You have a server named Server1 that has the Active Directory Certificate Services server role
installed.
Server1 uses a hardware security module (HSM) to protect the private key of Server1.
You need to ensure that the Active Directory Certificate Services (AD CS) database, log files, and
private key are backed up.
You perform regular backups of the HSM module by using a backup utility provided by the HSM
manufacturer.
What else should you do?
A.
Run the certutil.exe command and specify the -backupkey parameter.
B.
Run the certutil.exe command and specify the -backupdb parameter.
C.
Run the certutil.exe command and specify the -backup parameter.
D.
Run the certutil.exe command and specify the -dump parameter.
Explanation:
A)
Backup the Active Directory Certificate Services certificate and private key
B)
Backup the Active Directory Certificate Services database
C)
Backup Active Directory Certificate Services
D)
Dump configuration information or files
http://technet.microsoft.com/en-us/library/cc732443.aspx#BKMK_backupKey
http://technet.microsoft.com/en-us/library/cc732443.aspx#BKMK_backupDB
http://technet.microsoft.com/en-us/library/cc732443.aspx#BKMK_backup
http://technet.microsoft.com/library/cc732443.aspx#BKMK_dump
Correct answer is C
certutil /backupdb only contains the database.
certutil /backup contains database, as well as private key and log files and such.
0
3
Tested in lab and confirmed that certutil -backup will backup database as well as private keys and logs.
0
3
Answer: B
The private key is being backed up separately via the HSM backup utility, so we only need to backup the database and logs.
The following will backup the database and logs:
certutil -backupdb C:\backup\ Keeplog
The following will work, but will also backup the key:
certutil -backup C:\backup2\ Keeplog
13
0