Exam 11: Active Directory Certificate Services

Enter the term that best matches the description below: A numeric string created by a cryptographic algorithm,called a hash,that's used to validate a message or document's authenticity.

The Network Device Enrollment Service (NDES)allows network devices,such as routers and switches,to obtain certificates by using a special Cisco proprietary protocol known as...

Before you can restore a CA database from a backup,the CA service must be stopped.

One of the following is not an example of a well known company that has universally trusted public CAs:

A user's employment was recently terminated due to suspicions of corporate espionage.As part of a security audit,you have been assigned to investigate any files related to the user that was terminated.Unfortunately,due to unknown circumstances,the user's profile was lost.However,you have found several files believed to have been created by the user,that have been encrypted via EFS.Because your environment runs on Windows Server 2008 Enterprise edition,you are counting upon automatic key archival to gain access to the encrypted files. Once the certificate manager locates the key in the CA database,what kind of user must be contacted in order to decrypt the key?

MATCHING -A server configured with the Web Enrollment role service

MATCHING -A document describing how a CA issues certificates containing the CA identity,security practices used to maintain CA integrity,types of certificates issued,renewal policy,and so forth.

This type of CA isn't connected to the network,which makes it less vulnerable to attacks.

An enterprise CA is...

What type of CA can publish the certificate revocation list to Active Directory automatically?