You are employed as a network administrator at consoto.com.
Contoso.com has in an Active Directory domain named contoso.com.
All Servers on the contoso.com network have Windows Server 2012 R2 installed.
A contoso.com server ,named Server1,hosts the Active Directory Certificate Services Server role and
utilizes a hardware security module(HSM) to safeguard its private key.
You have beed instructed to backup the Active Directory Certificate Services (ADCS) database,log
files,and private key regularly.
You should not use a utility supplied by the hardware security module (HSM) creator.
Which of the following actions should you take?

A.
You should consider scheduling an incremental backup

B.
You Should consider making use of the certutil.exe command.

C.
You should consider schedulling a differential backup

D.
You should consider schedulling a copy backup

Explanation:
A)
ADCS needs to be backup up using certutil
B)
-Backup, -backupdb, -backupKey: You can use Certutil.exe to dump and display certification
authority (CA) configuration information, configure Certificate Services, backup and restore CA
components, and verify certificates, key pairs, and certificate chains.
C)
ADCS needs to be backup up using certutil
D)
ADCS needs to be backup up using certutil
http://technet.microsoft.com/library/cc732443.aspx
http://technet.microsoft.com/en-us/library/cc732443.aspx#BKMK_backup
http://technet.microsoft.com/en-us/library/cc732443.aspx#BKMK_backupDB
http://technet.microsoft.com/en-us/library/cc732443.aspx#BKMK_backupKey
http://blogs.technet.com/b/pki/archive/2010/04/20/disaster-recovery-procedures-for-theactivedirectorycertificate-services-adcs.aspx