ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam 70-412 All Questions

View all questions & answers for the 70-412 exam
Go to Exam

Exam 70-412 topic 3 question 86 discussion

Actual exam question from Microsoft's 70-412
Question #: 86
Topic #: 3
[All 70-412 Questions]

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2.
Server1 has an enterprise root certification authority (CA) for contoso.com.
You deploy another member server named Server2 that runs Windows Server 2012 R2 and has the Web Server (IIS) server role installed.
You need to designate a website on Server1 as the certificate revocation list (CRL) distribution point for the CA. The solution must ensure that CRLs are published automatically to Server2.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

  • A. Create an http:// CRL distribution point (CDP) entry.
  • B. Configure a CA exit module.
  • C. Create a file:// CRL distribution point (CDP) entry.
  • D. Configure a CA policy module.
  • E. Configure an enrollment agent.
Show Suggested Answer Hide Answer
Suggested Answer: AD 🗳️
A. To specify CRL distribution points in issued certificates
✑ Open the Certification Authority snap-in.
✑ In the console tree, click the name of the CA.
✑ On the Action menu, click Properties , and then click the Extensions tab. Confirm that Select extension is set to CRL Distribution Point (CDP).
✑ Do one or more of the following. (The list of CRL distribution points is in the Specify locations from which users can obtain a certificate revocation list
(CRL) box.)
/ To indicate that you want to use a URL as a CRL distribution point Click the CRL distribution point, select the Include in the CDP extension of issued certificates check box, and then click OK .
✑ Click Yes to stop and restart Active Directory Certificate Services (AD CS).
D. You can specify CRL Distribution Points (CDPs) in CAPolicy.inf. Note that any CDP in CAPolicy.inf will take precedence for certificate verifiers over the CDP's specified in the CA policy module.
Note:

CRLDistributionPoint -
You can specify CRL Distribution Points (CDPs) for a root CA certificate in the CAPolicy.inf. This section does not configure the CDP for the CA itself. After the CA has been installed you can configure the CDP URLs that the CA will include in each certificate that it issues. The URLs specified in this section of the CAPolicy.inf file are included in the root CA certificate itself.
Example:
[CRLDistributionPoint]
URL=http://pki.wingtiptoys.com/cdp/WingtipToysRootCA.crl
by wazmac at July 6, 2020, 10:31 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Rezerestibeiro27
4 years, 5 months ago
I agree with DanStafford
upvoted 1 times
...
DanStafford
4 years, 9 months ago
Actually given answers are correct according to that link, Wazmac... (https://www.briefmenow.org/microsoft/which-two-actions-should-you-perform-815/)
upvoted 4 times
...
wazmac
4 years, 9 months ago
Answer should be A & C. https://www.briefmenow.org/microsoft/which-two-actions-should-you-perform-815/
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago