Home » Microsoft » 70-640 » What should you do to manage certificate settings on all machines in a domain from one main location?
vceguide.com has a domain controller that runs Windows Server 2008. The vceguide.com network boasts 40 Windows Vista client machines.
As an administrator at vceguide.com, you want to deploy Active Directory Certificate service (AD CS) to authorize the network users by issuing digital certificates.
What should you do to manage certificate settings on all machines in a domain from one main location?
A. Configure Enterprise CA certificate settings
B. Configure Enterprise trust certificate settings
C. Configure Advance CA certificate settings
D. Configure Group Policy certificate settings
E. All of the above
Correct Answer: D
Explanation/Reference:
Reference:
http://technet.microsoft.com/en-us/library/cc725911.aspx
AD CS: Policy Settings
In the Windows Server® 2008 operating system, certificate-related Group Policy settings enable administrators to manage certificate validation settings according to the security needs of the organization.
What are certificate settings in Group Policy?
Certificate settings in Group Policy enable administrators to manage the certificate settings on all the computers in the domain from a central location.
