You are the domain administrator of Fabrikam, Inc. You are evaluating your options for implementing a public key infrastructure (PKI). You have identified a number of essential needs that must be addressed by certificates you will issue. Workforce constraints make it essential that you use autoenrollment and certificate templates to reduce the labor associated with managing your certificates. It is also essential that the certificates integrate with Active Directory. What kind of certification authority (CA) and certificate will you deploy?
a.External Enterprise CA
b.Internal Root CA
c.Internal Enterprise CA
d.External Root CA
e.Internal Subordinate CA
____14.You are the domain administrator of Fabrikam, Inc., which plans to deploy an internal certification authority (CA) for companywide use. You have identified the number of certificates you intend to support throughout the company worldwide as 5 million or less. You intend to support this maximum number without any degradation in performance. To meet redundancy and risk-management requirements, you will deploy one backup certificate server for every production certificate server needed. You will support the stand-alone CA on the Microsoft Windows 2000 Server operating system. Considering the known scalability of this configuration and the stated ratio of backup hardware, how many physical servers will you deploy?
a.16
b.1
c.4
d.8
e.2
____15.You have been asked to evaluate the Fabrikam program of significantly increased security backed by the improved efficiencies inherent in the Microsoft Windows Server 2003 operating system. Network managers have significantly upgraded the Fabrikam Infrastructure to pave the way for this enhancement, upgrading the Active Directory structure to Windows Server 2003 domain-level functionality and upgrading or replacing outdated clients and servers to bring the entire network infrastructure up to a minimum level of Windows 2000 Service Pack 4. A redundant Windows 2000 Server?based CA has been installed, and the managers are about to activate their plan to issue certificates to all networked users and computers through autoenrollment. Can this infrastructure properly support the security plan? Why or why not?
a.No. Although computers running Windows 2000 can participate in autoenrollment for computer certificates deployed by means of the Automatic Certificate Request Settings Group Policy setting, autoenrollment of user certificates is not possible for clients running Windows 2000.
b.Yes. Computers running any version of Windows 2000 can participate in autoenrollment for computer certificates deployed by means of the Automatic Certificate Request Settings Group Policy setting, and autoenrollment of user certificates is possible for clients running Windows 2000 Service Pack 2 or later.
c.Yes. Computers running any version of Windows 2000 can participate in both autoenrollment for computer certificates deployed by means of the Automatic Certificate Request Settings Group Policy setting, and autoenrollment of user certificates.
d.No. Although computers running Windows 2000 can participate in autoenrollment for computer certificates deployed by means of the Automatic Certificate Request Settings Group Policy setting, and autoenrollment of user certificates, they must be supported by a CA running Windows Server 2003.
e.No. Although computers running Windows 2000 can participate in autoenrollment for computer certificates deployed by means of the Automatic Certificate Request Settings Group Policy setting, and autoenrollment of user certificates, they must be supported by full server infrastructure running Windows Server 2003.
____16.Which of the following is not an essential factor when establishing certificate and key lifetimes?
a.The security of the certification authorities (CAs) and their private keys
b.The length of private keys for certificates
c.The operating system supporting the CA
d.The strength of the technology used for cryptographic operations
e.The users of the certificates
____
|
HOME
· Paving driveway
· Resin bonding
· Paving companies in England, UK
· Driveway paving related articles and questions
|