What should you do?

You administer your company’s Windows network. The network consists of 25 Windows Server computers. The network contains an offline root Certification Authority (CA) located in the main office and a subordinate issuing CA in the main office and each of the remaining four retail locations.

One of the four retail locations has been purchased and will operate as a franchise. You must ensure that resources on the company network will not accept certificates from the associated subordinate CA in this retail location after the sale is completed. Your solution must use a minimum amount of administrative effort.

What should you do?

Each correct answer presents part of the solution. (Choose three.)

A. On the company’s root CA, revoke the certificate of the subordinate CA.

B. Disconnect the subordinate CA from the network.

C. On the subordinate CA, remove the CA software and remove the CA files.

D. On the subordinate CA, revoke the certificates that it has issued.

E. Publish a new Certificate Revocation List.

F. Copy the Edb.log file from the root CA to its Certification Distribution Point on your network.

G. Copy the Edb.log file from the subordinate CA to its Certification Distribution Point on your network.

H. Copy the Certificate Revocation List file to the Certificate Distribution Point on your network.

View Answer

Answer: AEH