YourcompanyhasaserverthatrunsWindowsServer2008R2.ActiveDirectoryCertificateServices（ADCS）isconfiguredasastandaloneCertificationAuthority（CA）ontheserver.YouneedtoauditchangestotheCAconfigurationsettingsandtheCAsecuritysettings.Whichtwotasksshouldyouperform

题目

YourcompanyhasaserverthatrunsWindowsServer2008R2.ActiveDirectoryCertificateServices（ADCS）isconfiguredasastandaloneCertificationAuthority（CA）ontheserver.YouneedtoauditchangestotheCAconfigurationsettingsandtheCAsecuritysettings.Whichtwotasksshouldyouperform（）

A.ConfigureauditingintheCertificationAuthoritysnap-in.

B.Enableauditingofsuccessfulandfailedattemptstochangepermissionsonfilesinthe%SYSTEM32%\CertSrvdire

C.Enableauditingofsuccessfulandfailedattemptstowritetofilesinthe%SYSTEM32%\CertLogdirectory.

D.EnabletheAuditobjectaccesssettingintheLocalSecurityPolicyfortheActiveDirectoryCertificateServices

相似考题

1.YouhaveActiveDirectoryCertificateServices（ADCS）deployed.Youcreateacustomcertificatetemplate.Youneedtoensurethatalloftheusersinthedomainautomaticallyenrollforacertificatebasedonthecustomcertificatetemplate.Whichtwoactionsshouldyouperform（）A.InaGroupPolicyobject（GPO），configuretheautoenrollmentsettings.B.InaGroupPolicyobject（GPO），configuretheAutomaticCertificateRequestSettings.C.Onthecertificatetemplate，assigntheReadandAutoenrollpermissiontotheAuthenticatedUsersgroup.D.Onthecertificatetemplate，assigntheRead，Enroll，andAutoenrollpermissiontotheDomainUsersgroup.

2.YourcompanyhasanActiveDirectorydomain.YouplantoinstalltheActiveDirectoryCertificateServices（ADCS）serverroleonamemberserverthatrunsWindowsServer2008R2.YouneedtoensurethatmembersoftheAccountOperatorsgroupareabletoissuesmartcardcredentials.Theyshouldnotbeabletorevokecertificates.Whichthreeactionsshouldyouperform（）A.InstalltheADCSserverroleandconfigureitasanEnterpriseRootCA.B.InstalltheADCSserverroleandconfigureitasaStandaloneCA.C.RestrictenrollmentagentsfortheSmartcardlogoncertificatetotheAccountOperatorgroup.D.RestrictcertificatemanagersfortheSmartcardlogoncertificatetotheAccountOperatorgroup.E.CreateaSmartcardlogoncertificate.F.CreateanEnrollmentAgentcertificate.

3.YouhaveaWindowsServer2008R2EnterpriseRootCA.Securitypolicypreventsport443andport80frombeingopenedondomaincontrollersandontheissuingCA.YouneedtoallowuserstorequestcertificatesfromaWebinterface.YouinstalltheActiveDirectoryCertificateServices（ADCS）serverrole.Whatshouldyoudonext（）A.ConfiguretheOnlineResponderRoleServiceonamemberserver.B.ConfiguretheOnlineResponderRoleServiceonadomaincontroller.C.ConfiguretheCertificateEnrollmentWebServiceroleserviceonamemberserver.D.ConfiguretheCertificateEnrollmentWebServiceroleserviceonadomaincontroller.

4.YouaredesigningaplantomigrateanexistingapplicationtoWindowsAzure.TheapplicationmustusetheexistingActiveDirectoryDomainServices（ADDS）domain.YouneedtorecommendanapproachforjoiningWindowsAzurevirtualmachinestothedomain.Whatshouldyourecommend？（）A.InstalltheActiveDirectoryCertificateServices（ADCS）rootcertificateintotheEnterpriseTrustcertificatestoreoneachvirtualmachine.B.ConfigureWindowsAzureConnect.C.ConfigureWindowsAzureAppFabricAccessControl.D.InstallActiveDirectoryFederationServices（ADFS）intheexistingdomain.

参考答案和解析
参考答案：A, D
更多“YourcompanyhasaserverthatrunsWindowsServer2008R2.ActiveDirectoryCertificateServices(ADCS)i ”相关问题

  • 第1题：

    YourcompanyhasanActiveDirectoryforest.YouplantoinstallanEnterprisecertificationauthority（CA）onadedicatedstand-aloneserver.WhenyouattempttoaddtheActiveDirectoryCertificateServices（ADCS）serverrole，youfindthattheEnterpriseCAoptionisnotavailable.YouneedtoinstalltheADCSserverroleasanEnterpriseCA.Whatshouldyoudofirst（）

    A.AddtheDNSServerserverrole.

    B.Jointheservertothedomain.

    C.AddtheWebServer（IIS）serverroleandtheAD CSserverrole.

    D.AddtheActiveDirectoryLightweightDirectoryServices（AD LDS）serverrole.


    参考答案：B

  • 第2题：

    YourcompanyhasActiveDirectoryCertificateServices（ADCS）andNetworkAccessProtection（NAP）deployedonthenetwork.YouneedtoensurethatNAPpoliciesareenforcedonportablecomputerstahtuseawirelessconnectiontoaccessthenetwork.Whatshouldyoudo？（）

    A.Configureallaccesspointstouse802.1Xauthentication

    B.ConfigureallprotablecomputerstouseMS-CHAPv2authentication

    C.UsetheGroupPolicyManagementConsoletoaccessthewirelessgrouppolicysettings，andenablethePreventconnectionstoad-hocnetworksoption.

    D.UsetheGroupPolicyManagementConsoletoaccessthewirelessgrouppolicysettings，anddisablethePreventconnectionstoinfrastructurenetworksoption.


    参考答案：A

  • 第3题：

    以下系统或设备中，仅用于模拟量控制的是（）。

    ADCS；

    BPLC；

    CFCS；

    DKMM。


    D
    略

  • 第4题：

    Certkiller.COM有一个ActiveDirectory林中。你想要一个独立的服务器上安装企业证书颁发机构(CA)。当您尝试添加ActiveDirectory证书服务(ADCS)的作用,你会发现,企业CA选项不可用。您已安装ADCS作为一个企业CA的作用。首先你应该怎么做来实现这一任务呢()

    A.添加ActiveDirectory证书服务（ADCS）的作用。

    B.添加Web服务器（IIS）角色和ADLDS的作用。

    C.添加DNS服务器的作用。

    D.将服务器加入到域。


    参考答案：D

  • 第5题：

    DCS控制系统是通过（）实现控制功能分散的。

    ADCS网络；

    B控制器和特殊I／O卡件；

    CI／O卡件；

    D其他。


    B
    略

相关内容