Drag and Drop Questions
You support desktop computers for a company named Fabrikam, Inc. The computers are members
of the Active Directory domain named fabrikam.com. Fabrikam works with a supplier named
Contoso, Ltd. Each company has a public key infrastructure (PKI), and no public certificate
authorities (CAs) are used. Fabrikam employees regularly use a Contoso website that is hosted on
a server in the contoso.com domain. The website requires SSL and mutual authentication. You
need to configure the computers to allow Fabrikam users to access the Contoso website without
any warning prompts. You also need to use the fewest certificates possible. Which certificate or
certificates should you use? (To answer, drag the appropriate certificate to the correct certificate
store. Each certificate may be used once, more than once, or not at all. You may need to drag the
split bar between panes or scroll to view content.)

Answer:

Explanation:
Note:
– contoso.com provided the resources. contoso.com be the trusted root authorities store
– No untrusted certificates
– Not allow access to local computer account (just to user account)
– user account access through client (user) certificate issued by Contoso