Latest Microsoft 70-414 Practice Exam Question 10

Latest Microsoft 70-414 Practice Exam Question 10
Your network contains an Active Directory domain named contoso.com. The network contains a perimeter network. The perimeter network and the internal network are separated by a firewall. On the perimeter network, you deploy a server named Server1 that runs Windows Server 2012. You deploy Active Directory Certificate Services (AD CS). Each user is issued a smart card. Users report that when they work remotely, they are unable to renew their smart card certificate. You need to recommend a solution to ensure that the users can renew their smart card certificate from the Internet. What should you recommend implementing on Server1? More than one answer choice may achieve the goal. Select the BEST answer.

A. The Certification Authority Web Enrollment role service and the Online Responder role service
B. The Active Directory DS
C. The Certificate Enrollment Policy Web Service role service and the Certificate Enrollment Web Service role service
D. An additional certification authority (CA) and the Online Responder role service

Answer: C

Latest Microsoft 70-414 Practice Exam Question 9

Latest Microsoft 70-414 Practice Exam Question 9
Your network contains an Active Directory domain named contoso.com. The network has an Active Directory Certificate Services (AD CS) infrastructure. You deploy Active Directory Rights Management Services (AD RMS) on the network. You provide several users on the network with the ability to protect content by using AD RMS. You need to recommend a solution to provide the members of a group named Audit with the ability to read and modify all of the AD RMS-protected content.
What should you recommend?

A. Issue a CEP Encryption certificate to the members of the Audit group.
B. Issue a key recovery agent certificate to the members of the Audit group.
C. Add the Audit group as a member of the super users group.
D. Add the Audit group as a member of the Domain Admins group.

Answer: C

Latest Microsoft 70-414 Practice Exam Question 8

Latest Microsoft 70-414 Practice Exam Question 8
Your network contains an Active Directory domain named contoso.com. The network has an Active Directory Certificate Services (AD CS) infrastructure.
You need to issue a certificate to users to meet the following requirements:
1. Ensure that the users can encrypt files by using Encrypting File System (EFS).
2. Ensure that all of the users reenroll for their certificate every six months.
What should you do first?

A. From the properties of the User certificate template, assign the Allow - Enroll permission to the Authenticated Users group.
B. From the properties of the Basic EFS template, assign the Allow - Enroll permission to the Authenticated Users group.
C. Create a copy of the User certificate template, and then modify the extensions of the copy.
D. Create a copy of the Basic EFS certificate template, and then modify the validity period of the copy.

Answer: D

Latest Microsoft 70-414 Practice Exam Question 7

Latest Microsoft 70-414 Practice Exam Question 7
Your network contains an Active Directory domain named contoso.com. You deploy Active Directory Certificate Services (AD CS). You plan to deploy 100 external Web servers that will be publicly accessible and will require Secure Sockets Layer (SSL) certificates. You also plan to deploy 50,000 certificates for secure email exchanges with Internet-based recipients. You need to recommend a certificate services solution for the planned deployment. What should you recommend? More than one answer choice may achieve the goal. Select the BEST answer.

A. Deploy a certification authority (CA) that is subordinate to an external root CA.
B. Purchase 50,100 certificates from a trusted third-party root certification authority (CA).
C. Distribute a copy of the root certification authority (CA) certificate to external relying parties.
D. Instruct each user to request a Secure Email certificate from a trusted third-party root CA, and then purchase 100 Web server certificates.

Answer: A

Latest Microsoft 70-414 Practice Exam Question 6

Latest Microsoft 70-414 Practice Exam Question 6
Your network contains an Active Directory domain named contoso.com. The network contains 15,000 client computers. You plan to deploy an Active Directory Certificate Services (AD CS) infrastructure and issue certificates to all of the network devices. You need to recommend a solution to minimize the amount of network utilization caused by certificate revocation list (CRL) checking. What should you include in the recommendation? More than one answer choice may achieve the goal.
Select the BEST answer.

A. The Network Device Enrollment Service role service
B. An increase of the CRL validity period
C. A reduction of the CRL validity period
D. The Online Responder role service

Answer: D

Latest Microsoft 70-414 Practice Exam Question 5

Latest Microsoft 70-414 Practice Exam Question 5
Your network contains an Active Directory domain named contoso.com. You plan to implement Microsoft System Center 2012. You need to identify which solution automates the membership of security groups for contoso.com. The solution must use workflows that provide administrators with the ability to approve the addition of members to the security groups. Which System Center 2012 roles should you identify?

A. Service Manager and Virtual Machine Manager (VMM)
B. Configuration Manager and Orchestrator
C. Operations Manager and Orchestrator
D. Orchestrator and Service Manager

Answer: D

Latest Microsoft 70-414 Practice Exam Question 4

Latest Microsoft 70-414 Practice Exam Question 4
Your network contains an Active Directory domain named contoso.com. The network contains a server named Server1 that has the Hyper-V server role installed. Server1 hosts a virtual machine named VM1. You deploy a new standalone server named Server2. You install the Hyper-V server role on Server2. Another administrator named Admin1 plans to create a replica of VM1 on Server2. You need to ensure that Admin1 can configure Server2 to receive a replica of VM1. To which group should
you add Admin1?

A. Server Operators
B. Domain Admins
C. Hyper-V Administrators
D. Replicator

Answer: C