Deck 9: Deploying Iis and Active Directory Certificate Services

Question 1

When you set up a virtual directory,you give it an alias,which is a name to identify it to a Web browser.

Answer 1

True

Question 2

Any enterprise or standalone subordinate,excluding nonintermediate subordinates,can have a subordinate under it.

Answer 2

False

Question 3

The ____ is created automatically when you install the Web Server role.

A) DefaultApp
B) DefaultPool
C) ApplicationPool
D) DefaultAppPool

Answer 3

D

Question 4

A ____ is a special addressing format used to find,for example,particular Web locations or FTP sites.

A) URL
B) directory
C) URP
D) UML

Question 5

The ____ Web site feature is used to configure the dll files,code files,and other files used to fulfill client requests.

A) object mappings
B) file mappings
C) handler mappings
D) application mappings

Question 6

Lists of certificates that have been revoked are known as ____.

A) URLs
B) CAs
C) CRLs
D) RRLs

Question 7

A(n)____ is an ASP.NET process that runs on its own without using the same memory space as IIS.

A) master thread
B) worker process
C) control process
D) external thread

Question 8

A ____ is a network entity or host,typically a server that issues digital certificates of trust verifying the legitimacy of the certificate holders.

A) certificate master
B) certificate network
C) certificate authority
D) certificate director

Question 9

AD CS enables an organization to divide CA responsibilities into two roles: CA manager and certificate administrator.

Question 10

Windows Server 2008 offers the Active Directory ____ Services role as a way to implement a network infrastructure built on trust.

A) Client
B) Domain
C) Federation
D) Certificate

Question 11

The ____ Web site feature is used to configure the accepted file extensions for files that don't change.

A) MIME types
B) handler mappings
C) application mappings
D) file mappings

Question 12

The ____ feature is used to manage Internet e-mail via e-mail programs that take advantage of the application programming interface,system.net.mail.

A) HTTP E-mail Page
B) SMTP E-mail Page
C) Web E-mail Page
D) SMTP Object Page

Question 13

A ____ is really a physical folder or a redirection to a Uniform Resource Locator (URL)that points to a folder,so that it can be accessed over the Internet,an intranet,or VPN.

A) subordinate directory
B) secondary directory
C) virtual directory
D) Web directory

Question 14

The virtual directory share permission ____ enables groups and users to read,execute,and add files,but can only modify and delete files provided by them.

A) owner
B) reader
C) co-owner
D) contributor

Question 15

____ enable you to group similar Web applications into groups for management.

A) Object pools
B) Management pools
C) Application pools
D) Server pools

Question 16

A ____ is linking a public key or a combination of public and private keys to a user or network entity to verify that user or entity is trusted.

A) public key infrastructure
B) public key network
C) public key federation
D) public key structure

Question 17

A CRL can grow to be quite large and reduce the efficiency of network communications,particularly when there are many revocations listed.

Question 18

A(n)____ CA does not have to be integrated with Active Directory and so does not have to use user and security group information derived from Active Directory.

A) standalone root
B) enterprise root
C) enterprise subordinate
D) standalone subordinate

Question 19

____ is an encryption method that uses a public key and private key combination.

A) Symmetric key
B) Public key
C) Shared key
D) Universal key

Question 20

The certificate manager role is associated with the issue and manage certificates CA security permission.

Question 21

Through ____,network device administrators are given enrollment passwords.

A) Online Certificate Service
B) Network Device Enrollment Service
C) Certificate Management Service
D) Certificate Enrollment Service

Question 22

Match each term with the correct statement below.
a.FTP
b.CRL
c.ODBC
d.Internet Information Services
e.CA administrator
f.SMTP server
g.OCSP
h.Internet Server Application Programming Interface
i.certificate manager
A list of certificates that have been revoked

Question 23

Match each term with the correct statement below.
a.FTP
b.CRL
c.ODBC
d.Internet Information Services
e.CA administrator
f.SMTP server
g.OCSP
h.Internet Server Application Programming Interface
i.certificate manager
A TCP/IP-based application protocol that handles file transfers over a network

Question 24

Match each term with the correct statement below.
a.FTP
b.CRL
c.ODBC
d.Internet Information Services
e.CA administrator
f.SMTP server
g.OCSP
h.Internet Server Application Programming Interface
i.certificate manager
A group of DLL (dynamic link library)files that are applications and filters

Question 25

A(n)____ CA uses the same hierarchical subordinate structure as for an enterprise subordinate,but does not require integration with Active Directory.

A) standalone root
B) enterprise root
C) unlinked subordinate
D) standalone subordinate

Question 26

Match each term with the correct statement below.
a.FTP
b.CRL
c.ODBC
d.Internet Information Services
e.CA administrator
f.SMTP server
g.OCSP
h.Internet Server Application Programming Interface
i.certificate manager
Role given to those who determine which users to enroll for certificates and when to revoke certificates

Question 27

Credential roaming is configured as a ____,which enables it to be automatically applied to client computers running Windows operating systems such as Windows Vista and 7.

A) script
B) group policy
C) network policy
D) template

Question 28

Match each term with the correct statement below.
a.FTP
b.CRL
c.ODBC
d.Internet Information Services
e.CA administrator
f.SMTP server
g.OCSP
h.Internet Server Application Programming Interface
i.certificate manager
Acts as an Internet gateway and in partnership with e-mail services,such as Microsoft Exchange,to accept incoming e-mail from the Internet and forward it to the recipient

Question 29

PKI activity can be set up so that no action needs to be taken by users and very little action by CA administrators by using ____.

A) DHCP
B) DNS
C) autoenrollment
D) autoconfiguration

Question 30

CRLs are issued at regular intervals as determined by the ____.

A) certificate requester
B) client
C) certificate manager
D) CRL issuer

Question 31

____ means that when a user logs into the network,the digital certificate information stored on the user's computer is automatically synchronized with the digital certification information for that user stored in Active Directory.

A) Credential roaming
B) Domain roaming
C) Credential hopping
D) Domain hopping

Question 32

____________________ is intended for organizations that enable users to access network resources through the Web,rather than through user accounts.

Question 33

A(n)____________________ contains information on only the certificates revoked after the last full CRL was issued.

Question 34

Match each term with the correct statement below.
a.FTP
b.CRL
c.ODBC
d.Internet Information Services
e.CA administrator
f.SMTP server
g.OCSP
h.Internet Server Application Programming Interface
i.certificate manager
Role given to the person or persons who manage the CA server

Question 35

IIS ____________________ are used to automatically trigger programs,such as a Microsoft Access database lookup or a security program to authorize a user to access specific Web functions.

Question 36

When one key is used to encrypt data another other key is used to decrypt it,the method is called ____________________ encryption.

Question 37

Match each term with the correct statement below.
a.FTP
b.CRL
c.ODBC
d.Internet Information Services
e.CA administrator
f.SMTP server
g.OCSP
h.Internet Server Application Programming Interface
i.certificate manager
Software included with Windows Server 2008 that enables you to offer a complete Web site

Question 38

Match each term with the correct statement below.
a.FTP
b.CRL
c.ODBC
d.Internet Information Services
e.CA administrator
f.SMTP server
g.OCSP
h.Internet Server Application Programming Interface
i.certificate manager
A set of database access rules used by API for accessing databases and providing a standard doorway to database data

Question 39

The ____________________ CA is always configured before any other CAs.

Question 40

Match each term with the correct statement below.
a.FTP
b.CRL
c.ODBC
d.Internet Information Services
e.CA administrator
f.SMTP server
g.OCSP
h.Internet Server Application Programming Interface
i.certificate manager
The Online Responder Service relies on this to determine if a certificate is revoked

Question 41

What is the purpose of Network Device Enrollment Service?

Question 42

Explain how to manage Active Directory Certificate Services,and give three examples of tasks you may need to perform.

Question 43

Describe the enterprise root CA.

Question 44

Explain why the autoenrollment options to Renew expired certificates,update pending certificates and remove revoked certificates and Update certificates that use certificate templates are generally selected.

Question 45

List three things that you can do through the Internet Information Services (IIS)Manager tool.

Question 46

Discuss why using Online Responder Service is an efficient solution to large CRL transmissions.

Question 47

List and describe two role services that you can implement when you install Active Directory Certificate Services.

Question 48

List three things that installing and using IIS on the Internet requires.

Question 49

List three pieces of information on a CRL.

Question 50

List and describe the three levels of certificate templates.