Your company has a single domain Active Directory Domain Services (AD DS) forest. All servers run
Windows Server 2008 R2. All client computers run Windows 7. You install a Microsoft Application
Visualization (App-V) management server. Your company policy requires that the information
transmitted between the clients and the App-V server must be secured with Transport Layer Security
(TLS). You need to install a certificate on the App-V server. Which type of certificate should you
install?

A.
PKCS#10

B.
X.509 v3

C.
X.509 v2

D.
X.521

Explanation:
Installing App-V Management Server or Streaming Server Securely
Note: Installing or configuring an App-V Management or Streaming Server to use enhanced security
(for example, Transport Layer Security, or TLS) requires that an X.509 V3 certificate has been
provisioned to the App-V server.
— OR —
Configuring Certificates to Support Secure Streaming By default, the App-V service runs under the
Network Service account. However, you can create a service account in Active Directory Domain
Services and replace the Network Service account with the Active Directory Domain account. The
security context under which the service runs is important for configuring enhanced secure
communications. This security context must have read permissions for the certificate private key.
When a PKCS#10 Certificate Signing Request (CSR) is generated for the App-V server, the Windows
Cryptographic Service Provider is called and a private key is generated. The private key is secured
with permissions given to the System and Administrator accounts only.
http://technet.microsoft.com/en-us/library/ee662336.aspx