Home » Microsoft » 70-417 v.2 » What must you do to add Active Directory Certificate Services (AD CS) to this server?
A server named Server01 is running Server Core at your companies IT house. It is already configured with the AD DS role but you also want to add AD CS to the server. What must you do to add Active Directory Certificate Services (AD CS) to this server?
A. Reinstall the server with the full version of Windows Server 2008
B. Install the AD CS role
C. Install the RODC role
D. Install the AD FS role
Correct Answer: B
Explanation/Reference:
Explanation:
Server 2012 allows AD CS in core mode.
http://technet.microsoft.com/en-us/library/hh831373.aspx
What’s New in AD CS?
New and changed functionality
Several new capabilities are available in the Windows Server 2012 R2 version of AD CS. They include:
Integration with Server Manager
Deployment and management capabilities from Windows PowerShell? All AD CS role services run on any Windows Server 2012 R2 version All AD CS role services can be run on Server Core
Support for automatic renewal of certificates for non-domain joined computers Enforcement of certificate renewal with same key Support for international domain names
Increased security enabled by default on the CA role service AD DS Site Awareness for AD CS and PKI Clients
