070-648 Exam Training Practice Tests (Microsoft TS: Upgrading MCSA on Windows serv 2003 to Windows Serv 2008)]

Question 1

You have Active Directory Certificate Services (AD CS) deployed. You create a custom certificate template.
You need to ensure that all of the users in the domain automatically enroll for a certificate based on the custom certificate template.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

A. In a Group Policy object (GPO), configure the Automatic Certificate Request Settings. B. On the certificate template, assign the Read and Autoenroll permission to the Authenticated Users group. C. On the certificate template, assign the Read, Enroll, and Autoenroll permission to the Domain Users group. D. In a Group Policy object (GPO), configure the Autoenrollment settings.

Correct Answer: C,D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 2

Your company has an Active Directory forest that contains multiple domain controllers. The domain controllers run Windows Server 2008.
You need to perform an authoritative restore of a deleted organizational unit and its child objects.
Which four actions should you perform in sequence? (To answer, move the appropriate four actions from the list of actions to the answer area, and arrange them in the correct order.)
Select and Place:

Correct Answer:

Explanation:
If you are performing authoritative restore on a domain controller that has already received replication of the
deletions, perform the following procedures on the recovery domain controller:
(...)
2.(...)Restore from backup requires restarting the domain controller in DSRM. Taking the domain controller offline by stopping AD DS is not sufficient to run Ntdsutil procedures to restore from backup.
3.Restore AD DS from Backup (Nonauthoritative Restore)
4.Mark an Object or Objects as Authoritative(...)
5.Restart the domain controller normally. (MY NOTE: Obviously restarting in Safe Mode won't help us much! The DC would not be able to synchronize!)
Reference: http://technet.microsoft.com/en-us/library/cc816878.aspx

Question 3

Your network contains two servers named Server1 and Server2. Server1 and Server2 run the Server Core
installation of Windows Server 2008 R2.
You need to duplicate the Windows Firewall configurations from Server1 to Server2.
What should you use?

A. the netsh tool B. the Get-Item and the Set-Item cmdlets C. the Get-Service and the Set-Service cmdlets D. the sconfig tool

Correct Answer: A

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 4

Your network contains a Windows Server Update Services (WSUS) server named Server1. All client computers are configured to download updates from Server1. Server1 is configured only to synchronize manually to Microsoft Update.
Your company deploys a new Microsoft application. You discover that the new application is not listed on the Products and Classifications list. You synchronize the WSUS server. You need to ensure that updates for the new application are available
to all of the client computers.
What should you do?
To answer, move the appropriate actions from the Possible Actions list to the Necessary Actions area and
arrange them in the correct order.
Select and Place:

Correct Answer:

Explanation:
We are explicitly told the application is not on the Products and Classifications list, so we need to first customize that list to include our new application.
After that is done, we'll have to synchronize the server again (see reference below). Finally, we need to approve the updates so they become available to clients.
"You may have to do an initial synchronization to get some products to appear in the list of product classifications."Reference: http://technet.microsoft.com/en-us/library/cc720453%28v=ws.10%29.aspx

Question 5

Your company has an Active Directory domain. You have a two-tier PKI infrastructure that contains an offline Root CA and an online Issuing CA. The Enterprise Certification Authority is running Windows Server 2008 R2.
You need to ensure users are able to enroll new certificates.
What should you do?

A. Import the issuing CA certificate into the Intermediate Certification Authorities store on all client workstations. B. Renew the Certificate Revocation List (CRL) on the Issuing CA. Copy the CRL to the SystemCertificates folder in the users' profile. C. Renew the Certificate Revocation List (CRL) on the Root C Copy the CRL to the CertEnroll folder on the Issuing CA . D. Import the root CA certificate into the Trusted Root Certification Authorities store on all client workstations.

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 6

Your network contains an Active Directory domain. The domain contains a member server named Server1.
Server1 has a single network connection.
You need to log every attempt to connect to Server1 on a restricted port.
What should you do?

A. Modify the properties of the Outbound firewall rules. B. Change the settings of the Domain firewall profile. C. Modify the properties of the Inbound firewall rules. D. Change the settings of the Private firewall profile.

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 7

Your network contains an Active Directory domain named contoso.com.
Contoso.com contains a server named Server2. You open the System properties on Server2 as shown in the exhibit. (Click the Exhibit button.) When you attempt to configure Server2 as an enterprise subordinate certification authority (CA), you
discover that the enterprise subordinate CA option is unavailable. You need to configure Server2 as an enterprise subordinate CA. What should you do first?
Exhibit:

A. Upgrade Server2 to Windows Server 2008 R2 Enterprise. B. Join Server2 to the domain. C. Import the root CA certificate. D. Log in as an administrator and run Server Manager.

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 8

Your network contains an Active Directory domain. The domain contains a server named Server1. Server1
runs Windows Server 2008 R2.
You need to mount an Active Directory Lightweight Directory Services (AD LDS) snapshot from Server1.
What should you do?

A. Run dsdbutil.exe and use the snapshot option. B. Run imagex.exe and specify the /mount parameter. C. Run ldp.exe and use the Bind option. D. Run diskpart.exe and use the Attach option.

Correct Answer: A

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 9

Your network contains a server named Server1 that runs Windows Server 2008 R2. Server1 has Microsoft
Exchange Server 2010 deployed.
You schedule a backup of the server. You discover that the Exchange Server 2010 transaction log files are
purged during the backup.
You need to prevent the Exchange Server 2010 transaction log files from being purged. What should you do?

A. From the properties of the backup, add an exclusion. B. From Windows PowerShell, run the New-WBBackupTarget cmdlet. C. From Windows PowerShell, run the New-WBFileSpec cmdlet. D. From the properties of the backup, modify the VSS settings.

Correct Answer: D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 10

Your network contains a server that runs Windows Server 2008 R2.
You need to schedule backups of the server. The solution must ensure that multiple versions of the backup are available.
Which two possible backup locations should you use? (Each correct answer presents a complete solution. Choose two.)

A. external hard disk B. internal hard disk C. remote shared folder D. optical media

Correct Answer: A,B

Microsoft TS: Upgrading MCSA on Windows serv 2003 to Windows Serv 2008 - 070-648 Exam Practice Test