HOTSPOT
Yournetwork contains an Active Directory domain named contoso.com. The domain contains a
server named Server2 that runs Windows Server 2012 R2.
You are a member of the local Administrators group on Server2. You install an Active Directory
Rights Management Services (AD RMS) root cluster on Server2.
You need to ensure that the AD RMS cluster is discoverable automatically by the AD RMS client
computers and the users in contoso.com.
Which additional configuration settings should you configure? To answer, select the appropriate tab
in the answer area.
Answer: 
Explanation:
<map><m x1=”366″ x2=”442″ y1=”44″ y2=”61″ ss=”0″ a=”0″ /></map>* Active Directory Domain Services (AD DS) service connection point (SCP) automatic service
discovery. This is the recommended way to deploy an AD RMS environment. In this scenario, an SCP
is created in the Active Directory forest where the AD RMS cluster is installed. When the AD RMS
client attempts user activation on the computer, it queries the SCP to find the AD RMS cluster and
download the rights account certificate (RAC). With automatic service discovery, no additional
configuration is required on the AD RMS client.
* Cluster – Cluster Properties – SCP Tab
AD RMS Client Service Discovery; Cluster – Cluster Properties – SCP Tab
http://technet.microsoft.com/en-us/library/cc753538(v=ws.10).aspx
http://technet.microsoft.com/en-us/library/cc755112.aspx
This is correct because this is the manual way to register SCP and does not require the user to be part of the Enterprise Admin group. Membership to Enterprise admin is required for automatically registration of SCP during AD RMS installation.
https://social.technet.microsoft.com/wiki/contents/articles/710.the-ad-rms-service-connection-point.aspx
0
0
working with defaults you are right.
personally I’d prefer and recommend RBAC approaches, like extended privileges to corresponding AD containers in configuration partition. (like also possible e.g. for NetServices or Public Key Services…)
0
0
Correct, when installing RMS Cluster a page asks if you’d like to install SCP for RMS now or later. IF you’re not a Enterprise Admin then you can select later.
SCP tab is where you go later as an Enterprise Admin to enable SCP 😀
0
0