nerdexam
Microsoft

70-669 · Question #111

Your company has a single domain Active Directory Domain Services (AD DS) forest. All servers run Windows Server 2008 R2. All client computers run Windows 7. You install a Microsoft Application…

The correct answer is B. X.509 v3. Installing App-V Management Server or Streaming Server Securely Installing or configuring an App-V Management or Streaming Server to use enhanced security (for example, Transport Layer Security, or TLS) requires that an X.509 V3 certificate has been provisioned to the App-V…

Implementing Application Virtualization (App-V)

Question

Your company has a single domain Active Directory Domain Services (AD DS) forest. All servers run Windows Server 2008 R2. All client computers run Windows 7. You install a Microsoft Application Visualization (App-V) management server. Your company policy requires that the information transmitted between the clients and the App-V server must be secured with Transport Layer Security (TLS). You need to install a certificate on the App-V server. Which type of certificate should you install?

Options

  • APKCS#10
  • BX.509 v3
  • CX.509 v2
  • DX.521

How the community answered

(36 responses)
  • A
    3% (1)
  • B
    83% (30)
  • C
    3% (1)
  • D
    11% (4)

Explanation

Installing App-V Management Server or Streaming Server Securely Installing or configuring an App-V Management or Streaming Server to use enhanced security (for example, Transport Layer Security, or TLS) requires that an X.509 V3 certificate has been provisioned to the App-V server. Configuring Certificates to Support Secure Streaming By default, the App-V service runs under the Network Service account. However, you can create a service account in Active Directory Domain Services and replace the Network Service account with the Active Directory Domain account. The security context under which the service runs is important for configuring enhanced secure communications. This security context must have read permissions for the certificate private key. When a PKCS#10 Certificate Signing Request (CSR) is generated for the App-V server, the Windows Cryptographic Service Provider is called and a private key is generated. The private key is secured with permissions given to the System and Administrator accounts only.

Topics

#App-V#TLS#X.509 v3 certificate#management server

Community Discussion

No community discussion yet for this question.

Full 70-669 Practice