Free Microsoft 70-648 Exam Dumps Questions & Answers

Note: This question is part of a series of question that use the same set of answer choices. Each answer choice may be used once, more than once, or not at all.
Your network contains an Active Directory domain named contoso.com.
The domain contains a server named Server2 that has the DNS Server server role installed.
You need to configure the Windows Firewall on Server2 to allow client computers access to the DNS Server service.
Which port or ports should you allow through Windows Firewall?

• A.  TCP 67 and TCP 68
• B.  UDP 995
• C.  TCP 995
• D.  UDP 993
• E.  TCP 1433
• F.  TCP 53 and UDP 53
• G.  TCP 546 and TCP 547
• H.  UDP 67 and UDP 68
• I.  TCP 587 and UDP 587
• J.  TCP 636
• K.  UDP 546 and UDP 547
• L.  TCP 993
• M.  UDP 1433

Your network contains a server named Server1 that runs Windows Server 2008 R2.
You need to log performance counter data from Server1 to a SQL database.
What should you do?
To answer, move the appropriate actions from the Possible Actions list to the Necessary Actions area and arrange them in the correct order.
Select and Place:

Correct Answer:

Explanation:
Be careful on this one, it is asking for us to log performance data to a SQL database, not to log the performance of a SQL database. So do not drag ODBC tracing over at all! We basically have to setup a DSN on the local computer and create a custom (user-defined) DCS that points to the DSN for storage.
Pushing the Performance Monitor Data into a Database (...)
1.Making a Data Collector:
First for pushing any perfmon in the database first we need to build a Data Collector set from the perfmon
(...)
2.Making a System DSN
Now for pushing this Performance Monitor from the blg file to the Database we need to create a System
DSN from the ODBC of the server. You need to select the Database where you are going to push the perfmon.
MY NOTE: I'm not sure why we wouldn't create the DSN first, as per the instructions here: http:// www.sepago.de/d/nicholas/2009/11/02/performance-monitoring-part-7-using-performance-monitorwith-a-database
(...)
MY NOTE: This site does not mention modifying the DSN for the Data Collector, but it would be implied: you can't tell the Data Collector to send data to a database if it doesn't know which database to talk to!
Reference: http://social.technet.microsoft.com/wiki/contents/articles/12457.pushing-the-performancemonitor-data-into-a-database.aspx

Your network contains an Active Directory forest named contoso.com.
You need to identify whether a fine-grained password policy is applied to a specific group.
Which tool should you use?

• A.  Credential Manager
• B.  Active Directory Sites and Services
• C.  Group Policy Management Editor
• D.  Active Directory Users and Computers

ABC.com has an Active Directory forest on a single domain. The domain operates Windows Server 2008.
A new administrator accidentally deletes the entire organizational unit in the Active Directory database that
hosts 6,000 objects.
You have backed up the system state data using third-party backup software. To restore backup, you start
the domain controller in the Directory Services Restore Mode (DSRM).
You need to perform an authoritative restore of the organizational unit and restore the domain controller to
its original state.
Which three actions should you perform?
Build List and Reorder:

Correct Answer:

Explanation:
If you are performing authoritative restore on a domain controller that has already received replication of the
deletions, perform the following procedures on the recovery domain controller:
(...)
2.(...)Restore from backup requires restarting the domain controller in DSRM. Taking the domain controller offline by stopping AD DS is not sufficient to run Ntdsutil procedures to restore from backup.
3.Restore AD DS from Backup (Nonauthoritative Restore)
4.Mark an Object or Objects as Authoritative(...) (MY NOTE: See 2nd article below where we are explicitly told this requires ntdsutil)
5.Restart the domain controller normally. (MY NOTE: Obviously restarting in Safe Mode won't help us much! The DC would not be able to synchronize!)
Reference: http://technet.microsoft.com/en-us/library/cc816878.aspx
You can use this procedure to mark Active Directory objects as authoritative when you perform an authoritative restore. In this procedure, you use the ntdsutil command to select objects that are to be marked authoritative when they replicate to other domain controllers.Reference: http://technet.microsoft.com/en-us/library/cc816813.aspx

Note: This question is part of a series of question that use the same set of answer choices. Each answer choice may be used once, more than once, or not at all.
Your network contains an enterprise certification authority (CA) that runs Windows Server 2008 R2 Enterprise.
You need to ensure that users can enroll for certificates that use the IPSEC (Offline request) certificate template.
Which snap-in should you use?

• A.  Authorization Manager
• B.  Certificate Templates
• C.  Security Configuration Wizard
• D.  Certification Authority
• E.  Group Policy Management
• F.  Enterprise PKI
• G.  Certificates
• H.  Share and Storage Management
• I.  Active Directory Administrative Center