Exam 70-742 topic 1 question 215 discussion

Actual exam question from Microsoft's 70-742

Question #: 215
Topic #: 1

Your network contains an Active Directory domain named contoso.com. The domain contains a certification authority (CA).
The CA certificate was valid for five years and is about to expire.
You need to ensure that when you renew the CA certificate, the maximum Validity period for the certificate is 10 years.
What should you do before you renew the certificate?

A. From Microsoft XML Notepad, create a file named CAPolicy.xml. Store CAPolicy.xml in the C:\Window\System32\ADCS folder.
B. From Windows System Image Manager, create a file named Unattend.xml. Store Unattend.xml in the C:\Windows\System32\Config folder.
C. From Windows Imaging and Configuration Designer, create a file named Unattend.ini. Store Unattend.ini in the C:\Windows\Panther folder.
D. From Microsoft Notepad, create a file named CAPolicy.inf. Store CAPolicy.inf in the C:\Windows folder.

Show Suggested Answer

Suggested Answer: D 🗳️
References:
https://www.sysadmins.lv/blog-en/how-to-change-ca-certificate-validity-period.aspx

by ITGEEK at Feb. 22, 2020, 2:21 p.m.

Comments

Submit Cancel

ITGEEK

Highly Voted 5 years, 3 months ago

Answer is Correct https://docs.microsoft.com/en-us/windows-server/networking/core-network-guide/cncg/server-certs/prepare-the-capolicy-inf-file

upvoted 8 times

lbs

4 years, 11 months ago

Good reference doc

upvoted 2 times

...