70-647 · Question #23
Your network contains servers that run Windows Server 2008 and client computers that run Windows Vista. All network routers support IPsec connections. Client computers and servers use IPsec to…
The correct answer is B. Network Device Enrollment Service on Server2. To recommend a certificate solution for the network routers that would enable the routers to automatically request certificates and that would use Simple Certificate Enrollment Protocol (SCEP), you need to implement Network Device Enrollment Service on Server2. The Network…
Question
Your network contains servers that run Windows Server 2008 and client computers that run Windows Vista. All network routers support IPsec connections. Client computers and servers use IPsec to connect through network routers. You have two servers named Server1 and Server2. Server1 has Active Directory Certificate Services (AD CS) installed and is configured as a certification authority (CA). Server2 runs Internet Information Services (IIS). You need to recommend a certificate solution for the network routers. The solution must meet the following requirements:
- Use the Simple Certificate Enrollment Protocol (SCEP).
- Enable the routers to automatically request certificates.
What should you recommend implementing?
Options
- Acertification authority Web enrollment services on Server2
- BNetwork Device Enrollment Service on Server2
- COnline Responder service on Server1
- Dsubordinate CA on Server1
How the community answered
(54 responses)- A6% (3)
- B81% (44)
- C2% (1)
- D11% (6)
Explanation
To recommend a certificate solution for the network routers that would enable the routers to automatically request certificates and that would use Simple Certificate Enrollment Protocol (SCEP), you need to implement Network Device Enrollment Service on Server2. The Network Device Enrollment Service allows routers and other network devices to obtain certificates based on the Simple Certificate Enrollment Protocol (SCEP) from Microsoft Systems Technology Review ae6a87fd174c1033.mspx?mfr=true
Topics
Community Discussion
No community discussion yet for this question.