Question 1

List the four steps required to complete the configuration of the online responder.

Accepted Answer

Specify a name for the new revocation co

Question 2

A CA can be a company such as VeriSign that issues certificates for use on the Internet, or it can be a software component, such as Microsoft's Certification Authority, that issues certificates.

Accepted Answer

A) True 
 B)False

Question 3

Match between columns
                        Premises: The entity that issues the certificates
Uses a single key (often referred to as a session key) to encrypt and decrypt the data
If an enterprise has more than one CA, this MMC can be used to manage all of them
This MMC is used to manage the online responders that provide the CRL to requestors to validate certificates
Very secure, but also resource intensive, requiring a lot of processing power
Used to issue certificates to network devices such as routers that do not have accounts in Active Directory
Can be used by individual users to encrypt their data
Includes all of the technologies needed to create, issue, manage, store, and revoke certificates
Specifically designed to support automatic request and retrieval of certificates for network devices

Accepted Answer

The Answer of asymmetric encryption and Enterprise PKI and CA is...

Question 4

Users in the ___________________ role are granted the Issue and Manage Certificates permission and can approve certificate enrollment and revocation requests.

Accepted Answer

The answer of Users in the ___________________ role are granted...

Question 5

After installing certificate services, the name of the computer and the domain settings cannot be changed, or AD CS will no longer function correctly.

Accepted Answer

A) True 
 B)False

Question 6

AD CS publishes a delta CRL once a ____ by default.

Accepted Answer

A)  day 
B)  week 
C)  month 
D)  year 
A)  day 
B)  week 
C)  month 
D)  year

Question 7

The first time a user encrypts data using EFS, a ____ key pair is generated.

Accepted Answer

A)  private 
B)  public/private 
C)  symmetric 
D)  bifurcated 
A)  private 
B)  public/private 
C)  symmetric 
D)  bifurcated

Question 8

The ____ is the first CA in the hierarchy.

Accepted Answer

A)  basis CA 
B)  original CA 
C)  root CA 
D)  subordinate CA 
A)  basis CA 
B)  original CA 
C)  root CA 
D)  subordinate CA

Question 9

List and describe two permissions that can be granted to enterprise admins.

Accepted Answer

Manage CA. Permissions to configure and

Question 10

Users in the ____ role are granted the Manage Auditing and Security Log permissions.

Accepted Answer

A)  Administrator 
B)  Approver 
C)  Auditor 
D)  Validator 
A)  Administrator 
B)  Approver 
C)  Auditor 
D)  Validator

Question 11

A(n) ____ is a complete listing of all certificates revoked by the CA.

Accepted Answer

A)  new CRL 
B)  delta CRL 
C)  alpha CRL 
D)  revocation CRL 
A)  new CRL 
B)  delta CRL 
C)  alpha CRL 
D)  revocation CRL

Question 12

____ allows an administrator to configure certificates to be issued to clients without them having to request the certificates.

Accepted Answer

A)  Autoprovisioning 
B)  Autoenrollment 
C)  Autocertification 
D)  Autoconfiguration 
A)  Autoprovisioning 
B)  Autoenrollment 
C)  Autocertification 
D)  Autoconfiguration

Question 13

One or more people in an organization can be designated as ________________________ agents for specific templates, and can then request certificates on behalf of users.

Accepted Answer

restricted

Question 14

The same public key can decrypt information encrypted with the public key.

Accepted Answer

A) True 
 B)False

Question 15

List and describe two AD CS role services.

Accepted Answer

Certification Authority. The CA is used

Question 16

The ____ is used to request certificates on behalf of a user and provides a signature.

Accepted Answer

A)  enrollment agent 
B)  certificate intermediary 
C)  enrollment standard 
D)  enrollment GUI 
A)  enrollment agent 
B)  certificate intermediary 
C)  enrollment standard 
D)  enrollment GUI

Question 17

A ____ is approximately the size of a credit card, and includes a microprocessor and a user certificate.

Accepted Answer

A)  smart card 
B)  token 
C)  trusted computing base 
D)  trusted computing module 
A)  smart card 
B)  token 
C)  trusted computing base 
D)  trusted computing module

Question 18

Explain automatic certificate enrollment.

Accepted Answer

AD CS can be configured to automatically

Question 19

The ____ can be added to a Microsoft Management Console (MMC) and used to request certificates from an enterprise CA.

Accepted Answer

A)  Public-key snap-in 
B)  Computer Management snap-in 
C)  Encryption snap-in 
D)  Certificates snap-in 
A)  Public-key snap-in 
B)  Computer Management snap-in 
C)  Encryption snap-in 
D)  Certificates snap-in

Question 20

A PKI may appear complex on the surface but is actually rather simple.

Accepted Answer

A) True 
 B)False

List the four steps required to complete the configuration of the online responder.

A CA can be a company such as VeriSign that issues certificates for use on the Internet, or it can be a software component, such as Microsoft's Certification Authority, that issues certificates.

Users in the ___________________ role are granted the Issue and Manage Certificates permission and can approve certificate enrollment and revocation requests.

After installing certificate services, the name of the computer and the domain settings cannot be changed, or AD CS will no longer function correctly.

AD CS publishes a delta CRL once a ____ by default.

The first time a user encrypts data using EFS, a ____ key pair is generated.

The ____ is the first CA in the hierarchy.

List and describe two permissions that can be granted to enterprise admins.

Users in the ____ role are granted the Manage Auditing and Security Log permissions.

A(n) ____ is a complete listing of all certificates revoked by the CA.

____ allows an administrator to configure certificates to be issued to clients without them having to request the certificates.

One or more people in an organization can be designated as ________________________ agents for specific templates, and can then request certificates on behalf of users.

The same public key can decrypt information encrypted with the public key.

List and describe two AD CS role services.

The ____ is used to request certificates on behalf of a user and provides a signature.

A ____ is approximately the size of a credit card, and includes a microprocessor and a user certificate.

Explain automatic certificate enrollment.

The ____ can be added to a Microsoft Management Console (MMC) and used to request certificates from an enterprise CA.

A PKI may appear complex on the surface but is actually rather simple.

Designing Active Directory Domain Services

Designing Physical Topology

Designing and Implementing DNS

Designing and Implementing Group Policy

Designing Remote Access and Terminal Services Strategies

Securing Windows Server 2008 Servers

Designing High Availability and Business Continuity

Designing Supporting Services

Designing Virtualization Strategies

Filters

Exam 6: Designing and Implementing a PKI

List the four steps required to complete the configuration of the online responder.

A CA can be a company such as VeriSign that issues certificates for use on the Internet, or it can be a software component, such as Microsoft's Certification Authority, that issues certificates.

Users in the ___________________ role are granted the Issue and Manage Certificates permission and can approve certificate enrollment and revocation requests.

After installing certificate services, the name of the computer and the domain settings cannot be changed, or AD CS will no longer function correctly.

AD CS publishes a delta CRL once a ____ by default.

The first time a user encrypts data using EFS, a ____ key pair is generated.

The ____ is the first CA in the hierarchy.

List and describe two permissions that can be granted to enterprise admins.

Users in the ____ role are granted the Manage Auditing and Security Log permissions.

A(n) ____ is a complete listing of all certificates revoked by the CA.

____ allows an administrator to configure certificates to be issued to clients without them having to request the certificates.

One or more people in an organization can be designated as ________________________ agents for specific templates, and can then request certificates on behalf of users.

The same public key can decrypt information encrypted with the public key.

List and describe two AD CS role services.

The ____ is used to request certificates on behalf of a user and provides a signature.

A ____ is approximately the size of a credit card, and includes a microprocessor and a user certificate.

Explain automatic certificate enrollment.

The ____ can be added to a Microsoft Management Console (MMC) and used to request certificates from an enterprise CA.

A PKI may appear complex on the surface but is actually rather simple.

Designing Active Directory Domain Services

Designing Physical Topology

Designing and Implementing DNS

Designing and Implementing Group Policy

Designing Remote Access and Terminal Services Strategies

Securing Windows Server 2008 Servers

Designing High Availability and Business Continuity

Designing Supporting Services

Designing Virtualization Strategies

Filters