Your network contains an Active Directory domain named contoso.com.
The domain contains a server named Server1 that runs a Server Core installation of Windows
Server 2012 R2.
You need to deploy a certification authority (CA) to Server1.
The CA must support the auto-enrollment of certificates.
Which two cmdlets should you run? (Each correct answer presents part of the solution.
Choose two.)
A.
Add-CAAuthoritylnformationAccess
B.
Install-AdcsCertificationAuthority
C.
Add-WindowsFeature
D.
Install-AdcsOnlineResponder
E.
Install-AdcsWebEnrollment
Explanation:
It seems B and C.
You must install the CA role before you run Install-AdcsCertificationAuthority.
http://technet.microsoft.com/en-us/library/hh848389.aspx
“Detailed Description
The Install-AdcsCertificationAuthority cmdlet performs installation and configuration of the AD CS
CA role service.
To remove the certification authority role service use the Uninstall-AdcsCertificationAuthority
cmdlet.
You can import the cmdlet by running the following commands from Windows PowerShell:
Import-Module ServerManager
Add-WindowsFeature Adcs-Cert-Authority”
Add-WindowsFeature in Server 2012 R2???
This was replaced in Server 2012 for Install-WindowsFeature. I need to test this. Either C is bad worded or is another option.
0
0
Add and install do the same thing in 2012r2.
0
0
The answer is: B & D
0
0
answer is B & D
0
0
answer from: “http://www.aiotestking.com/microsoft/which-two-cmdlets-should-you-run-8/”
D.Normus says:
August 25, 2015 at 3:12 pm
The answer here is wrong. Read the question carefully – this is a Server Core installation. Before the AD CS CA role service can be added, the binaries must be added using the Add-WindowsFeature cmdlet. Then you can install the role service using Install-AdcsCertificationAuthority. Besides, you don’t need Web Enrollment for autoenrollment, just some GPOs. Therefore, the answer is B. and C.
1
0
… the answer here is then correct:
B
&
C
1
0
May be B & E
0
0
prem says B and E
0
0
Are you still stuck in your Prem?? what your brain says?!!
0
0
Provided answer is correct.
First you have to install Active Directory Certificate Services role, which can be done using the following command:
Install-WindowsFeature AD-Certificate
Note: Add-WindowsFeature is an alias of Install-WindowsFeature and works on Server 2012 R2, it is stilll available because in previous versions of Windows Server you used Add-WindowsFeature instead of Install-WindowsFeature
The you need to configure the CA, which is done with the command:
Install-AdcsCertificationAuthority
Reference: https://4sysops.com/archives/certificate-server-in-server-core/
So B and C are the correct answers.
1
0
Not E, according to technet to auto enroll y need a certificate template and policy, no need of web
0
0
A fascinating discussion is definitely worth comment. I think that you need to publish more on this issue, it might not be a taboo subject but usually people don’t discuss such topics. To the next! Cheers!!|
0
0