QUESTION: 25

You are the network administrator for your company. The network consists of a single Active Directory domain with five domain controllers that run Windows Server, Enterprise Edition. You are updating the public key infrastructure (PKI) for your company. Issuing Certification Authorities (CAs) have been provided certificates with a validity period of five years. Certificates are issued to enable network users to encrypt files on their computers. Basic EFS certificates have been issued and have been configured with the default validity period. You want to configure all new EFS certificates so that they are valid for up to three years. What should you do? Each correct answer presents part of the solution. (Choose all that apply.)

Duplicate and rename the Basic EFS certificate template.
Open the Basic EFS certificate template Properties dialog box.
Select the General tab and edit the validity period.
Select the General tab and edit the renewal period.
Select the Security tab and change the permission for the Administrators group to Enroll.

Answer(s): A,C

Reveal Solution Next Question

QUESTION: 26

You administer your company's Web site, which contains executable programs. You want to provide the highest level of trust to Internet users who download your programs, and you want to ensure that users' browsers will allow them to download the programs. Your company's network includes an enterprise root Certification Authority (CA) and an issuing enterprise subordinate CA. Which of the following actions should you take?

Request a Code Signing certificate from your company's enterprise subordinate C
Request a Code Signing certificate from a commercial CA.
Request a User Signature Only certificate from your company's enterprise subordinate CA.
Request a User Signature Only certificate from a commercial CA.

Answer(s): B

Reveal Solution Next Question

QUESTION: 27

You are one of the administrators for your company's Windows Server network. The relevant portion of the network is presented in the following exhibit.

All servers, client computers and one network print device are currently configured with static IP addresses. The network IP address is 200.10.29.0. A DHCP server has been deployed but has not yet been configured. You must configure a new scope that will provide the existing client computers with IP configurations. The new scope should support an additional 25 new client computers that will be deployed within the next two months. Which settings should be included in the new DHCP scope? Each correct answer presents part of the solution. (Choose three.)

subnet mask: 255.255.255.0
subnet mask: 255.255.255.128
DHCP scope starting IP address: 200.10.29.7
DHCP scope ending IP address: 200.10.29.254
DHCP scope starting IP address: 200.10.29.1
DHCP scope ending IP address: 200.10.29.254
DHCP scope exclusion range starting IP address: 200.10.29.1
DHCP scope exclusion range ending IP address: 200.10.29.6
DHCP scope exclusion range starting IP address: 200.10.29.1
DHCP scope exclusion range ending IP address: 200.10.29.254

Answer(s): A,D,E

Reveal Solution Next Question

QUESTION: 28

You administer your company's Windows network. The network consists of 25 Windows Server computers. The network contains an offline root Certification Authority (CA) located in the main office and a subordinate issuing CA in the main office and each of the remaining four retail locations.

One of the four retail locations has been purchased and will operate as a franchise. You must ensure that resources on the company network will not accept certificates from the associated subordinate CA in this retail location after the sale is completed. Your solution must use a minimum amount of administrative effort.

What should you do? Each correct answer presents part of the solution. (Choose three.)

On the company's root CA, revoke the certificate of the subordinate C
Disconnect the subordinate CA from the network.
On the subordinate CA, remove the CA software and remove the CA files.
On the subordinate CA, revoke the certificates that it has issued.
Publish a new Certificate Revocation List.
Copy the Edb.log file from the root CA to its Certification Distribution Point on your network.
Copy the Edb.log file from the subordinate CA to its Certification Distribution Point on your network.
Copy the Certificate Revocation List file to the Certificate Distribution Point on your network.

Answer(s): A,E,H

Reveal Solution Next Question

Free JN0-250 Exam Braindumps (page: 7)

QUESTION: 25

QUESTION: 26

QUESTION: 27

QUESTION: 28