YourcompanyhasanActiveDirectorydomain.YouplantoinstalltheActiveDirectoryCertificateServices(ADCS)serverroleonamemberserverthatrunsWindowsServer2008R2.YouneedtoensurethatmembersoftheAccountOperatorsgroupareabletoissuesmartcardcredentials.Theyshouldnotbeabl

题目

YourcompanyhasanActiveDirectorydomain.YouplantoinstalltheActiveDirectoryCertificateServices(ADCS)serverroleonamemberserverthatrunsWindowsServer2008R2.YouneedtoensurethatmembersoftheAccountOperatorsgroupareabletoissuesmartcardcredentials.Theyshouldnotbeabletorevokecertificates.Whichthreeactionsshouldyouperform()

A.InstalltheADCSserverroleandconfigureitasanEnterpriseRootCA.

B.InstalltheADCSserverroleandconfigureitasaStandaloneCA.

C.RestrictenrollmentagentsfortheSmartcardlogoncertificatetotheAccountOperatorgroup.

D.RestrictcertificatemanagersfortheSmartcardlogoncertificatetotheAccountOperatorgroup.

E.CreateaSmartcardlogoncertificate.

F.CreateanEnrollmentAgentcertificate.


相似考题
参考答案和解析
参考答案:A, C, E