Which group policy item should you configure to enable automatic reenrollment of certificates?

You need to ensure that clients will check at least every 30 minutes as to whether a certificate
has been revoked. Which of the following should you configure to accomplish this goal?

Which of the following revocation statuses can you change to alter the status of a certificate from
revoked to valid?

Which of the following CA types would you deploy if you wanted to deploy a CA at the top of a
hierarchy that could issue signing certificates to other CAs and which would be taken offline if not
issuing, renewing, or revoking signing certificates?

Which of the following CA types must be deployed on domain-joined computers?

Which permission should you assign on a CA to a group of users that you want to allow to alter
the list of recovery agents?

Which permission should you assign on a CA to a group of users that you want to be able to
respond to certificate requests but you do not want to provide them with the ability to change CA
security settings?

You are configuring AD FS. Which server should you deploy on your organization’s perimeter
network?

The Wingtip Toys forest hosts a web application that users in the Tailspin Toys forest need to
access. You are the system administrator at Tailspin Toys. A single federation server is present in
each forest and you are configuring a federated trust.
Which of the following statements are true about the deployment solution? (Choose all that
apply.)

The Wingtip Toys forest hosts a web application that users in the Tailspin Toys forest need to
access. You are the system administrator at Wingtip Toys. A single federation server is present in
each forest and you are configuring a federated trust.
Which of the following statements are true about the deployment solution? (Choose all that

apply.)