You work as the enterprise administrator at ABC.com. ABC.com has a domain named ABC.com. The ABC.com network servers run Microsoft Windows Server 2008 and the client computers run Microsoft Windows Vista. ABC.com has a computer named ABC-SR25 configured to host the Internet Information Services (IIS) Web server role and a secure web site.

ABC.com has a Marketing division which accesses the secured web site.

How would you configure ABC-SR25 to ensure the Marketing division use user certificates instead of their usernames and passwords?

A.
By configuring Windows and IIS Manager Credentials using Management Services.

B.
By configuring the use of Integrated Windows Authentication (IWA) for the secured web site.

C.
By configuring the Client Certificate settings to Require SSL Settings for the secured website.

D.
By configuring the Authentication feature for the secured website.

Explanation:
To adhere to the new ABC.com security policy, you need to change the Client Certificate settings to Require on SSL Settings for the secured website. By default, client certificates are ignored. If you want the clients to verify their identity before they access the content of a website, you need to configure client certificates.

Reference: IIS 7.0: Specify Whether to Use Client Certificates

http://technet2.microsoft.com/windowsserver2008/en/library/5adc0029-8875-4390-a717- e5eb2eba97781033.mspx?mfr=true