單項選擇題

Your network contains an Active Directory domain. The domain contains two domain controllers named DC1 and DC2.
DC1 hosts a standard primary DNS zone for the domain. Dynamic updates are enabled on the zone. DC2 hosts a standard secondary DNS zone for the domain.
You need to configure DNS to allow only secure dynamic updates.
What should you do first（）

A.On DC1 and DC2， configure a trust anchor.
B.On DC1 and DC2， configure a connection security rule.
C.On DC1， configure the zone transfer settings.
D.On DC1， configure the zone to be stored in Active Directory.

你可能感興趣的試題

多項選擇題

You have two servers named Server1 and Server2. Both servers run Windows Server 2008 R2.
Server1 is configured as an Enterprise Root certification authority （CA）.
You install the Online Responder role service on Server2.
You need to configure Server2 to issue certificate revocation lists （CRLs） for the enterprise root CA.
Which two tasks should you perform（）

A.Import the enterprise root CA certificate.
B.Import the OCSP Response Signing certificate.
C.Add the Server1 computer account to the CertPublishers group.
D.Set the Startup Type of the Certificate Propagation service to Automatic.

單項選擇題

Your company has an Active Directory domain. All servers run Windows Server 2008 R2. Your
company uses an Enterprise Root certificate authority （CA）.
You need to ensure that revoked certificate information is highly available.
What should you do（）

A.Implement an Online Certificate Status Protocol （OCSP） responder by using Network Load Balancing.
B.Implement an Online Certificate Status Protocol （OCSP） responder by using an Internet Security and Acceleration Server array.
C.Publish the trusted certificate authorities list to the domain by using a Group Policy Object （GPO）.
D.Create a new Group Policy Object （GPO） that allows users to trust peer certificates. Link the GPO to the domain.

你可能感興趣的試題

Your company has an Active Directory domain. All servers run Windows Server 2008 R2. Your company uses an Enterprise Root certificate authority （CA）. You need to ensure that revoked certificate information is highly available. What should you do（）

Your company has an Active Directory domain. All servers run Windows Server 2008 R2. Your
company uses an Enterprise Root certificate authority （CA）.
You need to ensure that revoked certificate information is highly available.
What should you do（）