You work as the network administrator at ABC.com. The ABC.com network has a domain named ABC.com. All servers on the ABC.com network have Windows Server 2008 R2 installed.

You are responsible for managing two servers ABC-SR01 and ABC-SR02. They are setup with the following configuration.

ABC-SR01 running Enterprise Root certificate authority (CA)

ABC-SR02 running Online Responder role service

Which of the steps must you perform for configuring the Online Responder to be supported on ABC-SR01?

You work as the network administrator at ABC.com. The ABC.com network has a domain named ABC.com. All servers on the ABC.com network have Windows Server 2008 R2 installed and all workstations have Windows 7 installed.

The ABC.com network has a server named ABC-SR03 that functions as an Enterprise Root certification authority (CA). ABC.com issues a new security policy that states that only a ABC.com CEO named Kara Lang must be allowed to sign code.

What action should you take to implement this policy? (Choose all that apply.)

You work as an administrator at ABC.com. The ABC.com network has a single Active Directory domain named ABC.com. All servers on the ABC.com network have Windows Server 2008 R2 installed and all workstations have Windows 7 installed.

The ABC.com domain employs an Enterprise Root certification authority (CA), as well as an Enterprise Intermediate certification authority (CA).

When the Enterprise Intermediate certification authority certification authority (CA) reaches its expiration date, you are tasked with making sure that a new one is distributed to all workstations in the ABC.com domain.

Which of the following actions should you take?

You work as the enterprise administrator at ABC.com. The ABC.com network has a domain named ABC.com that operates at the Windows Server 2008 R2.

How can you configure the network so that it allows the users of ABC.com to have multiple password policies?

You work as an enterprise administrator at ABC.com. The ABC.com network has a domain named ABC.com. The ABC.com network has a Windows Server 2008 R2 computer named ABC-SR03 that functions as an Enterprise Root certificate authority (CA).

A new ABC.com security policy requires that revoked certificate information should be available for examination at all times.

What action should you take adhere to the new policy?

You work as an administrator at ABC.com. The ABC.com network is made up of a single Active Directory domain named ABC.com. All servers on the ABC.com network have Windows Server 2008 R2 installed and all workstations have Windows 7 installed.

The ABC.com network is configured in a two tier public key infrastructure (PKI). This PKI infrastructure configuration hosts an offline Root certification authority (CA), as well as an online Issuing certification authority (CA).

ABC.com users need to have the ability to enroll new certificates.

Which combination of the following actions should you take? (Choose two.)

You work as the network administrator at ABC.com. The ABC.com network has a domain named ABC.com. All servers on the ABC.com network have Windows Server 2008 R2 installed and all workstations have Windows 7 installed.

The ABC.com network has two servers named ABC-SR01 and ABC-SR02.

ABC-SR01 – Enterprise Root certificate authority (CA).

ABC-SR02 – Hosts the Online Responder role.

What step you can perform to make sure that ABC-SR02 is issuing the certificate revocation lists (CRL).

You work as an administrator at ABC.com. The ABC.com network has an Active Directory domain named ABC.com. All servers, including domain controllers, on the ABC.com network have Windows Server 2008 R2 installed.

ABC.com has its headquarters in London, and a satellite office in Milan. A writable domain controller named ABC-DC01 is located in London, and a read only domain controller (RODC) named ABC-DC02 is located in Milan.

All domain controllers in the ABC.com domain are configured as DNS servers. The DNS zone for the ABC.com zone is Active Directory-integrated, and configured o replicate to all domain controllers.

You have received instructions from the CIO to make sure that the DNS server role is removed from ABC-DC02, and that no DNS records are replicated to it.

Which of the following actions should you take?

You work as an administrator at ABC.com. The ABC.com network has a single Active Directory domain named ABC.com. All workstations on the ABC.com network have Windows 7 Enterprise installed. The functional level of both the domain and the forest is set at Windows Server 2003.

The ABC.com domain has two domain controllers, named ABC-DC01 and ABC-DC02. The ABC.com domain also has two DNS servers, named ABC-SR01 and ABC-SR02. ABC-DC01 and ABC-SR01 has Windows Server 2008 installed, while ABC-DC02 and ABC-SR02 has Windows Server 2008 R2 installed. The ABC.com zone is hosted by both ABC-SR01 and ABC-SR02.

You have been instructed to configure the use of DNSSEC to secure all names in the ABC.com zone.

Which of the following actions should you take?

You work as an administrator at ABC.com. ABC.com has an Active Directory domain named ABC.com. All servers on the ABC.com network have Windows Server 2008 R2 installed and all workstations have Windows 7 installed.

You have configured a child domain, named us.ABC.com, which has two domain controllers named ABC-DC05 and ABC-DC06. ABC-DC05 and ABC-DC06 are configured as DNS servers.

You then create a DNS delegation.

Which of the following describes a reason for doing this?