You need to ensure that all of the updates listed in the WSUS administrative console are available on Server1
Your network contains a Windows Server Update Services (WSUS) server named Server1. You discover that certain updates listed in the WSUS administrative console are unavailable on Server1. You need to ensure that all of the updates listed in the WSUS administrative console are available on Server1. What should you do on Server1?
Which console should you use?
You have an enterprise subordinate certification authority (CA). You have a custom certificate template that has a key length of 1,024 bits. The template is enabled for autoenrollment.
You increase the template key length to 2,048 bits.
You need to ensure that all current certificate holders automatically enroll for a certificate that uses the new template.
Which console should you use?
What should you run on Server1?
Your network contains a server named Server1 that runs a Server Core installation of Windows Server 2008 R2. The network contains a client computer named Computer1 that runs Windows 7. You need to ensure that you can collect events from Server1 on Computer1. What should you run on Server1?
You need to ensure that the certificate template is available on the Web enrollment pages
You have an enterprise subordinate certification authority (CA).
You have a custom Version 3 certificate template.
Users can enroll for certificates based on the custom certificate template by using the Certificates console. The certificate template is unavailable for Web enrollment. You need to ensure that the certificate template is available on the Web enrollment pages.
What should you do?
Which IPv6 prefix should you use?
You need to use link-local IPv6 addresses to perform multicasting. Which IPv6 prefix should you use?
Which two actions should you perform? (Each correct answer presents part of the solution
You have Active Directory Certificate Services (AD CS) deployed.
You create a custom certificate template.
You need to ensure that all of the users in the domain automatically enroll for a certificate based on the custom certificate template.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
You need to configure the network interfaces on Server1 to support DirectAccess
Your network contains a server named Server1 that runs Windows Server 2008 R2. The network for Server1 is configured as shown in the table.
You plan to deploy DirectAccess on Server1. You need to configure the network interfaces on Server1 to support DirectAccess. What should you do?
Which command should you run?
You have an enterprise subordinate certification authority (CA). The CA is configured to use a hardware security module. You need to back up Active Directory Certificate Services on the CA.
Which command should you run?
You need to configure the network policy to ensure that noncompliant client computers can access the remediati
You deploy Network Access Protection (NAP) on your network. An administrator configures a network policy as shown in the exhibit. (Refer to the Exhibit.)
You discover that noncompliant client computers cannot access the remediation network. You need to configure the network policy to ensure that noncompliant client computers can access the remediation network. What should you do?
You need to ensure that all of the recovery agent certificates can be used to recover all new private keys
You have an enterprise subordinate certification authority (CA) configured for key archival. Three key recovery agent certificates are issued.
The CA is configured to use two recovery agents.
You need to ensure that all of the recovery agent certificates can be used to recover all new private keys.
What should you do?