What should you do?

You are a security administrator for your company. The network consists of a single Active Directory domain. The network contains Windows XP Professional client computers and Windows Server 2003 computers.
You install Certificate Services to issue certificates to employees for secure e-mail encryption and Web site authentication. You revoke the certificates used by an employee when that employee leaves the company. Several thousand certificates are currently revoked, and multiple revocations occur daily. Company e-mail and Web applications already use strong revocation checking of certificates. You need to reduce the time that it takes for client computers to find out about certificate revocations and to process certificate revocation information.
You also need to limit the negative impacts that this change will have on network performance. What should you do?

You are a security administrator for your company. The network consists of a single Active Directory domain. The network contains Windows XP Professional client computers and Windows Server 2003 computers.
You install Certificate Services to issue certificates to employees for secure e-mail encryption and Web site authentication. You revoke the certificates used by an employee when that employee leaves the company. Several thousand certificates are currently revoked, and multiple revocations occur daily. Company e-mail and Web applications already use strong revocation checking of certificates. You need to reduce the time that it takes for client computers to find out about certificate revocations and to process certificate revocation information.
You also need to limit the negative impacts that this change will have on network performance. What should you do?

A.
In the Certification Authority console, open the Revoked Certificates properties. Set the Delta Certificate Revocation List (CRL) publication interval to one hour.

B.
In the Certification Authority console, open the Revoked Certificates properties. Set the full Certificate Revocation List (CRL) publication interval to one hour.

C.
In the Certification Authority console, highlight Revoked Certificates, and then select the option to publish a full CRL after you revoke a certificate.

D.
In the Certification Authority console, highlight Revoked Certificates, and then select the Refresh option.



Leave a Reply 0

Your email address will not be published. Required fields are marked *