What should you do?

You have an Active Directory Rights Management Services (AD RMS) server named RMS1.
Multiple documents are protected by using RMS1.
RMS1 fails and cannot be recovered.
You install the AD RMS server role on a new server named RMS2.
You restore the AD RMS database from RMS1 to RMS2.
Users report that they fail to open the protected documents and to protect new documents.
You need to ensure that the users can access the protected content. What should you do?
A. From Active Directory Rights Management, update the Service Connection Point (SCP) for RMS1.
B. From DNS, create an alias (CNAME) record for RMS2.
C. From DNS, modify the service location (SRV) record for RMS1.
D. From RMS2, register a service principal name (SPN) in Active Directory.

microsoft-exams

6 thoughts on “What should you do?

  1. The question states “Users report that they fail to open the protected documents and to protect new documents”.
    This means the users can already see and get to RMS2. This would make the CNAME answer incorrect since they can access it already. D is correct

  2. Restore the database to the new SQL server.

    NOTE: If CNAME record was not used earlier for SQL server, then we need to create a CNAME record instead of pointing to the physical server and do the following additional steps:

    Create CNAME record. For more information, see Step 18 – Create CNAME Record Jump (http://technet.microsoft.com/en-us/library/ff660056(WS.10).aspx) in the AD RMS Database Relocation Step-by-Step Guide.

    Or

    https://dilshansaminda.wordpress.com/2014/01/03/how-to-migrate-adrms-database-to-another-server-with-cname-records/
    4.1. Using RMS Config Editor
    You have to put the CNAME of the ADRMS DB server for the new Database server

    B is the correct answer

  3. 136given answer is wrong.

    B. From DNS, create an alias (CNAME) record for RMS2 is the correct answer.

  4. D is correct

    Setspn.exe is a command line tool that enables you to read, modify, and delete the Service Principal Names (SPN) directory property. This tool also enables you to view the current SPNs, reset the account’s default SPNs, and add or delete supplemental SPNs.

Leave a Reply

Your email address will not be published. Required fields are marked *


The reCAPTCHA verification period has expired. Please reload the page.