nerdexam
Microsoft

70-648 · Question #80

Your network contains an Active Directory forest named contoso.com. The forest contains a server named Server1 that is configured as an enterprise certification authority (CA). The forest contains a…

The correct answer is A. Install an additional server, configure the new server as a standalone CA, and then configure the Health. See the full explanation below for the reasoning.

Question

Your network contains an Active Directory forest named contoso.com. The forest contains a server named Server1 that is configured as an enterprise certification authority (CA). The forest contains a server named Server2 that has the Network Policy Server (NPS) role service installed. You deploy Network Access Protection (NAP). You discover that Server1 fails to issue health certificates. You need to ensure that health certificates can be issued. What should you do?

Options

  • AInstall an additional server, configure the new server as a standalone CA, and then configure the Health
  • BFrom the Network Policy Server console, create a new health policy.
  • CFrom the Network Policy Server console, modify the Windows System Health Validators settings.
  • DInstall the Host Credential Authorization Protocol (HCAP) role service on Server1.

How the community answered

(41 responses)
  • A
    78% (32)
  • B
    5% (2)
  • C
    15% (6)
  • D
    2% (1)

Community Discussion

No community discussion yet for this question.

Full 70-648 Practice