft.com/en-us/library/cc732590%28v=ws.10%29.aspx


Certificate services logs are posted in the event viewer. They are also in the logfile at C:WindowsSystem32CertLog or wherever you put them.

To allow someone to view event logs on servers they need to be members of the event log readers group

To allow someone to audit Certificate logs they have to be designated with the Auditor's role

To give access to the log file they need access rights -

all 3 can be granted via group policy.

here is a good article - http://mscerts.programming4.us/windows_server/windows%20server%202008%20%20%20adding%20an%20account%20to%20the%20event%20log%20readers%20group.aspx

Just as I was about to get ready to go through Round 4 for the 640 exam, I see new questions have been posted. Good thing I didn't schedule it right away. I have a question. I have ran across Question #332 and I have read through several study guides here on Examcollections and found two answers to this specific question. Is the answer "Authorization Manager" or "Active Directory Users and Computers"?

I am not going to lie, 468 questions for a 50 question test seems OUTRAGEOUS. I thought 250 was hard. Don't get me wrong I used one for sec+ and that was really hard to but..man..

@MK from Poland

I set 6 month experience with Win2008 and 6-12 months with previous Wins.
Questions were through the whole dump. Old and new parts. There were Drag and drop, Hot Spot like in the dump.
GPO questions were from newest parts.

@MK question were from new tests and old tests 60% / 40% ,I had 3 or 4 interactive questions

@Michael
Are the questions from the newest test (for example from I,J,K and L) or from the older too (A,b,C,D.)? How many interactive questions - drag and drop, point and shoot. ?

Passed with 841. some answers were slighty changed. I used the 461 question dump. Thank you for helping. I did the lab book and listened to youtube videos on the subject. I also listened to the audio program while going to work. on to the next one.

Just passed the exam. 50q 120min.
No new questions. Did according the dump but got only 805.
Therefore there are many wrong answers.

Thanks NowAnonymous great work

exam L question 7 i think shoul be CD

http://technet.microsoft.com/pt-pt/library/ff625687%28v=ws.10%29.aspx

Exam K Q20 i think is A not C

http://technet.microsoft.com/en-us/library/administer-prp-for-rodc-with-repadmin.exe(v=ws.10)

Look question

exam J Q15
exam K Q30

Hi guys,

I had my exam yesterday and score 805. Even with wrong answers you are able to pass,

Thanks a lot for the dumps!

Hey Osa I am taking the exam in a few days can you perhaps tel me what was focussed on mostly in the exams?

please can someone verify the answers i have exame in a few days need some directions .thanx NowAnonymous .. great work ;)

Hi I passed exam yesterday with score 850, all questions from this dump. Thanks all good job.

@NowAnonymous

I labeled all the questions with "Please check Answer" for the ones I was not able to find.

The only change I have made to mine is, I added sections for A - L so on the score card you can see which section you need to work on.

If you do plan to upload a new copy of this, please include that if you can. I hope you do, because this still needs a lot of work.

When you do plan to test, btw?

Your network contains an Active Directory domain named contoso.com.

The Active Directory sites are configured as shown in the Sites exhibit. (Click the Exhibit button).

You need to ensure that DC1 and DC4 are the only servers that replicate Active Directory changes between the sites.

What should you do?

A. Configure DC1 as a preferred bridgehead server for IP transport.
B. Configure DC4 as a preferred bridgehead server for IP transport
C. From the DC4 server object, create a Connection object for DC1.
D. From the DC1 server object, create a Connection object for DC4.
Answer: C

I think answer should be B, because a Connection object only sets the site replication. The bridgehead is the setting for the actual server that sends and receives on each site. The KCC will set DC1 as the default bridgehead, because it is the only server on that site, so the only server that needs to be made sure it is a bridgehead is DC4. Am I wrong?

Thanks for uploading this. No need to check the PDF. I double checked when I created the previous .vce

Good Luck everyone

exam L Q7
the correct answer seems to be CD not BD

http://technet.microsoft.com/pt-pt/library/ff625687%28v=ws.10%29.aspx

Answer C is correct http://technet.microsoft.com/en-us/library/ee617194.aspx

Ignore that, answered myself, completely read them wrong. Answer is correct. Seeing cross-eyed i'm studying so much.

Exam K
Your network contains an Active Directory domain. The domain contains five sites. One of the sites contains a read-only domain controller (RODC) named RODC1.

You need to identify which user accounts can have their password cached on RODC1.

Which tool should you use?

A. Repadmin
B. Dcdiag
C. Get-ADDomainControllerPasswordReplicationPolicyUsage
D. Adtest

Answer is C, but should be A. As far as I know > Get-AD will only pull one user at a time, and shows their usage, where as repadmin /prp will show all users that have their password cached.

This is a copy with Fixed Answers based on posts. It still has wrong answers, just not as many. Please post your questions with ExamX QuestionXX format. Also please look at the PDF or first post that this is based off of and make sure no questions have been left out. Thank you!

Thanks for the corrected version..