Microsoft
70-649 · Question #267
70-649 Question #267: Real Exam Question with Answer & Explanation
Sign in or unlock 70-649 to reveal the answer and full explanation for question #267. The question stem and answer options stay visible for context.
Question
Your network contains an Active Directory domain. The domain contains an enterprise certification authority (CA) named Server1 and a server named Server2. On Server2, you deploy Network Policy Server (NPS) and you configure a Network Access Protection (NAP) enforcement policy for IPSec. From the Health Registration Authority snap-in on Server2, you set the lifetime of health certificates to four hours. You discover that the validity period of the health certificates issued to client computers is one year. You need to ensure that the health certificates are only valid for four hours. What should you do?
Options
- AOn Server1, run certutil.exe -setreg policy\editflags + editf_attributeenddate.
- BOn Server1, runcertutil.exe - setreg dbflags +dbflags_enablevolatilerequests.
- CModify the Request Handling settings of the certificate template used for the health certificates.
- DModify the Issuance Requirements settings of the certificate template used for the health certificates.
Unlock 70-649 to see the answer
You've previewed enough free 70-649 questions. Unlock 70-649 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.