70-299 Implementing and Administering Security in a Microsoft Windows Server 2003 Network Testking Exam

Demo Question 6.

You are a security administrator for EliteCertify.com. The network consists of a single Active Directory domain named EliteCertify.com. The network contains Windows XP Professional client computers and Windows Server 2003 computers only. You manage a Windows Server 2003 computer named EliteCertify -SR12 that is a domain member server. You use IIS on EliteCertify -SR12 to host an Internet Web site. Approximately 4,000 EliteCertify.com employees connect over the Internet to access company confidential data on EliteCertify -SR12. You control access to data on EliteCertify -SR12 by using NTFS file permissions assigned to groups. Different groups are assigned access to different files. Employees must have access only to files that they are assigned access to, based on their membership in a group. You enable SSL on EliteCertify -SR12 to protect confidential data while it is in transit. You issue each employee an Authenticated Session certificate and store a copy of that certificate with their user account in the Active Directory domain. You need ensure that EliteCertify -SR12 authenticates users based on possession of their certificate. What should you do?

A. Request a Web server certificate from a commercial certification authority (C.
B. Configure access restrictions based on employee IP address.
C. Enable Digest authentication for Windows domain servers.
D. Configure client certificate mapping.


Display Answer

Answer: D

Explanation: