Exam 70-411 topic 1 question 75 discussion

HOTSPOT -
You have a server named Server1 that has the Web Server (IIS) server role installed.
You obtain a Web Server certificate.
You need to configure a website on Server1 to use Secure Sockets Layer (SSL).
To which store should you import the certificate? To answer, select the appropriate store in the answer area.
Hot Area:

Suggested Answer:
When you enable secure communications (SSL and TLS) on an Internet Information Services (IIS) computer, you must first obtain a server certificate.
If it is a Self-Signed certificate, it only can be used on the local server machine.
If it is a public certificate, you'll need to download the CA root certificate of the certificate and install the CA root certificate into the Trusted Root Certificate
Authorities store.
Root certificates provide a level of trust that certificates that are lower in the hierarchy can inherit. Each certificate is inspected for a parent certificate until the search reaches the root certificate.
For more information about certificate, please refer to:
References:
http://technet.microsoft.com/en-us/library/cc740068(v=ws.10).aspx http://technet.microsoft.com/en-us/library/cc700805.aspx http://support.microsoft.com/kb/232137/en-us http://www.sqlservermart.com/HowTo/Windows_Import_Certificate.aspx http://msdn.microsoft.com/en-us/library/windows/hardware/ff553506(v=vs.85).aspx http://www.iis.net/learn/manage/configuring-security/how-to-set-up-ssl-on-iis http://support.microsoft.com/kb/299875/en-us http://technet.microsoft.com/en-us/library/dd163531.aspx http://blogs.msdn.com/b/mosharaf/archive/2006/10/30/using-test-certificate-with-reporting-services-2005-to-establish-ssl-connection.aspx