Your&ensp;network&ensp;contains&ensp;a...

单项选择题X 纠错

Your network contains an Active Directory domain.
You have a server named Server1 that runs Windows Server 2008 R2. Server1 is an enterprise root certification authority （CA）.
You have a client computer named Computer1 that runs Windows 7.
You enable automatic certificate enrollment for all client computers that run Windows 7. You need to verify that the Windows 7 client computers can automatically enroll for certificates. Which command should you run on Computer1（）

A.certreq.exe retrieve
B.certreq.exe submit
C.certutil.exe getkey
D.certutil.exe pulse

参考答案：

进入题库练习

单项选择题

Your network contains an Active Directory domain. The relevant servers in the domain are configured as shown in the following table.

You need to ensure that all device certificate requests use the MD5 hash algorithm. What should you do（）

A.On Server2， run the Certutil tool.
B.On Server1， update the CEP Encryption certificate template.
C.On Server1， update the Exchange Enrollment Agent （Offline Request） template.
D.On Server3， set the value of the HKLM\Software\Microsoft\Cryptography\MSCEP\ HashAlgorithm\HashAlgorithm registry key.

点击查看答案进入题库练习

单项选择题

Certkiller .com has a server that runs on Windows Server 2008. The server also has an instance of Active Directory Lightweight Directory Services （AD LDS） running.
In order to test AD LDS， you need to replicate the AD LDS instance on a test computer located on the network.
What should you do to achieve this objective（）

A.Execute AD LDS Setup wizard on the test computer to create and install a replica of AD LDS.
B.Execute repadmin/bs command on the test computer
C.Install and configure a new AD LDS instance on the test computer by copy and pasting the entire partition on the test computer
D.Execute the Dsmgmt command on the test computer and create a naming context

点击查看答案进入题库练习

单项选择题

Certkiller .com has a main office and branch office in another city. You are assigned to deploy and implement a Read-only Domain Controller （RODC） at the branch office. You deploy a RODC that runs Windows Server 2008.
What should you do to ensure that the users at the branch office can log on to the domain using RODC（）

A.Use Password Replication Policy on the RODC
B.Add RODC to the main office
C.Deploy and configure a new bridgehead server in the branch office
D.Deploy and configure a Password Replication Policy on the RODC in the main office

点击查看答案进入题库练习

单项选择题

Critical services are running on CKD20， a domain controller. You have completed restructuring the organizational unit hierarchy for the domain and deleted the needless objects. What would you do to perform an offline defragmentation of the Active Directory database on CKD20 while ensuring that the critical services remain online（）

A.Open the Microsoft Management Console （MMC） and stop the Domain Controller service. After that，run the defrag tool
B.Start the domain controller in the Directory Service restore mode and run the Ntdsutil tool
C.Start the domain controller and then use the Defrag tool to start defragmentation
D.Open the MMC and stop the Domain Controller service. After that， run the Ntdsutil tool.
E.All of the above

点击查看答案进入题库练习

单项选择题

Certkiller .com has a domain controller that runs Windows Server 2008. The Certkiller .com network boosts 40 Windows Vista client machines. As an administrator at Certkiller .com， you want to deploy Active Directory Certificate service （AD CS） to authorize the network users by issuing digital certificates.
What should you do to manage certificate settings on all machines in a domain from one main location（）

A.Configure Enterprise CA certificate settings
B.Configure Enterprise trust certificate settings
C.Configure Advance CA certificate settings
D.Configure Group Policy certificate settings
E.All of the above

点击查看答案进入题库练习

多项选择题

You are decommissioning one of the domain controllers in a child domain. You need to transfer all domain operations master roles within the child domain to a newly installed domain controller in the same child domain. Which three domain operations master roles should you transfer（）

A.RID master
B.PDC emulator
C.Schema master
D.Infrastructure master
E.Domain naming master

点击查看答案进入题库练习

多项选择题

You are decommissioning domain controllers that hold forest-wide operations master roles. You need to transfer all forest-wide operations master roles to another domain controller. Which two roles should you transfer？（）

A.RID master
B.PDC emulator
C.Schema master
D.Infrastructure master
E.Domain naming master

点击查看答案进入题库练习

单项选择题

Certkiller.COM采用Windows Server 2008企业证书颁发机构（CA）颁发证书。你的指示来实现密钥存档。来实现这个任务，你应该怎么做呢（）

A.在服务器上，存档的私钥
B.配置Hisecdc安全模板
C.撤销企业从属CA和问题用户证书加密文件的用户
D.配置存储加密文件的计算机自动enrollement

点击查看答案进入题库练习

多项选择题

Certkiller.COM有一个Active Directory域。在Active Directory中的所有服务器运行Windows Server 2008。 Certkiller。COM运行的企业根证书颁发机构（CA）。你必须确保只有管理员可以签署代码。你应该执行哪两个任务来实现这一任务呢（）

A.更改本地计算机策略的企业根CA仅允许管理员管理受信任的发布。
B.发布的代码签名模板
C.更改模板的安全设置，只允许管理员请求代码签名证书
D.管理员之间分发代码签名模板，并要求他们将其添加到信任同行证书。

点击查看答案进入题库练习

多项选择题

Certkiller.COM有一个服务器，运行Windows Server 2008。主要是该服务器已配置为一个独立的认证机构（CA）的认证服务。至于每家公司的政策，您需要审计，到CA的配置设置和CA安全设置变化。你应该执行哪两个动作来实现这一任务呢（）

A.打开认证服务管理单元和配置审核
B.认证服务的服务器的本地安全策略中启用和配置审核对象访问“设置
C.配置认证服务的服务器，以记录成功和失败的企图改变权限的文件在％SYSTEM32％\ CertSrv目录
D.打开认证服务管理单元和配置安全设置的审核

点击查看答案进入题库练习