ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam 70-742 All Questions

View all questions & answers for the 70-742 exam
Go to Exam

Exam 70-742 topic 1 question 142 discussion

Actual exam question from Microsoft's 70-742
Question #: 142
Topic #: 1
[All 70-742 Questions]

Your company has a marketing department and a security department. The network contains an Active Directory domain named contoso.com. The domain contains an enterprise certification authority (CA).
You have two organizational units (OUs) named MKT_UsersOU and MKT_ComputersOU. MKT_UsersOU contains the user accounts for the users in the marketing department. MKT_ComputersOU contains the computer accounts for the computers in the marketing department.
A Group policy object (GPO) named GPO1 is linked to MKT_UsersOU.
A GPO named GPO2 linked to MKT_ComputersOU.
You plan to deploy a web application for the marketing department users.
The application will require certificates for authentication.
The security department configures the CA to support the planned deployment.
You need to ensure that the web application can authenticate the marketing department users.
What should you do?

  • A. From the User Configuration node of GPO1, create an Internet Setting preference.
  • B. From the User Configuration node of GPO1, configure the Certificate Services Client - Auto-enrollment settings.
  • C. From the Computer Configuration node of GPO2, configure the Certificate Services Client - Certificate Enrollment Policy settings.
  • D. From the Computer Configuration node of GPO2, create the Automatic Certificate Request Settings.
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
by Hayemaker at Jan. 30, 2019, 10:21 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Hayemaker
Highly Voted 5 years, 10 months ago
Guys, what is this? Create an Internet Setting preference? Answer should be B.
upvoted 12 times
...
coleman
Highly Voted 5 years ago
B is correct. You have to ensure that all users in MKT_UsersOU to automatically enroll user certificates to achieve the questions requirement, therefore you should implement User Certificate Autoenrollment in GPO1. https://technet.microsoft.com/en-us/library/cc771882.aspx To configure user certificate autoenrollment 1. On the computer where AD DS is installed, click Start, click Run, type mmc, and then click OK. 2. On the File menu, click Add/Remove Snap-in, and then click Add. The Add or Remove Snap-ins dialog box opens. 3. In Available snap-ins, scroll down to and double-click Group Policy Management Editor, and then click OK. The Group Policy Wizard opens. 4. In Select Group Policy Object, click Browse. The Browse for a Group Policy Object dialog box opens.
upvoted 7 times
coleman
5 years ago
5. In Domains, OUs, and linked Group Policy Objects, click Default Domain Policy, and then click OK. 6. Click Finish, and then click OK. 7. Double-click Default Domain Policy. In the console, expand the following path: User Configuration, Policies, Windows Settings, Security Settings, Public Key Policies. 8. Double-click Certificate Services Client - Auto-Enrollment. The Certificate Services Client - Auto-Enrollment Properties dialog box opens. Configure the following items, and then click OK: 9. In Configuration Model, select Enabled. Select the Renew expired certificates, update pending certificates, and remove revoked certificates check box. Select the Update certificates that use certificate templates check box.
upvoted 8 times
...
...
yesboet
Most Recent 4 years ago
B. From the User Configuration node of GPO1, configure the Certificate Services Client - Auto-enrollment settings.
upvoted 1 times
...
Kamikazekiller
4 years, 4 months ago
B. From the User Configuration node of GPO1, configure the Certificate Services Client - Auto-enrollment settings.
upvoted 1 times
...
Nhan
4 years, 9 months ago
You need to ensure that the web application can authenticate the marketing department users => C and D are out of the picture there is only A & B left. good luck :)
upvoted 1 times
...
Spud1993
5 years, 2 months ago
see step 4 of this article as to why it it B: https://docs.druva.com/Knowledge_Base/inSync/How_To/How_to_set_up_automatic_certificate_enrollment_in_Active_Directory
upvoted 4 times
...
renatovieira
5 years, 2 months ago
This should be B!
upvoted 2 times
...
[Removed]
5 years, 5 months ago
Agree, Correct answer is B
upvoted 6 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago