70-647 · Question #256
You need to recommend a PKI strategy for Contoso that meets the company's technical requirements. What should you include in the recommendation?
The correct answer is B. An enterprise subordinate CA in the Contoso domain. The question states, "The certificates will be based on custom certificate templates". To use certificate templates, you need an enterprise CA. In this case it would be a subordinate to the root CA at Humongous Insurance. Incorrect Answer: A: To use certificate templates, you…
Question
You need to recommend a PKI strategy for Contoso that meets the company's technical requirements. What should you include in the recommendation?
Options
- AA standalone subordinate CA in the Contoso domain
- BAn enterprise subordinate CA in the Contoso domain
- CAn external trust
- DCross-forest certificate enrollment
How the community answered
(47 responses)- A4% (2)
- B81% (38)
- C13% (6)
- D2% (1)
Explanation
The question states, "The certificates will be based on custom certificate templates". To use certificate templates, you need an enterprise CA. In this case it would be a subordinate to the root CA at Humongous Insurance. Incorrect Answer: A: To use certificate templates, you need an enterprise CA. C: The question states that no external trust will be allowed. D: The question states that no external trust will be allowed. This option requires a two-way external forest trust.
Topics
Community Discussion
No community discussion yet for this question.