| Question 1 | Your network consists of a single WINS server. To reduce network traffic, you want clients to resolve NetBIOS names using the WINS server. Broadcasts should be used only if the WINS server is unavailable. Which of the following node types should you use to configure clients? -
A. P-node -
B. B-node -
C. H-node -
D. M-node |
| Question 2 | For increased security, you want to use the callback function. You configure the user account properties and define the numbers from which users can dial in to the remote access server. For callback to work, which of the following options, shown in this figure should you select?  |
| Question 3 | Which of the following DNS server types support dynamic updates? [Choose all that apply.] -
A. Windows 2000 -
B. Windows NT 4.0 -
C. BIND 4.9.6 -
D. BIND 8.1.3 |
| Question 4 | Massa trucking has opened a new branch office. You have been asked to configure a two-way demand-dial connection between the head office and the branch office. You configure the following: -
Branch Office -
Interface: HeadOffice -
User Account: Branch_Office -
Calling Number: 18315551212 -
Head Office -
Interface: BranchOffice -
User Account: Head_Office -
Calling Number: 14084441212 When you test your configuration, neither of the routers can establish a connection. What is causing the problem? -
A. The demand-dial interface names must be identical. -
B. The user account names on each router must be identical. -
C. The interface name on the calling router must be identical to the user account name on the answering router. -
D. Each router must have completely different user account and demand-dial interface names. |
| Question 5 | Your company is planning on upgrading from Windows NT 4.0 to Windows 2000. Your boss wants to use static IP addresses when the workstations are upgraded to Windows 2000 Professional to avoid the havoc wreaked when a temporary administrator brought a DHCP server online with incorrect scope information. You assure your boss that new features included with Windows 2000 DHCP will prevent this from occurring in the future. On which systems should DHCP be installed when the workstations and server are upgraded to Windows 2000? [Choose all that apply.] -
A. Windows 2000 Domain Controllers -
B. Windows 2000 Professional Workstations -
C. Windows 2000 Member Servers -
D. Windows 2000 Standalone Servers |
| Question 6 | Your company wants to install a Web server to be used for customer transactions. For security purposes, the Web server will not be a member of the domain. All transactions should be encrypted. Internet customers need to be assured of the Web server's identity. What type of CA should you configure? |
| Question 7 | Windows 2000 includes NAT editors for which of the following protocols? [Choose all that apply.] -
A. FTP -
B. L2TP -
C. PPTP -
D. ICMP -
E. IGMP -
F. NetBIOS over TCP/IP -
G. IPSec |
| Question 8 | TCP/IP filtering can be used to permit or deny traffic based on which of the following criteria? [Choose all that apply.] -
A. IP protocol -
B. IP address -
C. UDP port -
D. TCP port |
| Question 9 | Your organization hopes to provide remote access capabilities to clients within the next few months. Your senior network administrator has asked you to configure one of the Windows 2000 servers in the test lab as a remote access server to test the proposed configuration. What is the first step you need to complete? -
A. Install the Routing and Remote Access Service -
B. Enable Routing and Remote Access -
C. Configure a remote access policy -
D. Configure a remote access profile |
| Question 10 | You have been hired to perform an assessment of the Bayside network. The network consists of approximately 25 users and a single server running the DHCP server service. While performing your assessment, you notice the number of IP address lease requests is very high, especially because the number of IP addresses exceeds the number of clients. Where should you begin looking to determine why this is occurring? -
A. Check the Event Viewer for any DHCP related messages. -
B. Verify that the lease duration isn't configured with a low value. -
C. Run System Monitor to view the performance of the server. -
D. Run Network Monitor to capture DHCP related traffic. |
| Question 11 | You are configuring an LMHOSTS file that you plan to import to the client workstations on the network. You want certain records within the LMHOSTS file to be placed in the local cache to facilitate name resolution. When creating LMHOSTS file entries, which of the following directives should you use to have the records added to the local cache? -
A. #Pre -
B. #Load -
C. #MH -
D. #Include |
| Question 12 | Bayside has seven offices located in different parts of the U.S. There is one central office that hosts the primary DNS server. All office locations have their own DNS servers configured as secondary servers. The offices are currently connected with slow links with no plans to upgrade them. The annual budget allows for the addition of a second DNS server at each of the locations. However, you do not want any more traffic generated from zone transfers on the WAN or the local networks. What type of DNS servers should you configure? |
| Question 13 | The IP address of 131.107.2.10 belongs to which of the following address classes? -
A. Class A -
B. Class B -
C. Class C -
D. Class D |
| Question 14 | You have been asked to configure Certificate Services for your organization. The organization currently consists of a single Windows 2000 domain. Certificate Services must integrate with Active Directory. Which of the following should you implement? |
| Question 15 | You are establishing a nonpersistent demand-dial connection between a branch office and the corporate head office. You plan to use a routing protocol so the routing table does not need to be manually updated. Which of the following protocols can you use? [Choose all that apply.] -
A. RIPv1 -
B. RIPv2 -
C. OSPF -
D. ICMP |
| Question 16 | Your home network consists of a Windows 2000 standalone server ( Server1 ) and five Windows 2000 Professional workstations. Server1 currently has the only Internet connection. You want to enable ICS on Server1 . How should you proceed? -
A. Within the Network and Dial-up Connections applet, right-click the Internet connection and choose Properties. Click the Networking tab and select the option to Enable Internet Connection Sharing for this connection. -
B. Within the Routing and Remote Access console, right-click the demand-dial interface and choose Properties. Click the Sharing tab and select the option to Enable Internet Connection Sharing for this connection. -
C. Within the Network and Dial-up Connections applet, right-click the Internet connection and choose Properties. Click the Sharing tab and select the option to Enable Internet Connection Sharing for this connection. -
D. Within the Routing and Remote Access console, right-click the LAN interface and choose Properties. Click the Sharing tab and select the option to Enable Internet Connection Sharing for this connection. |
| Question 17 | You want to back up the database on the local WINS server. However, you do not want to start the backups manually. Instead, you'd rather have them run automatically every few hours. How should you proceed? -
A. From the WINS server's properties window, select the Advanced tab and specify the backup path . -
B. Within the WINS management console, configure replication to occur every three hours. -
C. From the WINS server's properties window, select the General tab and specify the backup path. -
D. From the WINS server's properties window, select the Interval tab and configure the backup to run every few hours. |
| Question 18 | Sean is trying to resolve the IP address of Wrk01 using the nslookup command from Wrk02 , but is unsuccessful . He can successfully resolve other hostnames on the network using this command. What could be causing the problem? -
A. There is no A record for Wrk01 . -
B. There is no A record for Wrk02 . -
C. There is no PTR record for Wrk01 . -
D. There is no PTR record for Wrk02 . |
| Question 19 | Your network consists of two subnets: SubnetA and SubnetB. Each has its own DHCP server. You configure the scope on DHCP1 for SubnetA. Users are all leasing an IP address but report that they cannot access any resources outside of their own subnet. How can you most easily solve the problem? -
A. Activate the scope on DHCP1. -
B. Configure the default gateway on each workstation. -
C. Configure the 003 router option on DHCP1. -
D. Configure the 006 DNS server option on DHCP1. |
| Question 20 | You need to install a standalone CA that will be subordinate to a commercial CA. Your server is running Windows 2000. How can you install Certificate Services? [Choose all that apply.] -
A. Using the Network and Dial-up Connections applet -
B. During the installation of Windows 2000 -
C. Using the Add/Remove Programs applet -
D. Using the Certificate Services applet |
| Question 21 | Which of the following components is responsible for negotiating security between IPSec-enabled hosts? |
| Question 22 | You are configuring NAT for the first time on your Windows 2000 Server. Routing and Remote Access has not been configured. You use the wizard to enable RRAS and configure NAT. When the wizard presents you with the list of common configurations, which one should you select when configuring NAT? -
A. Internet connection server -
B. Remote access server -
C. Network router -
D. Network address translator -
E. Virtual private network (VPN) server |
| Question 23 | Several users in the programming department work from home offices. Remote access is configured for this group of users. Multilink is enabled to provide them with more bandwidth. Which of the following protocols allows lines to be dynamically added or dropped? -
A. LCP -
B. PPP -
C. BAP -
D. EAP |
| Question 24 | You are working as part of a team that has been asked to implement routing within a large internetwork. Before beginning the planning phase, the organization's administrators present you with a list of some critical requirements: -
Administration of routing tables should be minimal. -
Changes to the network topology should be propagated dynamically. -
Security should be configured between routers. -
To reduce the size of the routing tables, routers should be organized into areas. You propose the following: Which of the following are met by the proposed solution? [Choose all that apply.] -
A. Administration of routing tables is minimal. -
B. Changes to the network topology are propagated dynamically. -
C. Security can be implemented between routers. -
D. Routers can be organized into areas. |
| Question 25 | Network requirements call for secure dynamic updates. Currently, the network has a Windows 2000 DNS server, Windows 2000 Professional clients, and Windows 95 clients. A single DHCP server will be configured to perform all resource record updates for all clients and a second will be added in the near future. Both will be configured to perform dynamic updates for clients. On which system will you install the DHCP server service? -
A. Windows 2000 domain controller -
B. Windows 2000 member server -
C. Windows 2000 Professional workstation -
D. Windows NT 4.0 member server |
| Question 26 | Based on your recommendation, a WINS server was implemented on the local network. One of the managers comes to your office and requests to see some statistics on the total number of name resolutions that the WINS server is performing. How can you provide the manager with this information? -
A. Within the WINS management console, right-click the WINS server and select View Server Statistics. -
B. Enable event logging. -
C. From the Properties window for the WINS server, select the Advanced tab and configure the WINS server to update statistics every five minutes. -
D. From the Properties window for the WINS server, select the General tab and configure the WINS server to update statistics every five minutes. |
| Question 27 | You are configuring DNS servers on your network. Four of them will be added to the existing network. You want to provide the highest level of fault tolerance and plan to configure the zones as Active Directory integrated. With this in mind, on which of the following can the DNS Server service be installed? -
A. Windows 2000 domain controllers -
B. Windows 2000 member servers -
C. Windows NT 4.0 domain controllers -
D. Windows 2000 standalone servers |
| Question 28 | Which layer of the TCP/IP DoD model is responsible for addressing and routing? -
A. Application -
B. Transport -
C. Network -
D. Internet |
| Question 29 | You are receiving reports that several users are unable to use Web-based certificate enrollment. After some investigation, you determine that the problem is only affecting users running browsers other than Internet Explorer. How can you resolve the problem? -
A. Upgrade all browsers to Internet Explorer. -
B. Nothing. Web-based enrollment can only be used with Internet Explorer. -
C. Change the authentication type to Basic on the CertSrv virtual directory. -
D. Install the Certificate Services client on the workstations. |
| Question 30 | You are configuring the elements of a remote access policy. In what order are the policy elements evaluated? -
A. Permissions, conditions, profile -
B. Profile, conditions, permissions -
C. Conditions, profile, permissions -
D. Conditions, permissions, profile |
| Question 31 | You are working as part of a team that has been asked to implement routing within a large internetwork. Before beginning the planning phase, the organization's administrators present you with a list of some critical requirements: -
Administration of routing tables should be minimal. -
Changes to the network topology should be propagated automatically. -
Password authentication should exist between routers. -
To reduce the size of the routing tables, routers should be organized into areas. You propose the following: Which of the following are met by the proposed solution? [Choose all that apply.] -
A. Administration of routing tables is minimal. -
B. Changes to the network topology are propagated immediately. -
C. Password authentication exists between routers. -
D. Routers can be organized into areas. |
| Question 32 | A DHCP server is used to assign IP addresses to clients and member servers on the network. Three of the member servers host print devices. How can you ensure that these print servers lease the same IP address from the DHCP server? [Choose all that apply.] -
A. Exclude the IP addresses from the scope. -
B. Create a separate scope for each of the print servers. -
C. Create a client reservation for each print server. -
D. Configure the DHCP options for the scope. |
| Question 33 | Due to budget constraints, you can only implement a single WINS server on a network that consists of two subnets. You place the WINS server on the subnet with the most users. A computer on the other subnet will be configured as a WINS proxy. How should you proceed? -
A. Install the WINS proxy component using the Add/Remove programs applet. -
B. Install the WINS service and select the WINS proxy component during the installation. -
C. Edit the HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netbt\Paramters Registry key on the local computer and change the value of the EnableProxy parameter to 1 . -
D. Edit the local computer Registry and change the value of the WINSProxy parameter to 1 . |
| Question 34 | John has been informed by his senior network administrator that he needs to be able to control which users and groups can perform dynamic updates to the DNS database. How should John proceed? -
A. Convert all zones to Active Directory integrated. Using the Dynamic Update tab from the properties window for the DNS server, select Only secure updates. -
B. Convert all zones to Active Directory integrated. Using the General tab from the properties window for the DNS server, select Only secure updates. -
C. Convert all zones to Active Directory integrated. Using the Dynamic Update tab from the properties window for the zone, select Only secure updates. -
D. Convert all zones to Active Directory integrated. Using the General tab from the properties window for the zone, select Only secure updates. |
| Question 35 | Which of the following statements are true regarding enterprise CAs? -
A. Enterprise CAs do not require Active Directory. -
B. Enterprise CAs require WINS. -
C. An enterprise CA should be installed to issue certificates to users outside the domain. -
D. Enterprise CAs require DNS. |
| Question 36 | You have been put in charge of securing a Web server. Your senior administrator has asked you to configure TCP/IP filtering to permit only FTP and HTTP access on all adapters. How should you proceed? -
A. From the TCP/IP Properties window for the adapter, select Enable TCP/IP Filtering. Configure traffic to be permitted for TCP ports 80 and 81 . -
B. From the TCP/IP Properties window for the adapter, select Enable TCP/IP Filtering. Configure traffic to be permitted for TCP ports 21 and 80 . -
C. From the TCP/IP Properties window for the adapter, select Enable TCP/IP Filtering. Configure traffic to be permitted for UDP ports 80 and 81 . -
D. From the TCP/IP Properties window for the adapter, select Enable TCP/IP Filtering. Configure traffic to be permitted for UDP ports 21 and 80 . |
| Question 37 | The NAT protocol is installed and the public and private interfaces have been added. From the properties window for the public connection, you enable DNS name resolution. What else must you do to ensure that internal clients can resolve DNS names? -
A. Install a DNS server on the internal network. -
B. Configure the internal clients with the IP address of the ISP's DNS servers. -
C. Configure the private interface with the IP address of the ISP's DNS servers. -
D. Configure the DHCP Allocator to assign internal clients the IP address of the ISP's DNS server. |
| Question 38 | You are working as part of a team that has been asked to implement routing within a large internetwork. Five of the remote offices are being configured with demand-dial connections to the head office. Before beginning the planning phase, the organization's administrators present you with a list of some critical requirements: -
Administration of routing tables should be minimal. -
Changes to the network topology should be propagated immediately. -
The link should be used only when required to reduce costs. -
To reduce the size of the routing tables, routers should be organized into areas. You propose the following: Which of the following are met by the proposed solution? [Choose all that apply.] -
A. Administration of routing tables is minimal. -
B. Changes to the network topology are propagated immediately. -
C. The link is used only when required to reduce costs. -
D. Routers can be organized into areas. -
E. None of the requirements is met. |
| Question 39 | Due to security needs and the different needs of dial-in clients, three remote access policies have been configured. When a remote access client attempts to connect to a remote access server, which of the following statements is true regarding policy evaluation? -
A. All policies in the list are evaluated. -
B. The first policy to match the conditions of the connection attempt is evaluated. -
C. Only the first policy in the list is evaluated. -
D. The first policy that allows the user remote access is evaluated. |
| Question 40 | Your primary DNS server is located in the corporate head office. The five branch offices are all configured with secondary DNS servers. The WAN links between offices are extremely slow. You want to increase the interval at which secondary servers poll the primary server for updates to the zone file. Which of the following settings should be changed? -
A. Retry Interval -
B. Polling Interval -
C. Refresh Interval -
D. Time to Live |
| Question 41 | Your WIN2K server has a dial-up connection to the Internet with ICS enabled. Another administrator recently made some configuration changes to the server. Users now report that there are times when they cannot access Internet resources. What could be causing the problem? -
A. ICS has been disabled. -
B. The range of IP addresses assigned by the DHCP Allocator has been changed. -
C. Demand dialing has been disabled. -
D. Name resolution has been disabled on the server. |
| Question 42 | RRAS has been configured on Win2k01 . Win2k01 is configured to obtain IP addresses from the DHCP server. The default policy has been configured to allow access, and account properties are configured to control access through the remote access policy. When testing the configuration, you can successfully connect but are unable to access file shares on the internal network by computername . How can you resolve this problem? -
A. Configure the DHCP server to assign the IP address of the internal WINS server. -
B. Configure Win2k01 as a WINS proxy agent. -
C. Manually configure the IP settings on the client. -
D. Configure Win2k01 as a DHCP relay agent. |
| Question 43 | You create a static mapping for one of the workstations on the network. The workstation obtains its IP address from a DHCP server. Yesterday, clients were able to resolve the NetBIOS name to an IP address. Today, clients report that they are unsuccessful. What must you do? -
A. The static mapping must be configured for dynamic updates. -
B. Create a client reservation on the DHCP server for the client. -
C. Create a client reservation on the WINS server for the client. -
D. Delete and re-create the static mapping. |
| Question 44 | You have configured NAT on a Windows 2000 Server. The external interface has been assigned the IP address of 200.205.10.55 . The internal network uses the IP address range of 192.168.0.1 “ 192.168.0.254 . There is a Web server on the internal network that you want Internet users to access. It is configured with the IP address of 192.168.0.24 . How should you proceed? -
A. From the properties for the public interface, create a special port mapping port 80 on 200.205.10.55 to port 80 on 192.168.0.24 . -
B. From the properties for the private interface, create a special port mapping port 80 on 200.205.10.55 to port 80 on 192.168.0.24 . -
C. From the properties for the public interface, create a special port mapping port 21 on 200.205.10.55 to port 21 on 192.168.0.24 . -
D. From the properties for the public interface, create a special port mapping port 8080 on 200.205.10.55 to port 8080 on 192.168.0.24 . |
| Question 45 | You have recently deployed a DHCP server to centralize the administration of all IP addresses on the network. Prior to this, they were all statically configured. All users are successfully leasing IP addresses but now report that they can no longer print to the network interface printers. Upon examining the printers' properties, you notice they have been assigned incorrect IP addresses. What should you have done? -
A. Defined separate scopes for each of the print devices. -
B. Created client reservations for the print devices. -
C. Excluded the IP addresses of the print devices from the scope. -
D. Created client exclusions for the print devices. |
| Question 46 | A long- term employee is leaving the company. You revoke the user's certificate within the Certificate Authority snap-in. When you check the certificate revocation list, the revoked certificate does not appear. What is the problem? -
A. The revoked certificate must be manually copied to the CRL. -
B. You must choose the Add to CRL option when revoking the certificate. -
C. The publishing interval has not expired . -
D. Once the certificate is revoked, the CRL must be manually updated. |
| Question 47 | One of the servers on your network is being reconfigured to optimize performance. Over time, several protocols and services have been installed on the server, some of which are no longer necessary or are used infrequently. When configuring the binding order, which of the following should you do? -
A. Bind all protocols to all services for fault tolerance. -
B. Place the most commonly used protocols first in the binding order. -
C. Place the protocols used least often first in the binding order. -
D. Bind all protocols to all network adapters. |
| Question 48 | You have recently made changes to the topology of your internetwork. You now have to change the routes configured in the routing tables. Which of the following will delete an existing route and add a new persistent route? -
A. route delete 192.168.126.0 route -p 192.168.126.0 mask 255.255.255.0 192.168.125.1 metric 2 -
B. route delete 192.168.126.0 route add 192.168.126.0 mask 255.255.255.0 192.168.125.1 metric 2 -
C. route delete 192.168.126.0 Route -p add 192.168.126.0 mask 255.255.255.0 192.168.125.1 metric 2 -
D. route delete 192.168.126.0 route add 192.168.126.0 mask 255.255.255.0 gateway 192.168.125.1 metric 2 |
| Question 49 | Your primary DNS server is located in the corporate head office. The five branch offices are all configured with secondary DNS servers. The WAN links between offices are extremely slow with no plans to upgrade them. You are now adding a second DNS server to each office to increase fault tolerance should the secondary server within the office or the primary server become unavailable. However, you do not want any more traffic generated across the WAN links from zone transfers. How should you configure the new DNS servers? -
A. Configure them as secondary servers. Configure the existing secondary servers as the master name servers. -
B. Configure them as caching-only servers. Configure the existing secondary servers as the master name servers. -
C. Configure them as secondary servers. Configure the primary name server as the master name server. -
D. Configure them as caching-only servers. Configure the primary server as the master name server. |
| Question 50 | Clients on the network are configured to use H-node for NetBIOS name resolution. In what order will they resolve NetBIOS names? -
A. NetBIOS name cache, broadcast, WINS, LMHOSTS, HOSTS, DNS -
B. NetBIOS name cache, HOSTS, DNS, LMHOSTS, WINS, broadcast -
C. NetBIOS name cache, WINS, LMHOSTS, broadcast, Hosts, DNS -
D. NetBIOS name cache, WINS, broadcast, LMHOSTS, HOSTS, DNS |
| Question 51 | ICS is enabled on a computer in your home office. You want to be able to play Internet games from one of the other three home office computers. What must you do? -
A. Nothing. Once ICS is enabled, all traffic will pass through the shared connection. -
B. Install the game on the computer running ICS. -
C. Add the TCP or UDP port numbers to the ICS computer that the application uses. -
D. Nothing. ICS does not support Internet games over the shared connection. |
| Question 52 | Which of the following are required to install an enterprise root certificate authority? [Choose all that apply.] |
| Question 53 | Seaside is deploying a DHCP server that will assign IP addresses to clients on four logical subnets. The IP address ranges are as follows : 192.168.0.1 “ 192.168.0.254 192.168.1.1 “ 192.168.1.254 192.168.2.1 “ 192.168.2.254 192.168.3.1 “ 192.168.3.254 When configuring the DHCP server, what should you do first? -
A. Create a separate superscope for each range of IP addresses. -
B. Create a single superscope, including all four IP address ranges. -
C. Create a single scope, including all four IP address ranges. -
D. Create a separate scope for each IP address range. |
| Question 54 | If a remote user's connection attempt does not meet the conditions of the first remote access policy, what occurs next? -
A. The connection attempt is denied . -
B. The properties of the user's account are evaluated. -
C. The next policy in the list is evaluated. -
D. The profile settings are evaluated. |
| Question 55 | Some of the existing routers on the network are being upgraded to Windows 2000 RRAS servers. You really want to take advantage of security features included with RIPv2 so the interfaces on the new servers are configured to use this routing protocol. You notice that the existing servers using RIPv1 are not communicating with the new network routers. What is the source of the problem? -
A. The RIPv1 routers are configured to use broadcasts. -
B. The RIPv2 routers are configured to use multicasting. -
C. The RIPv1 routers are configured to use multicasting. -
D. The RIPv2 routers are configured to use broadcasts. |
| Question 56 | You are receiving a number of calls from users that they are receiving error messages when they try to connect to a secure Web page on your company's Web server. They have no problem connecting to the server with FTP. What should you do? -
A. Verify that TCP port 443 is permitted. -
B. Verify that TCP port 80 is permitted. -
C. Verify that UDP port 443 in permitted. -
D. Verify that UDP port 80 is permitted |
| Question 57 | There is currently a single DNS server on the network that is heavily used by clients for name resolution. To improve response time for users, you decide to add a secondary server to the network. How can you ensure that requests are load-balanced between the two servers? -
A. You do not need to do anything. Name resolution requests are automatically distributed among servers. -
B. Select the Load Balance Requests option on the General tab of the DNS server's properties window. -
C. Configure the order of use so half of the clients use the secondary server first and the remaining use the primary server first when resolving hostnames. -
D. Select the Load Balance Requests option on the General tab of the zone's properties window. |
| Question 58 | What is the default location of the WINS database? -
A. %systemroot%\System32\WINS -
B. %systemroot%\WINS\Drivers\Etc -
C. %systemroot%\Wins\Database\Etc -
D. %systemroot%\System32\WINS\Etc |
| Question 59 | NAT has been configured on a Windows 2000 Server. You do not want the DHCP Allocator to assign IP addresses because there is already an existing DHCP server on the network. How should you proceed? -
A. Within the Registry on the NAT server, disable the DHCP Allocator. -
B. Using the Address Assignment tab, select the option to automatically assign IP addresses by using DHCP. -
C. Using the Address Assignment tab, deselect the option to automatically assign IP addresses by using DHCP. -
D. Configure internal clients to use the existing DHCP server. |
| Question 60 | Your organization has recently acquired a new company that is being integrated into the existing infrastructure. A new child domain is added to the forest. The existing infrastructure has an enterprise root CA and two subordinate CAs. The subordinate CAs are unable to publish certificates within the new child domain. How can you resolve this problem? -
A. Add the subordinate CAs to the Cert Update group within the new domain. -
B. Add the subordinate CAs to the Cert Publishers group within the new domain. -
C. Add the subordinate CAs to the Cert Users group within the new domain. -
D. Create accounts for the new users in the domain where the subordinate CAs reside. |
