MCTS 70-640 Technology & Digital Applications 2

Question 1

An administrator is deploying an Enterprise CA using AD Certificate Services. What is a prerequisite for installing an Enterprise CA?

Accepted Answer

Active Directory Domain Services must be installed and accessible

Answer

An Enterprise CA requires access to AD DS to publish certificates and CRLs to the directory.

Question 2

Which AD CS role service allows users to request certificates through a web browser without requiring the CA to be directly accessible?

Accepted Answer

Certification Authority Web Enrollment

Answer

Certification Authority Web Enrollment provides a web interface (certsrv) so clients can request and retrieve certificates via HTTP.

Question 3

What is the primary purpose of a Certificate Revocation List (CRL) in a PKI deployment?

Accepted Answer

To publish certificates that are no longer trusted before their expiry

Answer

A CRL is a signed list of certificate serial numbers that have been revoked and should no longer be trusted.

Question 4

A company needs devices like routers to automatically obtain certificates without human interaction. Which AD CS role service supports this via SCEP?

Accepted Answer

Network Device Enrollment Service (NDES)

Answer

NDES implements the Simple Certificate Enrollment Protocol (SCEP), enabling network devices to enroll for certificates automatically.

Question 5

Which certificate template version (v1, v2, v3) is required to support key archival and recovery in Windows Server 2008 AD CS?

Accepted Answer

Version 2 or higher

Answer

Version 2 (Windows Server 2003) and Version 3 (Windows Server 2008) templates support key archival; Version 1 templates are read-only and do not.

MCTS 70-640 Exam Practice Test