Exam 70-742 topic 1 question 212 discussion

Actual exam question from Microsoft's 70-742

Question #: 212
Topic #: 1

Your network contains an Active Directory domain named contoso.com.
The domain contains an enterprise root certification authority (CA) on a server that runs Windows Server 2016.
You need to configure the CA to support Online Certificate Status Protocol (OCSP) responders.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

A. Add a new certificate template to issue.
B. Modify the Authority Information Access (AIA) of the CA.
C. Configure an enrollment agent.
D. Install a standalone subordinate CA.
E. Modify the CRL distribution point (CDP) of the CA.

Show Suggested Answer

Suggested Answer: AB 🗳️
Once the OCSP service is configured, we need to configure the OCSP Response Signing template. This process includes adding an Authority Information Access
(AIA) extension and then issuing a new certificate template.
References:
https://www.poweradmin.com/blog/deploying-active-directory-certificate-services-and-online-responder/

by gomatetu at April 4, 2025, 6:48 p.m.

Comments

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!