You are the database administrator of Nutex Corporation. The company’s network consists of a single ActiveDirectory domain named nutex.com.
You are in the process of creating a failover cluster for SQL Server 2008. You install SQL Server 2008 on threecomputers named SQL1.nutex.com, SQL2.nutex.com, and
SQL3.nutex.com. You create a three-node failovercluster instance named SQLFC.nutex.com. You want to configure encryption for the failover cluster. What should you do?
A.
Obtain a server certificate with the name SQLFC , and install it on SQL1.nutex.com , SQL2.nutex.com , and SQL3.nutex.com .
B.
Obtain a server certificate with the name SQLFC.nutex.com , and install it on SQL1.nutex.com , SQL2.nutex.com , and SQL3.nutex.com .
C.
Obtain a server certificate with the name nutex.com , and install it on SQL1.nutex.com , SQL2.nutex.com ,and SQL3.nutex.com .
D.
Obtain a server certificate with the fully qualified domain name (FQDN) of each node in the cluster. Ensurethat each node has a certificate issued to the other two nodes.
Explanation:
You should obtain a server certificate with the name SQLFC.nutex.com and install it on SQL1.nutex.com , SQL2.nutex.com , and SQL3.nutex.com . Failover clusters provide high availability for an entire instance of SQLServer. To be able to install a failover cluster, you must have Microsoft Cluster Server (MSCS) configured on atleast one of the nodes in the cluster. When you want to configure encryption for a failover cluster, you must obtaina server certificate with the FQDN of the failover cluster instance and install the certificate on all nodes in thefailover cluster. In this scenario, the FQDN of the failover cluster instance is SQLFC.nutex.com . Therefore, youshould obtain a certificate with the name SQLFC.nutex.com and install it on SQL1.nutex.com , SQL2.nutex.com , and SQL3.nutex.com . After installing the certificate, you should select the Force protocolencryption check box in SQL Server Configuration Manager to enable encryption for the failover cluster. The Force protocol encryption check box is available on the Flags tab in the SQL Native Client 10.0Configuration dialog box.
To open the SQL Native Client 10.0 Configuration dialog box, you should right-clickthe SQL Native Client 10.0 Configuration node in SQL Server Configuration Manager and select the Properties option. You should not obtain a server certificate with the name SQLFC or nutex.com and install it on SQL1.nutex.com , SQL2.nutex.com , and SQL3.nutex.com . When you want to configure encryption for a failover cluster, you mustobtain a server certificate with the FQDN of the failover cluster instance and install the certificate on all nodes inthe failover cluster. In this scenario, the FQDN of the failover cluster instance is SQLFC.nutex.com
. Therefore,you should obtain a certificate with the name SQLFC.nutex.com and install it on SQL1.nutex.com , SQL2.nutex.com , and SQL3.nutex.com .
You should not obtain a server certificate with the FQDN of each node in the cluster and ensure that each nodehas a certificate issued to the other two nodes. When you want to configure encryption for failover cluster, youmust obtain a server certificate with the FQDN of the failover cluster instance and install the certificate on allnodes in the failover cluster. In this scenario, the FQDN of the failover cluster instance is SQLFC.nutex.com .Therefore, you should obtain a certificate with the name SQLFC.nutex.com and install it on SQL1.nutex.com , SQL2.nutex.com , and SQL3.nutex.com .Objective:
Implementing High AvailabilitySub-Objective:
Implement a SQL Server clustered instance.References:
MSDN > MSDN Library > Servers and Enterprise Development > SQL Server > SQL Server 2008 > ProductDocumentation > SQL Server 2008 Books Online > Getting Started > Initial Installation > Planning a SQL ServerInstallation > High Availability Solutions Overview > Getting Started with SQL Server 2008 Failover Clustering >Before Installing Failover Clustering