Question 1

A _________________________ is an entity that issues and manages digital certificates and associated public keys and is an integral part of PKI.

Accepted Answer

certificat

Question 2

MATCHING
-A service that allows network devices,such as routers and switches,to obtain certificates by using Simple Certificate Enrollment Protocol

Accepted Answer

A) issuing CAs 
B) root CA 
C) intermediate CAs 
D) hash algorithm 
E) registration authority
F)public key infrastructure
G)key archival
H)Network Device Enrollment Service (NDES)
I)Certificate Practice Statement (CPS) 
A) issuing CAs 
B) root CA 
C) intermediate CAs 
D) hash algorithm 
E) registration authority
F)public key infrastructure
G)key archival
H)Network Device Enrollment Service (NDES)
I)Certificate Practice Statement (CPS)

Question 3

This is an encryption / decryption process,used in a PKI system,that uses both a public key and a private key.

Accepted Answer

Asymmetric

Question 4

Windows Server 2008 supports three versions of certificate templates.What version or versions of templates can be issued only from Windows Server 2008 enterprise CAs and can only be used on Windows Server 2008 and Vista clients?

Accepted Answer

A) Version 1 
B) Version 2 
C) Version 3 
D) All of the above 
A) Version 1 
B) Version 2 
C) Version 3 
D) All of the above

Question 5

____________________ is data that has been unaltered;as used in cryptography,this term defines the state of information before it's encrypted or after it has been decrypted.

Accepted Answer

plaintext

Question 6

By setting up autoenrollment for EFS certificates,a user's EFS certificate is created...

Accepted Answer

A) When the user encrypts a file 
B) After the user restarts his or her computer 
C) The first time he or she logs on to the domain after autoenrollment is configured 
D) After requesting the certificate within the Certificate snap-in 
A) When the user encrypts a file 
B) After the user restarts his or her computer 
C) The first time he or she logs on to the domain after autoenrollment is configured 
D) After requesting the certificate within the Certificate snap-in

Question 7

When configuring certificate templates,Windows Server 2003 Standard edition and Windows 2000 Server support only this version of templates

Accepted Answer

The answer of When configuring certificate templates,Windows Server 2003 Standard...

Question 8

Which description best fits the CA Administrator role?

Accepted Answer

A) Approves requests for certificate enrollment and revocation 
B) Manages auditing logs 
C) Configures and maintains CA servers,and can assign all other CA roles and renew the CA certificate 
D) Able to back up and restore files and directories 
A) Approves requests for certificate enrollment and revocation 
B) Manages auditing logs 
C) Configures and maintains CA servers,and can assign all other CA roles and renew the CA certificate 
D) Able to back up and restore files and directories

Question 9

What must be done to allow a user to be able to access a file encrypted with EFS over a network connection?

Accepted Answer

A) Certificate autoenrollment must be configured 
B) The user must be given the correct permissions 
C) The user's SID must be exported to the remote machine 
D) This can not be accomplished 
A) Certificate autoenrollment must be configured 
B) The user must be given the correct permissions 
C) The user's SID must be exported to the remote machine 
D) This can not be accomplished

Question 10

What is the certificate distribution point (CDP)?

Accepted Answer

A) A special CA replication only topology to be used when CAs are updated 
B) Identifies where the CRL for a CA can be retrieved;can include URLS for HTTP,FILE,FTP,and LDAP locations 
C) A path that is configured on a CA server that specifies where to find the certificate for a CA 
D) A list of the certificates revoked since the last base,or complete,CRL was published 
A) A special CA replication only topology to be used when CAs are updated 
B) Identifies where the CRL for a CA can be retrieved;can include URLS for HTTP,FILE,FTP,and LDAP locations 
C) A path that is configured on a CA server that specifies where to find the certificate for a CA 
D) A list of the certificates revoked since the last base,or complete,CRL was published

Question 11

Which of the four CA roles can approve requests for certificate enrollment and revocation?

Accepted Answer

A) CA Administrator 
B) Certificate Manager 
C) Backup Operator 
D) Auditor 
A) CA Administrator 
B) Certificate Manager 
C) Backup Operator 
D) Auditor

Question 12

What type of CA requires that the CA's certificate be distributed to clients manually?

Accepted Answer

The answer of What type of CA requires that the...

Question 13

If a certificate has a validity period of 1 year and a renewal period of 1 month,when must a certificate that was issued on December 12th,2009 be renewed?

Accepted Answer

A) Once every month throughout the validity period 
B) Between November 12,2010 and December 12,2010 
C) Between December 12,2010 and January 12,2011 
D) Between December 12,2010 and January 11 
A) Once every month throughout the validity period 
B) Between November 12,2010 and December 12,2010 
C) Between December 12,2010 and January 12,2011 
D) Between December 12,2010 and January 11

Question 14

Web enrollment is the main method for accessing CA services on a ____________________ CA.

Accepted Answer

standalone

Question 15

If setting up a standalone certificate authority,Active Directory is required.

Accepted Answer

A) True 
 B)False

Question 16

Which of the following answers is not an element contained in a certificate practice statement?

Accepted Answer

A) Identification of the CA 
B) Types of certificates used 
C) Configuration of Active Directory information 
D) Certificate lifetimes 
A) Identification of the CA 
B) Types of certificates used 
C) Configuration of Active Directory information 
D) Certificate lifetimes

Question 17

MATCHING
-A method of backing up private keys and restoring them if users' private keys are lost

Accepted Answer

A) issuing CAs 
B) root CA 
C) intermediate CAs 
D) hash algorithm 
E) registration authority
F)public key infrastructure
G)key archival
H)Network Device Enrollment Service (NDES)
I)Certificate Practice Statement (CPS) 
A) issuing CAs 
B) root CA 
C) intermediate CAs 
D) hash algorithm 
E) registration authority
F)public key infrastructure
G)key archival
H)Network Device Enrollment Service (NDES)
I)Certificate Practice Statement (CPS)

Question 18

____________________ is an international standard that defines many aspects of a PKI,including certificate formats.

Accepted Answer

The answer of ____________________ is an international standard that defines...

Question 19

CA Autoenrollment can only be enabled on enterprise CAs.

Accepted Answer

A) True 
 B)False

Question 20

If a certificate isn't configured for autoenrollment,a user may be able to request the certificate by using the Certificates snap-in,so long as they are accessing a standalone CA.

Accepted Answer

A) True 
 B)False

A _________________________ is an entity that issues and manages digital certificates and associated public keys and is an integral part of PKI.

MATCHING -A service that allows network devices,such as routers and switches,to obtain certificates by using Simple Certificate Enrollment Protocol

This is an encryption / decryption process,used in a PKI system,that uses both a public key and a private key.

Windows Server 2008 supports three versions of certificate templates.What version or versions of templates can be issued only from Windows Server 2008 enterprise CAs and can only be used on Windows Server 2008 and Vista clients?

____________________ is data that has been unaltered;as used in cryptography,this term defines the state of information before it's encrypted or after it has been decrypted.

By setting up autoenrollment for EFS certificates,a user's EFS certificate is created...

When configuring certificate templates,Windows Server 2003 Standard edition and Windows 2000 Server support only this version of templates

Which description best fits the CA Administrator role?

What must be done to allow a user to be able to access a file encrypted with EFS over a network connection?

What is the certificate distribution point (CDP)?

Which of the four CA roles can approve requests for certificate enrollment and revocation?

What type of CA requires that the CA's certificate be distributed to clients manually?

If a certificate has a validity period of 1 year and a renewal period of 1 month,when must a certificate that was issued on December 12th,2009 be renewed?

Web enrollment is the main method for accessing CA services on a ____________________ CA.

If setting up a standalone certificate authority,Active Directory is required.

Which of the following answers is not an element contained in a certificate practice statement?

MATCHING -A method of backing up private keys and restoring them if users' private keys are lost

____________________ is an international standard that defines many aspects of a PKI,including certificate formats.

CA Autoenrollment can only be enabled on enterprise CAs.

If a certificate isn't configured for autoenrollment,a user may be able to request the certificate by using the Certificates snap-in,so long as they are accessing a standalone CA.

Introducing Windows Server 2008

Installing Windows Server 2008

Introducing Active Directory

Active Directory Design and Security Concepts

Account Management

Windows File and Print Services

Configuring Group Policy

Introduction to Windows Networking

Configuring DNS for Active Directory

Configuring and Maintaining the Active Directory Infrastructure

Additional Active Directory Server Roles

Server Management and Monitoring

Filters

Exam 11: Active Directory Certificate Services

A _________________________ is an entity that issues and manages digital certificates and associated public keys and is an integral part of PKI.

MATCHING -A service that allows network devices,such as routers and switches,to obtain certificates by using Simple Certificate Enrollment Protocol

This is an encryption / decryption process,used in a PKI system,that uses both a public key and a private key.

Windows Server 2008 supports three versions of certificate templates.What version or versions of templates can be issued only from Windows Server 2008 enterprise CAs and can only be used on Windows Server 2008 and Vista clients?

____________________ is data that has been unaltered;as used in cryptography,this term defines the state of information before it's encrypted or after it has been decrypted.

By setting up autoenrollment for EFS certificates,a user's EFS certificate is created...

When configuring certificate templates,Windows Server 2003 Standard edition and Windows 2000 Server support only this version of templates

Which description best fits the CA Administrator role?

What must be done to allow a user to be able to access a file encrypted with EFS over a network connection?

What is the certificate distribution point (CDP)?

Which of the four CA roles can approve requests for certificate enrollment and revocation?

What type of CA requires that the CA's certificate be distributed to clients manually?

If a certificate has a validity period of 1 year and a renewal period of 1 month,when must a certificate that was issued on December 12th,2009 be renewed?

Web enrollment is the main method for accessing CA services on a ____________________ CA.

If setting up a standalone certificate authority,Active Directory is required.

Which of the following answers is not an element contained in a certificate practice statement?

MATCHING -A method of backing up private keys and restoring them if users' private keys are lost

____________________ is an international standard that defines many aspects of a PKI,including certificate formats.

CA Autoenrollment can only be enabled on enterprise CAs.

If a certificate isn't configured for autoenrollment,a user may be able to request the certificate by using the Certificates snap-in,so long as they are accessing a standalone CA.

Introducing Windows Server 2008

Installing Windows Server 2008

Introducing Active Directory

Active Directory Design and Security Concepts

Account Management

Windows File and Print Services

Configuring Group Policy

Introduction to Windows Networking

Configuring DNS for Active Directory

Configuring and Maintaining the Active Directory Infrastructure

Additional Active Directory Server Roles

Server Management and Monitoring

Filters