Microsoft 70-647 exam - 10 Sample Questions.
Certification Disclaimer and Tips - Please Read Me First
Sample Q1
You are an enterprise administrator for Trevdogcertified.com. The corporate network of Trevdogcertified.com consists of a single Active Directory forest that is made up of a single root domain and 12 child domains.
The Administrators of the child domains need to frequently modify the records for authoritative DNS servers for the child domain DNS zones. The administrators take a long time in modifying these records.
As an enterprise administrator of the company, you have been assigned the task to implement a solution that would minimize the effort required to maintain name resolution on the network. Which of the following options would you choose to accomplish this task?
[A] Create stub zones for the child domain zones on the root domain DNS servers.
[B] Create stub zones for the root domain zone on the child domain DNS servers.
[C] Configure conditional forwarders for the parent domain on the child domain DNS servers.
[D] Configure delegation subdomain records for the child domains on the root domain DNS servers.
Sample Q2
You are a network administrator for Trevdogcertified.com. The corporate network of the company consists of a single Active Directory domain. All domain controllers on the corporate network of the company run Windows Server 2008.
You have been assigned the task to configure access restriction policies for the network which would only allow Windows Vista computers that have Windows Firewall enabled to access the network.
Which of the following option would you choose to accomplish this task?
[A] Implement Authorization Manager.
[B] Create and link a Group Policy object (GPO) to the domain and then enable the Windows Firewall settings in it.
[C] Create a Group Policy object (GPO) and an organizational unit (OU), link the GPO to OU and then enable the Windows Firewall settings in the GPO.
[D] Implement Network Access Protection (NAP).
Sample Q3
You are an enterprise administrator for Trevdogcertified.com. The corporate network of Trevdogcertified.com consists of a single Windows 2000 native Active Directory domain. All domain controllers run Windows Server 2003.
The network contains four Windows Server 2003 servers configured as follows:
1. TTS1 - Terminal Services licensing server
2. TTS2 - Terminal server
3. TTS3 - Terminal server
4. TTS4 - Terminal server
As an enterprise administrator of your company, you have been assigned the task to deploy a new terminal server that runs Windows Server 2008 and implement a solution that enables reporting for all Terminal Services client access licenses (TS CALs).
Which of the following options would you choose to accomplish this task?
[A] Upgrade all domain controllers to Windows Server 2008.
[B] Upgrade TTS2, TTS3, and TTS4 to Windows Server 2008.
[C] Upgrade TTS1 to Windows Server 2008.
[D] Raise the functional level of the domain to Windows Server 2003.
[E] None of the above.
Sample Q4
You are an enterprise administrator for Trevdogcertified.com. The corporate network of Trevdogcertified.com consists of a single Active Directory domain named Trevdogcertified.com. The file servers are installed on the domain. All File servers of the company run Windows Server 2008.
The partnership company of Trevdogcertified.com called Genesis Engineering consists of an Active Directory forest named GenesisEngineering.com.au. The users of GenesisEngineering.com.au usually need to access files resources on the network of TestKing.com.
As an enterprise administrator of Trevdogcertified.com, you have been asked to plan a solution that would ensure the secure access of the file server resources on Trevdogcertified.com by the users of GenesisEngineering.com.au. In your solution you also need to ensure that that the users of GenesisEngineering.com.au can access resources only on the file servers of Trevdogcertified.com and the users of Trevdogcertified.com cannot access any resource on GenesisEngineering.com.au.
Which of the following actions would you take to accomplish this task? (Select all that apply)
[A] Create a one-way forest trust so that GenesisEngineering.com.au trusts Trevdogcertified.com
[B] Set selective authentication on the trust.
[C] Set domain-wide authentication on the trust.
[D] Create a one-way forest trust so that Trevdogcertified.com can trust GenesisEngineering.com.au
Sample Q5
You are an enterprise administrator for Trevdogcertified.com. The company has a head office and a branch office. The corporate network of Trevdogcertified.com consists of an Active Directory domain called Trevdogcertified.com and a Microsoft Exchange Server 2007 organization named Trevdogcertified.
The network users use email-id credentials to log into their domain account. The company has recently decided to change itsname from Trevdogcertified.com to Trevdogqualified.com. As a result the domain name and the email addresses were modified to include the new company name in the email addresses used by the network users.
You have been assigned the task to ensure that all the network users should be able to log on to their computers by using the new email id credentials. You also need to ensure that the existing applications on the network do not get affected by any changes you make to the network to accomplish this task.
Which of the following options would you choose to take a first step to accomplish this task?
[A] Rename the domain to Trevdogqualified.com by using the Active Directory domain Rename Tool.
[B] Create a new forward lookup zone called Trevdogqualified.com by using the DNS Management Console.
[C] In the Exchange Server 2007 organization, create a new accepted domain called Trevdogqualified.com.
[D] Create an alternative user principal name (UPN) suffix of Trevdogqualified.com.
Sample Q6
You are an enterprise administrator for Trevdogcertifed.com. The corporate network of Trevdogcertified consists of an Active Directory forest and two domains. All domain controllers the domain run Windows Server 2008.
Trevdogcertifed has recently acquired a company called CurrencyClassroom.com, which also had an Active Directory forest and two domains. The domain controllers of CurrencyClassroom.com also run Windows Server 2008.
As an enterprise administrator of the company, you have been assigned the task to migrate the CurrencyClassroom.com domainresources to the Trevdogcertifed forest.
Which of the following options would you choose to accomplish this task?
[A] From the Trevdogcertifed AD forest, run the Active Directory Migration Tool (ADMT).
[B] From the CurrencyClassroom AD forest, run the Active Directory Migration Tool (ADMT).
[C] From the Trevdogcertifed AD forest, run the Microsoft Windows User State Migration Tool (USMT).
[D] From the CurrencyClassroom AD forest, run the Microsoft Windows User State Migration Tool (USMT)
Sample Q7
You are an enterprise administrator for Trevdogcertified.com. The company has a head office and 10 branch offices. The corporate network of Trevdogcertified.com consists of an Active Directory domain. All the domain controllers run Windows Server 2008 and are located in the main office.
You have recently deployed Windows Server 2008 domain controller in each branch office. You are concerned about the security of the domain controllers in each branch office.
Which of the following options would you enable to configure domain controller of each branch office to ensure that any unauthorized user should not be allowed to access user passwords either locally or over the network or when the server is running?
[A] IPsec policy.
[B] Read-only domain controller (RODC)
[C] Windows BitLocker Drive Encryption (BitLocker).
[D] Windows Firewall.
Sample Q8
You are an enterprise administrator for Trevdogcertified.com. The company has a head office and three branch offices that are connected to each other through a high speed WAN link. The corporate network of Trevdogcertified.com consists of an Active Directory domain. The domain contains servers run Windows Server 2008.
The corporate network supports Certificate Services infrastructure. The routers have been configured in each office and they were configured to support Simple Certificate Enrollment Protocol (SCEP). The network contained servers that run Windows Server 2003 Standard Edition and were configured as Certificate Services servers.
You have been asked to enable device authentication for all routers and recommend changes to the Certificate Services infrastructure to support device authentication. Which of the following options would you choose to accomplish this task?
[A] Configure the Active Directory Certificate Services (AD CS) role on a new server that runs Windows Server 2008 Enterprise Edition.
[B] Configure the Network Protection and Access Services (NPAS) role on a new server that runs Windows Server 2008 Standard Edition.
[C] Upgrade the existing Certificate Services servers to Windows Server 2008 Standard Edition and then enable the Web enrollment component.
[D] Upgrade the existing Certificate Services servers to Windows Server 2008 Enterprise Edition and then enable the Network Device Enrollment service.
Sample Q9
You are an enterprise administrator for Trevdogcertified.com. The corporate network of Trevdogcertified consists of an Active Directory domain. The domain contains servers run Windows Server 2008 and client computers run either Windows XP Service Pack 2 (SP2) or Windows Vista Service Pack 1 (SP1). The network has 120 servers and 5,000 client computers.
You have been assigned the task to deploy Certificate Services on the network and ensure that there is automatic certificate enrollment on the network and there are supported certificates for all client computers.
Which of the following options would you choose to accomplish this task? (Select two. Each correct answer will form a part of the answer)
[A] Deploy a stand-alone certification authority (CA).
[B] Deploy an enterprise certification authority (CA).
[C] Create V1 templates.
[D] Create V2 templates.
Sample Q10
You are an enterprise administrator for Trevdogcertified. The corporate network of Trevdogcertified consists of servers that run Windows Server 2008. The company has 6,000 users on its network.
You have been asked to implement a collaboration solution for the users that would enable shared access to documents created in Microsoft Office and created by using Web pages and support tracking of document version history.
Which of the following roles/services would you install on servers to achieve the desired results without requiring any additional cost?
[A] Web Server role.
[B] Application Server role.
[C] Microsoft Office SharePoint Server (MOSS) 2007.
[D] Microsoft Windows SharePoint Services (WSS) 3.0.
[E] None of the above.
Answers
Q1 : A
Q2 : D
Q3 : C
Q4 : B,D
Q5 : C
Q6 : A
Q7 : B
Q8 : D
Q9 : B,D
Q10 : D