Exam 70-742 topic 1 question 223 discussion

Actual exam question from Microsoft's 70-742

Question #: 223
Topic #: 1

Your network contains an enterprise root certification authority (CA) named CA1.
Multiple computers on the network successfully enroll for certificates that will expire in one year. The certificates are based on a template named
Secure_Computer. The template uses schema version 2.
You need to ensure that new certificates based on Secure_Computer are valid for three years.
What should you do?

A. Modify the Validity period for the certificate template.
B. Instruct users to request certificates by running the certreq.exe command.
C. Instruct users to request certificates by using the Certificates console.
D. Modify the Validity period for the root CA certificate.

Show Suggested Answer

Suggested Answer: A 🗳️

by zxvc2234 at Aug. 18, 2019, 3:59 p.m.

Comments

Submit Cancel

zxvc2234

Highly Voted 5 years, 10 months ago

This is good example why one needs to read the questions correctly - I actually created an account here to comment on this since I didn't think the A was correct answer until I re-read and it was saying about the new certificates.

upvoted 13 times

...

coleman

Highly Voted 5 years, 6 months ago

right , answer A is correct. https://technet.microsoft.com/en-us/library/cc725621(v=ws.10).aspx Validity period. This defines the validity period for an issued certificate. The validity period cannot be greater than the validity period of the CA's certificate. The minimum renewal period is 80 percent of the certificate lifetime or six weeks, whichever is greater.

upvoted 11 times

...

lofzee

Most Recent 4 years, 5 months ago

right on boi

upvoted 1 times

...

yesboet

4 years, 7 months ago

A is correct

upvoted 1 times

...

TMW

5 years, 9 months ago

Certificate templates console, right click, properties on the template you are working with, General Tab, configure the validity Period. this one appears to be straight forward.

upvoted 9 times

...