Microsoft 70-640 Actual Free Exam Questions & Community Discussion

  • Exam Code/Number: 70-640
  • Exam Name/Title: Windows Server 2008 Active Directory. Configuring
  • Certification Provider: Microsoft
  • Corresponding Certification: MCTS
  • Exam Questions: 631
  • Updated On: May 27, 2026
Your network contains an Active Directory domain. The domain contains five sites. One of the sites contains a read-only domain controller (RODC) named RODC1.
You need to identify which user accounts can have their password cached on RODC1.
Which tool should you use?
Correct Answer: B Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
Your network contains an Active Directory domain named contoso.com. The domain has one Active Directory site.
The domain contains an organizational unit (OU) named OU1. OU1 contains user accounts for 100 users and their managers.
You apply a Group Policy object (GPO) named GPO1 to OU1. GPO1 restricts several desktop settings.
The managers request that the desktop settings not be applied to them.
You need to prevent the desktop settings in GPOl from being applied to the managers. All other users in OU1 must have GPO1 applied to them.
What should you do?
Correct Answer: B Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
DRAG DROP
Your company has an Active Directory forest that contains multiple domain controllers. The domain controllers run Windows Server 2008.
You need to perform an authoritative restore of a deleted organizational unit and its child objects.
Which four actions should you perform in sequence?
(To answer, move the appropriate four actions from the list of actions to the answer area, and arrange them in the correct order.)
Correct Answer:
You need to deactivate the UGMC option on some of your domain controllers.
At which level in Active Directory would you deactivate UGMC?
Correct Answer: A Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
Your network contains an Active Directory forest named contoso.com. The forest contains a single domain and 10 domain controllers. All of the domain controllers run Windows
Server 2008 R2 Service Pack 1 (SP1).
The forest contains an application directory partition named dc=app1, dc=contoso,dc=com. A domain controller named DC1 has a copy of the application directory partition.
You need to configure a domain controller named DC2 to receive a copy of dc=app1, dc=contoso,dc=corn.
Which tool should you use?
Correct Answer: B Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
A domain controller named DC4 runs Windows Server 2008 R2. DC4 is configured as a DNS server for fabrikam.com.
You install the DNS Server server role on a member server named DNS1 and then you create a standard secondary zone for fabrikam.com. You configure DC4 as the master server for the zone.
You need to ensure that DNS1 receives zone updates from DC4.
What should you do?
Correct Answer: C Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
Your company has an Active Directory forest that contains client computers that run Windows Vista andMicrosoft Windows XP.
You need to ensure that users are able to install approved application updates on their computers.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
Correct Answer: A,B Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
HOTSPOT
Your network contains an Active Directory domain. The domain contains a domain controller named DC1 that runs windows Server 2008 R2 Service Pack 1 (SP1).
You need to implement a central store for domain policy templates.
What should you do?
To answer, select the source content that should be copied to the destination folder in the answer area.
Correct Answer:
Your network contains an Active Directory forest. The forest contains one domain named contoso.com.
You attempt to create a new child domain and you receive the following error message: "An LDAP read of operational attributes failed."
You need to ensure that you can add a new child domain to the forest.
What should you do?
Correct Answer: E Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
Your network contains an Active Directory forest named contoso.com. The functional level of the forest is Windows Server 2008 R2.
The DNS zone for contoso.com is Active Directory-integrated.
You deploy a read-only domain controller (RODC) named RODC1.
You install the DNS Server server role on RODC1.
You discover that RODC1 does not have any DNS application directory partitions.
You need to ensure that RODC1 has a copy of the DNS application directory partition of contoso.com.
What should you do?
Correct Answer: D Vote an answer
Your network contains an Active Directory forest. The forest contains two domains. The forest contains four domain controllers. The domain controllers are configured as shown in the following table.

All user accounts are located in the child.contoso.com domain. Users in the child.contoso.com domain are members of several security groups in the contoso.com domain.
Your company decides to change the naming standard of user accounts.
You rename all of the user accounts to comply with the new standard.
You discover that the old user names are listed in the members' list of the security groups in the contoso.com domain.
You need to ensure that the members' list of the security groups in the contoso.com domain displays the new user names.
What should you do?
Correct Answer: C Vote an answer
0
0
0
10