Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1.
Server1 is configured as shown in the following table.
You plan to create a pilot deployment of Microsoft Advanced Threat Analytics (ATA),
You need to install the ATA Center on Server1.
What should you do first?
A. Install Microsoft Security Compliance Manager (SCM).
B. Obtain an SSL certificate.
C. Assign an additional IPv4 address.
D. Remove Server1 from the domain,
Exam Ref 70-744 Securing Windows Server 2016 Timothy Warner Craig Zacker.
“The computer that functions as the ATA Center should have two IP addresses on the same subnet, and Internet Information Services (IIS) must be installed.
so, first you need assign an additional IPv4!!!
the answer should be B. Obtain an SSL certificate.
https://docs.microsoft.com/en-us/advanced-threat-analytics/ata-prerequisites
ATA Center which is the first component to be deployed on Server1, requires the use of SSL protocol to communicate with ATA Gateway To ease the installation of ATA, you can install self-signed certificates during installation.
Post deployment you should replace the self-signed with a certificate from an internal Certification Authority to be used by the ATA Center.
Make sure the ATA Center and ATA Gateways have access to your CRL distribution point.
If the they don’t have Internet access, follow the procedure to manually import a CRL, taking care to install the all the CRL distribution points for the whole chain.
Why B ?
We need an additional network adapter so why not C ?
yes, agree. ATA Gateway require 2 NIC adapters, ATA Center requuire 2 IP addresses in same subnet (so you need additional IP – B)
sorry, “C” 🙂
agree, answer is B.
Network adapters for ATA Center
You should have the following set:
At least one network adapter (if using physical server in VLAN environment, it is recommended to use two network adapters)
answer B
2 NIC must have ATA Gateway!
https://docs.microsoft.com/en-us/advanced-threat-analytics/ata-prerequisites
ATA Center:
Network adapters
You should have the following set:
At least one network adapter (if using physical server in VLAN environment, it is recommended to use two network adapters)
An IP address for communication between the ATA Center and the ATA Gateway that is encrypted using SSL on port 443. (The ATA service binds to all IP addresses that the ATA Center has on port 443.)
Agree with JZ. Correct answer is B.