Exam 70-742 topic 1 question 206 discussion

Actual exam question from Microsoft's 70-742

Question #: 206
Topic #: 1

Your network contains an Active Directory forest named contoso.com. The forest contains an enterprise root certification authority (CA) on a server that runs
Windows Server 2016.
You plan to create and issue a custom subordinate CA template.
You need to prevent subordinate CAs from issuing subordinate certificates.
What should you configure in the template?

A. The Cryptography settings
B. The Request Handling settings
C. The Basic Constraints extension
D. The Security settings

Show Suggested Answer

Suggested Answer: C 🗳️

by StanSan at June 2, 2019, 12:44 p.m.

Comments

Submit Cancel

StanSan

Highly Voted 5 years, 6 months ago

Answer should be C. Link: https://blogs.technet.microsoft.com/pki/2014/03/05/constraints-what-they-are-and-how-theyre-used/

upvoted 7 times

...

lofzee

Most Recent 3 years, 10 months ago

setting basic constraints stop the subordinate from handing out subordinate certs

upvoted 1 times

...

yesboet

4 years ago

c is correct

upvoted 1 times

...

coleman

4 years, 11 months ago

answer C. The Basic Constraints extension is the correct answer.

upvoted 2 times

...

[Removed]

5 years, 5 months ago

Agree Answer is C

upvoted 4 times

...

Exam 70-742 All Questions

View all questions & answers for the 70-742 exam