Your company has a server that runs Windows Server 2008 R2. The server has the Web Server (IIS)
role installed. You need to activate SSL for the default Web site. Which two actions should you
perform? (Each correct answer presents part of the solution. Choose two.)
A.
Obtain and import a server certificate by using the IIS Manager console.
B.
Select the Generate Key option in the Machine Key dialog box for the default Web site.
C.
Add bindings for the HTTPS protocol to the default Web site by using the IIS Manager console.
D.
Install the Digest Authentication component for the Web server role by using the Server
Manager console.
Explanation:
To activate SSL for the default Web site on the server, you need to get an appropriate certificate and
create an HTTPS binding on a site. On Windows Vista and Windows Server 2008, HTTP.sys handles
SSL encryption/decryption in kernel mode, resulting in up to 20% better performance for secure
connections. Moving SSL to kernel mode requiresstoring SSL binding information in two places. First,
the binding is stored in %windir%\system32\inetsrv\applicationHost.config for your site. When the
site starts, IIS 7.0sends the binding to HTTP.sys and HTTP.sys starts listening for requests on the
specified IP:Port (this works for all bindings). Second, SSL configuration associated with the binding is
stored in HTTP.sys configuration.When a client connects and initiates an SSL negotiation, HTTP.sys
looks in its SSL configuration for the IP:Port pair that the client connected to. The HTTP.sys SSL
configuration must include a certificate hash and the name of the certificate’s store for the SSL
negotiation to succeed. Reference: How to Setup SSL on IIS 7.0
http://learn.iis.net/page.aspx/144/how-to-setup-ssl-on-iis-7/