[IT认证]70-640-阅读版.doc

Microsoft 70-640 Exam A QUESTION 1 Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 The Audit account management policy setting and Audit directory services access setting are enabled for the entire domain. You need to ensure that changes made to Active Directory objects can be logged. The logged changes must include the old and new values of any attributes What should you do? A.Enable the Audit account management policy in the Default Domain Controller Policy.B.Run auditpol.exe and then configure the Security settings of the Domain Controllers OU.C.Run auditpol.exe and then enable the Audit directory service access setting in the Default Domain policy.D.From the Default Domain Controllers policy, enable the Audit directory service access setting and enable directory service changes. Answer: B Section: (none) Explanation/Reference: QUESTION 2 Your company has an Active Directory domain. A user attempts to log on to a computer that was turned off for twelve weeks. The administrator receives an error message that authentication has failed. You need to ensure that the user is able to log on to the computer. What should you do? A.Run the netdom TRUST /reset command.B.Run the netsh command with the set and machine options.C.Run the Active Directory Users and Computers console to disable, and then enable the computer account.D.Reset the computer account. Disjoin the computer from the domain, and then rejoin the computer to the domain. Answer: D Section: (none) Explanation/Reference: QUESTION 3 Your company has an Active Directory forest that contains Windows Server 2008 domain controllers and DNS servers. All client computers run Windows XP. You need to use your client computers to edit domain-based GPOs by using the ADMX files that are stored in the ADMX central store. What should you do? A.Add your account to the Domain Admins group.B.Upgrade your client computers to Windows Vista.C