单项选择题
Your company uses a Windows 2008 Enterprise certificate authority (CA) to issue certificates. You need to implement key archival. What should you do()
A.Archive the private key on the server.
B.Apply the Hisecdc security template to the domain controllers.
C.Configure the certificate for automatic enrollment for the computers that store encrypted files.
D.Install an Enterprise Subordinate CA and issue a user certificate to users of the encrypted files.
相关考题
-
单项选择题
ouhaveaWindowsServer2008EnterpriseRootCA.Securitypolicypreventsport443andport80frombeingopenedondomaincontrollersandontheissuingCA.YouneedtoallowuserstorequestcertificatesfromaWebinterface.YouinstalltheADCSrole.Whatshouldyoudonext()
A.Configure the Online Responder Role Service on a member server.
B.Configure the Online Responder Role Service on a domain controller.
C.Configure the Certification Authority Web Enrollment Role Service on a member server.
D.Configure the Certification Authority Web Enrollment Role Service on a domain controller. -
单项选择题
YourcompanyhasanActiveDirectorydomain.AlIserversrunWindowsServer2008.YourcompanyusesanEnterpriseRootcertificateauthority(CA).Youneedtoensurethatrevokedcertificateinformationishighlyavailable.Whatshouldyoudo()
A.Implement an Online Certificate Status Protocol (OCSP) responder by using Network Load Balancing.
B.Implement an Online Certificate Status Protocol (OCSP) responder by using an Internet Security and Acceleration Server array.
C.Publish the trusted certificate authorities list to the domain by using a Group Policy Object (GPO).
D.Create a new Group Policy Object (GPO) that allows users to trust peer certificates. Link the GPO to the domain. -
单项选择题
YourcompanyhasasingleActiveDirectorydomain.AlIdomaincontrollersrunWindowsServer2003YouinstallWindowsServer2008onaserver.Youneedtoaddthenewserverasadomaincontrollerinyourdomain.Whatshouldyoudofirst()
A.On the new server, run dcpromo /adv.
B.On the new server, run dcpromo /createdcaccount.
C.On a domain controller run adprep /rodcprep.
D.On a domain controller, run adprep /forestprep.
