Which snap-in should you use?
Your network contains an enterprise certification authority (CA) that runs Windows Server 2008 R2 Enterprise.
You need to approve a pending certificate request.
Which snap-in should you use?
Which snap-in should you use?
Your network contains an enterprise certification authority (CA) that runs Windows Server 2008 R2 Enterprise.
You have a custom certificate template named Template 1. Template1 is published to the CA.
You need to ensure that all of the members of a group named Group1 can enroll for certificates that use Template1.
Which snap-in should you use?
Which snap-in should you use?
Your network contains an enterprise certification authority (CA) that runs Windows Server 2008 R2 Enterprise.
You need to ensure that users can enroll for certificates that use the IPSEC (Offline request) certificate template
Which snap-in should you use?
Which snap-in should you use?
Your network contains an enterprise certification authority (CA) that runs Windows Server 2008 R2 Enterprise.
You need to ensure that all of the members of a group named Group1 can view the event log entries for Certificate Services.
Which snap-in should you use?
Which snap-in should you use?
Your network contains an enterprise certification authority (CA) that runs Windows Server 2008 R2 Enterprise.
You enable key archival on the CA. The CA is configured to use custom certificate templates for Encrypted File System (EFS) certificates.
You need to archive the private key for all new EFS certificates.
Which snap-in should you use?
You need to ensure that the DNS service can update records and resolve DNS queries in the event that a WAN lin
Your company, Contoso, Ltd., has a main office and a branch office. The offices are connected by a WAN link. Contoso has an Active Directory forest that contains a single domain named ad.contoso.com.
The ad.contoso.com domain contains one domain controller named DC1 that is located in the main office. DC1 is configured as a DNS server for the ad.contoso.com DNS zone. This zone is configured as a standard primary zone.
You install a new domain controller named DC2 in the branch office. You install DNS on DC2.
You need to ensure that the DNS service can update records and resolve DNS queries in the event that a WAN link fails.
What should you do?
Which console should you use?
Your network contains a server named Server1. The Active Directory Rights Management Services (AD RMS) server role is installed on Server1.
An administrator changes the password of the user account that is used by AD RMS. You need to update AD RMS to use the new password.
Which console should you use?
You need to create an enterprise subordinate certification authority (CA) that can issue certificates based on
Your network contains an Active Directory domain named contoso.com. Contoso.com contains a member server that runs Windows Server 2008 R2 Standard.
You need to create an enterprise subordinate certification authority (CA) that can issue certificates based on version 3 certificate templates.
You must achieve this goal by using the minimum amount of administrative effort.
What should you do first?
Which protocol should you allow on Server1?
You deploy an Active Directory Federation Services (AD FS) Federation Service Proxy on a server named Server1.
You need to configure the Windows Firewall on Server1 to allow external users to authenticate by using AD FS.
Which protocol should you allow on Server1?
You need to ensure that the user’s password is stored on RODC1 when he logs on to a branch office site c
Your network contains an Active Directory domain named contoso.com.
The network has a branch office site that contains a read-only domain controller (RODC) named R0DC1. R0DC1 runs Windows Server 2008 R2.
A user logs on to a computer in the branch office site.
You discover that the user’s password is not stored on R0DC1.
You need to ensure that the user’s password is stored on RODC1 when he logs on to a branch office site computer.
What should you do?