70-686 · Question #173
Your company has a single Active Directory Domain Services (AD DS) domain named contoso.com that uses Active DirectoryCintegrated DNS. You deploy the Key Management Service (KMS) on a Windows 7…
The correct answer is A. Create and deploy a GPO firewall rule to allow RPC traffic through TCP port 1688 on the C. Grant the KMS server the Full Control permission on the _vlmcs._tcp.contoso.com DNS. The KMS clients find the KMS host via a DNS SRV record (_vlmcs._tcp) and then automatically attempt to discover and use this service to activate themselves. When in the 30 day Out of Box grace period, they will try to activate every 2 hours. Once activated, the KMS clients will…
Question
Your company has a single Active Directory Domain Services (AD DS) domain named contoso.com that uses Active DirectoryCintegrated DNS. You deploy the Key Management Service (KMS) on a Windows 7 computer. You need to ensure that Windows 7 client computers can locate the KMS host and perform activation. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
Options
- ACreate and deploy a GPO firewall rule to allow RPC traffic through TCP port 1688 on the
- BDeploy a Windows Server 2008 KMS host.
- CGrant the KMS server the Full Control permission on the _vlmcs._tcp.contoso.com DNS
- DGrant the KMS server the Full Control permission on the _msdcs._tcp.contoso.com DNS
How the community answered
(36 responses)- A83% (30)
- B11% (4)
- D6% (2)
Explanation
The KMS clients find the KMS host via a DNS SRV record (_vlmcs._tcp) and then automatically attempt to discover and use this service to activate themselves. When in the 30 day Out of Box grace period, they will try to activate every 2 hours. Once activated, the KMS clients will attempt a renewal every 7days. Listening on Port: Communication with KMS is via anonymous RPC. 1688 is the default TCP port used by the clients to connect to the KMS host. Make sure this port is open between your KMS clients and the KMS host.
Topics
Community Discussion
No community discussion yet for this question.