You implement cross-forest enrollment between Contoso.com and Fabrikam.com.
You receive version errors when you deploy updated certificates from the Contoso domain to the Fabrikam domain.
You need to ensure that you can deploy the certificates to the fabrikam.com domain.
What should you do?
A. Run the following Windows PowerShell command:Get-CertificationAuthority -Name contoso.com | Get- PolicyModuleFlag | Enable-PolicyModuleFlagEnableOCSPRevNoCheck, DisableExtensionList - RestartCA
B. Run the following Windows PowerShell script:DumpADObj.ps1 -ForestName fabrikam.com
C. Run the following Windows PowerShell script:PKISync.ps1 -sourceforest contoso.com -targetforest fabricam.com -f
D. Run the following Windows PowerShell command:Get-CertificationAuthority contoso.com | Get- PendingRequest | Approve-CertificateRequest
Answer: B
Explanation:
Explanation/Reference:
Explanation:
In cross-forest Active Directory Certificate Services (AD CS) deployments, use DumpADObj.ps1 to troubleshoot certificate enrollment or PKI object synchronization problems.
References: https://technet.microsoft.com/en-us/library/ff961505(v=ws.10).aspx Testlet 1 Background
Overview
Contoso, Ltd., is a manufacturing company. The company has offices in Chicago and Seattle. Each office contains two data centers. All of the data centers and sites for the company have network connectivity to each other. The company uses a single Active Directory Domain Services (AD DS) domain.
Contoso is growing rapidly and needs to expand its computer infrastructure.
Current Environment Chicago Office
The Chicago office contains a primary data center and a backup data center. A Hyper-V cluster named Clusterl.contoso.com resides in the primary data center. The cluster has a multiple network path configured. The cluster includes two unused SQL Server virtual machines (VMs) named SQL-SERVER1 and SQL-SERVER2. The cluster also includes a Hyper-V Host group named Chi-Primary.
Clusterl.contoso.com contains the following servers:
CHI1-HVNODE1.contoso.com
CHI1-HVNODE2.contoso.com
CHI1-HVNODE3.contoso.com
CHI1-HVNODE4.contoso.com
The backup data center for the Chicago office is located on a Hyper-V cluster named Cluster2.contoso.com. The cluster has a single network path configured. The cluster includes a Hyper-V Host group named Chi-Backup.
Cluster2.contoso.com contains the following servers:
CHI2-HVNODEl.contoso.com
CHI2-HVNODE2.contoso.com
CHI2-HVNODE3.contoso.com
CHI2-HVNODE4.contoso.com
In addition, the Chicago office contains two standalone Hyper-V servers named CHI- HVSERVER1.contoso.com and CHI-HVSERVER2.contoso.com.
There are also four newly built servers:
CHI-SERVERl.contoso.com
CHI-SERVER2.contoso.com
CHI-SERVER3.contoso.com
CHI-SERVER4.contoso.com
All the servers in the Chicago office run Windows Server 2012. Any future servers that are deployed in the Chicago office must also run Windows Server 2012.
All servers in the Chicago office use the subnet 10.20.xx.
Current Environment Seattle Office
The Seattle office contains a primary data center and a backup data center. The primary data center is located on a Hyper-V cluster named Cluster3.contoso.com. The cluster has a multiple network path configured. The cluster includes two unused SQL Server virtual machines named SQL-SERVER3 and SQL-SERVERS. The cluster includes a Hyper-V Host group named Sea-Primary.
Cluster3.contoso.com contains the following servers:
SEA3-HVNODEl.contoso.com
SEA3-HVNODE2.contoso.com
SEA3-HVNODE3.contoso.com
SEA3-HVNODE4.contoso.com
The backup data center for the Seattle office is located on a Hyper-V cluster named Cluster4.contoso.com.
The cluster has a single network path configured. The cluster includes a Hyper-V Host group named Sea- Backup.
Cluster4.contoso.com contains the following servers:
SEA4-HVNODEl.contoso.com
SEA4-HVNODE2.contoso.com
SEA4-HVNODE3.contoso.com
SEA4-HVNODE4.contoso.com
In addition, the Seattle office contains two standalone Hyper-V servers named SEA- HVSERVERl.contoso.com and SEA-HVSERVER2.contoso.com.
There are also four newly built servers:
SEA-SERVERl.contoso.com
SEA-SERVER2.contoso.com
SEA-SERVER3.contoso.com
SEA-SERVER4.contoso.com
All servers in the Seattle office run Windows Server 2012 R2. Any future servers that are deployed in the Seattle office must also run Windows Server 2012 R2.
All servers in the Seattle office use the subnet 10.10.x.x.
Business Requirements
Apps
Contoso plans to deploy new applications to make its departments more efficient.
App1
Contoso must create a new application named App1 for the human resources (HR) department. The infrastructure for App1 must reside in a virtual environment and the data files for App1 must reside on a single shared disk. In addition, the infrastructure for App1 must meet the following requirements:
maximize data protection
withstand the loss of a single guest virtual machine
withstand the loss of a single physical server
To support App1, Contoso must deploy a new cluster named Applcluster.contoso.com. The cluster has the following requirements:
It must span multiple sites.
It must support dynamic quorums.
It must prevent failures caused by a 50% split.
App2
Contoso must create a new application named App2. To support App2, Contoso must deploy a new SQL Server cluster. The cluster must not be part of the domain.
The server deployment team that will install the cluster has limited permissions. The server deployment team does not have the ability to create objects in Active Directory.
Virtualization and Storage
New VMs
Any new VMs that are deployed to the Hyper-V cluster in Cluster3.contoso.com have the following requirements:
New SQL Server VMs must be deployed only to odd-numbered servers in the cluster.
All other new VM guests must be deployed to any available server in the cluster.
New VDE
The company needs a highly available file share cluster for a new Virtual Desktop Environment (VDE). It has the following requirements:
The file share cluster must withstand the loss of a single server.
The file share cluster must withstand the loss of a single network path.
The file share cluster must use the least amount of disk space.
New virtualized SQL Server cluster
Contoso must create a new application for manufacturing. The company needs a new virtualized SQL Server cluster named VM-SQLclusterl.contoso.com. It has the following requirements:
The cluster must use a shared virtual hard disk.
The cluster must have two nodes named VM-SQL-NODE1.contoso.com and VM-SQL-
NODE2.contoso.com.
Highly available storage solution
The company is deploying new hardware that will replace the existing Hyper-V clusters. The new file share cluster must have a highly available storage solution for a Hyper-V environment. It has the following requirements:
The new file share cluster must support guest VM clusters.
The storage cannot reside on any of the physical Hyper-V hosts.
