70-647 · Question #83
Your network contains servers that run Windows Server 2008 R2 and client computers that run Windows 7. You deploy a public key infrastructure by using Certificate Services servers that run Windows…
The correct answer is B. Configure Restricted Enrollment Agents. To ensure that the managers must be able to use their client computers to manage certificates and must be able to enroll smartcards for other employees, you need to use restricted Enrollment The restricted enrollment agent allows limiting the permissions that users designated…
Question
Your network contains servers that run Windows Server 2008 R2 and client computers that run Windows 7. You deploy a public key infrastructure by using Certificate Services servers that run Windows Server 2008 R2. You need to plan the implementation of smart card authentication on the network. The solution must meet the following requirements:
- Help desk users must only be able to enroll user certificates.
- Managers must be able to enroll smartcards for other employees.
- Managers must be able to use their client computers to manage
certificates. What should you include in your plan?
Options
- AEnable Web enrollment
- BConfigure Restricted Enrollment Agents
- CUpgrade all certificates to V3 templates
- DConfigure Restricted Certificate Managers
How the community answered
(45 responses)- A4% (2)
- B71% (32)
- C9% (4)
- D16% (7)
Explanation
To ensure that the managers must be able to use their client computers to manage certificates and must be able to enroll smartcards for other employees, you need to use restricted Enrollment The restricted enrollment agent allows limiting the permissions that users designated as enrollment agents have for enrolling smart card certificates on behalf of other users. Enrollment agents are one or more authorized individuals within an organization. The enrollment agent needs to be issued an enrollment agent certificate, which enables the agent to enroll for smart card certificates on behalf of users. 1ca2a674fb8d1033.mspx?mfr=true
Topics
Community Discussion
No community discussion yet for this question.