Câu 39: 70-414: MCSE Implementing an Advanced Server Infrastructure

You plan to implement a two-tier certification authority (CA) hierarchy with an offline root CA. You install the root CA, and then copy the certificate to the server that will become the new issuing CA. You have a file named rootca1_ContosoRootCA.crt that contains the root CA certificate. Client devices in the Active DirectoryDomain Services (AD DS) domain do not currently trust the root CA. All clients in the AD DS domain must trust the root CA. You need to install the issuing CA. What should you do?

1. A. Run the following command from an administrative command prompt:certutil –pulse rootca1_ContosoRootCA.crt TrustedRoot
2. B. Run the following command from an administrative command prompt:certutil –dspublish -f rootca1_ContosoRootCA.crt RootCA — đáp án hiện tại
3. C. On the domain controller, use Windows Explorer to open the rootca1_ContosoRootCA.crt file and add the root CA to the Trusted Root Certification Authorities store.
4. D. On the domain controller, use Windows Explorer to open the rootca1_ContosoRootCA.crt file and add the root CA to the Intermediate Certification Authorities