Exam 70-412 topic 2 question 55 discussion

Actual exam question from Microsoft's 70-412

Question #: 55
Topic #: 2

Your network contains a server named Server1 that runs Windows Server 2012 R2. Server1 has the Active Directory Certificate Services server role installed and is configured as a standalone certification authority (CA).
You install a second server named Server2. You install the Online Responder role service on Server2.
You need to ensure that Server1 can issue an Online Certificate Status Protocol (OCSP) Response Signing certificate to Server2.
What should you run on Server1?

A. The certreq.exe command and specify the -policy parameter
B. The certutil.exe command and specify the -getkey parameter
C. The certutil.exe command and specify the -setreg parameter
D. The certreq.exe command and specify the -retrieve parameter

Show Suggested Answer

Suggested Answer: C 🗳️
To prepare a computer running Windows Server to issue OCSP Response Signing certificates
✑ On the server hosting the CA, open a command prompt, and type:
✑ certutil -v -setreg policy\EnableRequestExtensionList +1.3.6.1.5.5.7.48.1.5
✑ Stop and restart the CA. You can do this at a command prompt by running the following commands:
✑ net stop certsvc
net start certsvc
Reference: Configure a CA to Support OCSP Responders
https://technet.microsoft.com/en-us/library/cc732526.aspx

by [deleted] at April 4, 2025, 9 a.m.

Comments

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!