PrepAway - Latest Free Exam Questions & Answers

How should you configure the certificate request?

DRAG DROP
Your network contains an Active Directory domain named contoso.com. The domain contains a
server named Server1 that runs Windows Server 2012 R2.
You plan to install the Active Directory Federation Services server role on Server1 to allow for
Workplace Join.
You run nslookup enterprise registration and you receive the following results:

You need to create a certificate request for Server1 to support the Active Directory Federation
Services (AD FS) installation.
How should you configure the certificate request?
To answer, drag the appropriate names to the correct locations. Each name may be used once, more
than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

PrepAway - Latest Free Exam Questions & Answers

Answer:

Explanation:
<map><m x1=”3″ x2=”269″ y1=”49″ y2=”73″ ss=”0″ a=”0″ /><m x1=”1″ x2=”270″ y1=”84″
y2=”107″ ss=”0″ a=”0″ /><m x1=”5″ x2=”268″ y1=”115″ y2=”140″ ss=”0″ a=”0″ /><m x1=”4″
x2=”270″ y1=”149″ y2=”173″ ss=”0″ a=”0″ /><m x1=”7″ x2=”268″ y1=”184″ y2=”208″ ss=”0″ a=”0″
/><m x1=”540″ x2=”840″ y1=”54″ y2=”84″ ss=”1″ a=”0″ /><m x1=”543″ x2=”845″ y1=”93″ y2=”116″
ss=”1″ a=”0″ /><m x1=”541″ x2=”843″ y1=”128″ y2=”157″ ss=”1″ a=”0″ /><c start=”0″ stop=”0″ /><c
start=”0″ stop=”1″ /><c start=”3″ stop=”2″ /></map>

Obtain a server SSL certificate from either a public certificate authority (CA) or from your
organization’s PKI subordinate CA that is trusted by a public certificate authority.
The server SSL certificate must have the following certificate attributes to be used with Workplace
Join:
– Subject Name (CN): adfs1.contoso.com
– Subject Alternative Name (DNS): adfs1.contoso.com
– Subject Alternative Name (DNS): enterpriseregistration.contoso.com
Why R2? Step-by-Step: Solve BYOD Challenges with Workplace Join in Windows Server
2012 R2 and Windows 8.1

2 Comments on “How should you configure the certificate request?

    1. den says:

      it’s just a setup I personally would not recommend…

      I’d rather create the record for adfs1 also as a cname record and let this point to server1, so that it cascaded like enterpriseregistration>adfs1>server1. Imagine you migrate ADFS to another server then you can swap over service by just editing the adfs1 CNAME and you’re done.
      just btw, this has not much to do with the question, but nevertheless interesting infrastructural aspect, at least for me 😉




      3



      0

Leave a Reply