1.

You have installed certificate services on a Windows Server 2003 server named CA101.somecompany.com. Your boss has decided that he wants to change all the servers to a naming convention that is more descriptive to the organization. He wants to rename CA101.somecompany.com to certserver.somecompany.com. You explain to your boss that renaming a server with certificate services is not a good idea. Which of the following answers best describes the reason that you should not rename the server?

1. Once a server has joined an Active Directory domain, you cannot change the name without reloading the server.

2. The server name is bound to the CA information in Active Directory, and changing the name would invalidate certificates that have been issued by the server.

3. DNS will not allow for the renaming of a CA server.

4. You can change the name of the CA server, as long as you use the certutil.exe R option prior to the server rename, so that all the clients and subordinate servers are aware of the name change.

5. None of the above.

2.

You have installed certificate services on a Windows Server 2003 server, but after installation you are unable to open the Web enrollment Web site. What must you do in order to run Web enrollment on the server?

1. You must stop and restart certificate services or restart the computer before Web enrollment will work.

2. You must run certutil.exe w [servername] to activate Web enrollment.