Prev Question
Next Question

You have a server named Server1 that has the Active Directory Certificate Services server role installed. Server1 uses a hardware security module (HSM) to protect
the private key of Server1.
You need to ensure that the Active Directory Certificate Services (AD CS) database, log files, and private key are backed up.
You perform regular backups of the HSM module by using a backup utility provided by the HSM manufacturer.
What else should you do?

A. Run the certutil.execommand and specify the -backupkey parameter.

B. Run the certutil.exe command and specify the -backupdb parameter.

C. Run the certutil.exe command and specify the -backup parameter.

D. Run the certutil.exe command and specify the -dump parameter.

Explanation:
Backup the Active Directory Certificate Services database

Incorrect Answers:
A: Backup the Active Directory Certificate Services certificate and private key
C: Backup Active Directory Certificate Services
D: Dump configuration information or files

References:
https://technet.microsoft.com/en-us/library/cc732443.aspx#BKMK_backupKey
https://technet.microsoft.com/en-us/library/cc732443.aspx#BKMK_backupDB
https://technet.microsoft.com/en-us/library/cc732443.aspx#BKMK_backup
https://technet.microsoft.com/library/cc732443.aspx#BKMK_dump

Prev Question
Next Question

Leave a Reply

Your email address will not be published. Required fields are marked *