70-649 · Question #267
Your network contains an Active Directory domain. The domain contains an enterprise certification authority (CA) named Server1 and a server named Server2. On Server2, you deploy Network Policy…
The correct answer is A. On Server1, run certutil.exe -setreg policy\editflags + editf_attributeenddate. See the full explanation below for the reasoning.
Question
Your network contains an Active Directory domain. The domain contains an enterprise certification authority (CA) named Server1 and a server named Server2. On Server2, you deploy Network Policy Server (NPS) and you configure a Network Access Protection (NAP) enforcement policy for IPSec. From the Health Registration Authority snap-in on Server2, you set the lifetime of health certificates to four hours. You discover that the validity period of the health certificates issued to client computers is one year. You need to ensure that the health certificates are only valid for four hours. What should you do?
Options
- AOn Server1, run certutil.exe -setreg policy\editflags + editf_attributeenddate.
- BOn Server1, runcertutil.exe - setreg dbflags +dbflags_enablevolatilerequests.
- CModify the Request Handling settings of the certificate template used for the health certificates.
- DModify the Issuance Requirements settings of the certificate template used for the health certificates.
How the community answered
(41 responses)- A78% (32)
- B2% (1)
- C7% (3)
- D12% (5)
Community Discussion
No community discussion yet for this question.