PrepAway - Latest Free Exam Questions & Answers

Which tool should you use?

Your network contains two Active Directory forests named contoso.com and adatum.com.
A two- way forest trust exists between the forests.
The contoso.com forest contains an enterprise certification authority (CA) named SERVER1.
You implement cross-forest certificate enrollment between the contoso.com forest and the adatum.com forest.
On SERVER1, you create a new certificate template named Template1.
You need to ensure that users in the adatum.com forest can request certificates that are based on Template1.
Which tool should you use?

PrepAway - Latest Free Exam Questions & Answers

A.
DumpADO.ps1

B.
Repadmin

C.
Add-CATemplate

D.
Certutil

E.
PKISync.ps1

Explanation:
http://technet.microsoft.com/en-us/library/ff955845(v=ws.10).aspx#BKMK_Consolidating

28 Comments on “Which tool should you use?

  1. James L says:

    70-412 E
    The simplest method for maintaining PKI objects for cross-forest certificate enrolment is to run the PKISync.ps1 script in a scheduled task.

    For best results the task should run frequently. Because PKI objects are not changed frequently, copying them to account forests once daily should work well in most environments.




    0



    0

Leave a Reply