Microsoft Discussions

Exam 70-742 All Questions

View all questions & answers for the 70-742 exam

Go to Exam

Exam 70-742 topic 1 question 206 discussion

Actual exam question from Microsoft's 70-742

Question #: 206
Topic #: 1

[All 70-742 Questions]

Your network contains an Active Directory forest named contoso.com. The forest contains an enterprise root certification authority (CA) on a server that runs
Windows Server 2016.
You plan to create and issue a custom subordinate CA template.
You need to prevent subordinate CAs from issuing subordinate certificates.
What should you configure in the template?

A. The Cryptography settings
B. The Request Handling settings
C. The Basic Constraints extension
D. The Security settings

Show Suggested Answer

Suggested Answer: C 🗳️

by StanSan at June 2, 2019, 12:44 p.m.

Comments

Submit Cancel

StanSan

Highly Voted 6 years ago

Answer should be C. Link: https://blogs.technet.microsoft.com/pki/2014/03/05/constraints-what-they-are-and-how-theyre-used/

upvoted 7 times

...

lofzee

Most Recent 4 years, 5 months ago

setting basic constraints stop the subordinate from handing out subordinate certs

upvoted 1 times

...

yesboet

4 years, 7 months ago

c is correct

upvoted 1 times

...

coleman

5 years, 6 months ago

answer C. The Basic Constraints extension is the correct answer.

upvoted 2 times

...

[Removed]

6 years ago

Agree Answer is C

upvoted 4 times

...