Configuring Advanced Windows Server 2012 Services — Question 83
You have a server named Server1 that has the Active Directory Certificate Services server role installed. Server1 uses a hardware security module (HSM) to protect the private key of Server1.
You need to ensure that the Active Directory Certificate Services (AD CS) database, log files, and private key are backed up.
You perform regular backups of the HSM module by using a backup utility provided by the HSM manufacturer.
What else should you do?
Answer options
- A. Run the certutil.execommand and specify the -backupkey parameter.
- B. Run the certutil.exe command and specify the -backupdb parameter.
- C. Run the certutil.exe command and specify the -backup parameter.
- D. Run the certutil.exe command and specify the -dump parameter.
Correct answer: B
Explanation
The correct answer is B because using the -backupdb parameter with certutil.exe allows for backing up the Active Directory Certificate Services database and log files. The other options do not specifically address the backup of the AD CS database; -backupkey is for the private key backup, -backup is a general backup command, and -dump is for displaying database contents.