Active Directory with Windows Server 2016 - Installing Root CAs

The video tutorial provides a comprehensive guide on installing and configuring certificate services using server manager. It covers pre-installation requirements, such as setting a static IP and joining a domain, and details the installation process for both enterprise and standalone root certificate authorities. The tutorial also explains the configuration of certificate services, including selecting cryptographic options and setting validity periods. Key differences between enterprise and standalone installations are highlighted, emphasizing the need for Active Directory in enterprise setups.

What is a necessary step before installing Enterprise CA?

• Skipping domain joining

• Changing the computer name after installation

• Assigning a static IP address

• Using a dynamic IP address

Which tool is used to install Active Directory Certificate Services?

• Server Manager

• Task Manager

• Control Panel

• File Explorer

What role can be added when setting up certificate services?

• File Server

• Network Administrator

• Database Manager

• Certificate Authority

Which cryptographic key length is considered best practice?

• 4096

• 8192

• 2048

• 1024

What is the default validity period for a certificate?

• 10 years

• 5 years

• 3 years

• 1 year

What is the main difference between Enterprise CA and Standalone CA?

• Standalone CA requires domain joining

• Enterprise CA requires Active Directory

• Standalone CA requires Active Directory

• Enterprise CA does not require a static IP

What is the first step in installing a standalone root CA?

• Access Task Scheduler

• Select Server Manager

• Use File Explorer

• Open Control Panel

Which algorithm is selected for the standalone root CA?

• SHA-1

• SHA-256

• SHA-512

• MD5

What is not required for a standalone root CA?

• Certificate Authority role

• Server Manager

• Active Directory

• Static IP

What is a key difference in the configuration of Enterprise and Standalone CA?

• Enterprise CA uses a different algorithm

• Standalone CA does not have a domain suffix

• Standalone CA requires more features

• Enterprise CA does not need a private key