Your network contains an Active Directory domain named contoso.com.
The domain contains a server named Server1 that runs a Server Core installation of Windows
Server 2012 R2.
You need to deploy a certification authority (CA) to Server1.
The CA must support the auto-enrollment of certificates.
Which two cmdlets should you run? (Each correct answer presents part of the solution.
Choose two.)
A.
Add-CAAuthoritylnformationAccess
B.
Install-AdcsCertificationAuthority
C.
Add-WindowsFeature
D.
Install-AdcsOnlineResponder
E.
Install-AdcsWebEnrollment
Explanation:
It seems B and C.
You must install the CA role before you run Install-AdcsCertificationAuthority.
http://technet.microsoft.com/en-us/library/hh848389.aspx
“Detailed Description
The Install-AdcsCertificationAuthority cmdlet performs installation and configuration of the AD CS
CA role service.
To remove the certification authority role service use the Uninstall-AdcsCertificationAuthority
cmdlet.
You can import the cmdlet by running the following commands from Windows PowerShell:
Import-Module ServerManager
Add-WindowsFeature Adcs-Cert-Authority”
Add-WindowsFeature in Server 2012 R2???
This was replaced in Server 2012 for Install-WindowsFeature. I need to test this. Either C is bad worded or is another option.
Add and install do the same thing in 2012r2.
The answer is: B & D
answer is B & D
answer from: “http://www.aiotestking.com/microsoft/which-two-cmdlets-should-you-run-8/”
D.Normus says:
August 25, 2015 at 3:12 pm
The answer here is wrong. Read the question carefully – this is a Server Core installation. Before the AD CS CA role service can be added, the binaries must be added using the Add-WindowsFeature cmdlet. Then you can install the role service using Install-AdcsCertificationAuthority. Besides, you don’t need Web Enrollment for autoenrollment, just some GPOs. Therefore, the answer is B. and C.
… the answer here is then correct:
B
&
C
May be B & E
prem says B and E
Are you still stuck in your Prem?? what your brain says?!!
Provided answer is correct.
First you have to install Active Directory Certificate Services role, which can be done using the following command:
Install-WindowsFeature AD-Certificate
Note: Add-WindowsFeature is an alias of Install-WindowsFeature and works on Server 2012 R2, it is stilll available because in previous versions of Windows Server you used Add-WindowsFeature instead of Install-WindowsFeature
The you need to configure the CA, which is done with the command:
Install-AdcsCertificationAuthority
Reference: https://4sysops.com/archives/certificate-server-in-server-core/
So B and C are the correct answers.
Not E, according to technet to auto enroll y need a certificate template and policy, no need of web
A fascinating discussion is definitely worth comment. I think that you need to publish more on this issue, it might not be a taboo subject but usually people don’t discuss such topics. To the next! Cheers!!|