Showing posts with label AD CS. Show all posts
Showing posts with label AD CS. Show all posts

Friday, February 3, 2017

Windows Server: Active Directory Certificate Service

True or False: Certificate Templates define which security principals have permissions to read, enroll, and configure the certificate template.

   
A.    False
   
B.    True



True or False: Every computer is deployed with a preset list of trusted root certificate authorities.

   
A.    False
   
B.    True



Which off the following options is available with Active Directory Certificate Services in Stand-alone mode? (Choose all that apply)

   
A.    Can be used to generate smart card Windows domain authentication certificates
   
B.    Can use certificate auto-enrollment
   
C.    Can use certificate templates
   
D.    Can be used without AD DS
   
E.    Can enforce credential checks during enrollment

True or False:  Active Directory Certificate Services will always include both a root CA and a subordinate CA.

   
A.    True
   
B.    False



Which of the following would be a reason for deploying more than a single server CA hierarchy?

   
A.    High availability
   
B.    Load balancing
   
C.    Organizational divisions
   
D.    All of the above
   
E.    Geographic divisions
 

1.  

Windows Server: Active Directory Certificate Service

True or False: Certificate Templates define which security principals have permissions to read, enroll, and configure the certificate template.

   
A.    False
   
B.    True



True or False: Every computer is deployed with a preset list of trusted root certificate authorities.

   
A.    False
   
B.    True

Which off the following options is available with Active Directory Certificate Services in Stand-alone mode? (Choose all that apply)

   
A.    Can be used to generate smart card Windows domain authentication certificates
   
B.    Can use certificate auto-enrollment
   
C.    Can use certificate templates
   
D.    Can be used without AD DS
   
E.    Can enforce credential checks during enrollment



True or False:  Active Directory Certificate Services will always include both a root CA and a subordinate CA.

   
A.    True
   
B.    False

 

Which of the following would be a reason for deploying more than a single server CA hierarchy?
   
A.    High availability
   
B.    Load balancing
   
C.    Organizational divisions
   
D.    All of the above
   
E.    Geographic divisions
 

1. True
2. True
3. Can be used without AD DS
4. False
5. All of Above