Your network contains an Active Directory domain named contoso.com. The domain contains servers that run Windows Server 2016.
The servers are configured as shown in the following table.
You have a research department. The computers in the research department are not domain-joined.
You need to ensure that the research department computers can use automatic certificate enrollment to receive and renew certificates from the CA.
Which two role services should you install and configure on CAP? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. Online Responder
B. Network Device Enrollment Service
C. Certificate Enrollment Web Service
D. Certificate Authority Web Enrollment
E. Certificate Enrollment Policy Web Service
Answer: D,E
Explanation:
References: https://www.ejbca.org/docs/Part_2__Microsoft_Certification_Authority_and_Group_Policies.html
Leave a Reply