You need to ensure that you can issue certificates based on certificate templates

Your network contains an Active Directory domain named contoso.com. The network
contains two servers named Server1 and Server2.
You deploy Active Directory Certificate Services (AD CS). The certification authority (CA) is
configured as shown in the exhibit. (Click the Exhibit button.)

You need to ensure that you can issue certificates based on certificate templates.
What should you do?

Your network contains an Active Directory domain named contoso.com. The network
contains two servers named Server1 and Server2.
You deploy Active Directory Certificate Services (AD CS). The certification authority (CA) is
configured as shown in the exhibit. (Click the Exhibit button.)

You need to ensure that you can issue certificates based on certificate templates.
What should you do?

A.
On Server1, install the Network Device Enrollment Service role service.

B.
Configure Server2 as a standalone subordinate CA.

C.
On Server1, uninstall, and then reinstall AD CS.

D.
On Server1, run the Add-CertificateEnrollmentPolicyServer cmdlet.

Explanation:
http://social.technet.microsoft.com/wiki/contents/articles/7734.certificate-enrollment-webservices-in-activedirectory-certificate-services.aspx
Reinstall ADCS as an Enterprise CA , cert templates are not available on standalone CAs

Show Hint

Leave a Reply 8

Your email address will not be published. Required fields are marked *

Workout

Workout

Correct answer is C

Reply

Mohammad Rizwan Bashir

Mohammad Rizwan Bashir

But this answer is not available in paper.
another option is added that is

Configure Server2 as a Enterprice subordinate CA.
Please reply me on my email

Reply

Macdee

Macdee

In the absence of On Server1, uninstall, and then reinstall AD CS. the answer is Configure Server2 as an Enterprise CA

Reply

FSM

FSM

You mean ‘Configure Server2 as an enterprise subordinate CA.’.

Reply

byrdland

byrdland

Answer is C: On Server1, uninstall, and then reinstall AD CS.

Install AD CA as Enterprise CA and templates show installed. Uninstalled and reinstalled as a Standalone Root CA and Templates are unavailable.

C is correct.

Reply

S

S

I did the same as byrdland and confirm that based on this lab answer C is correct

Reply

Jay

Jay

Can confirm that in this scenario C is correct.
Microsoft can differ with their answers, the general issue is that this CA is a standalone CA and not AD joined. Hence, no templates. See https://technet.microsoft.com/en-us/library/cc755290(v=ws.11).aspx for more info on the standalone CA.

Other variants of this question do give you an option to install a Enterprise CA on server 2. Then, that question is correct.

Reply