74-338 Real Exam Prep DEMO

Question 7: You support a Microsoft Lync Server 2013 Enterprise pool named Lync2013.contoso.local.
The pool is configured
with two Session Initiation Protocol (SIP) domains named litware.com and fabrikam.com. The
environment also includes the following:
-three Front End Servers named Lync2013FEl, Lync 2013FE2, and Lync2013FE3 -one Back End Server
named Lync2013BE You plan to install a single Edge Server. You create an Edge pool named
Lync2013Edge.contoso.local. You want to configure the following Edge services:
-Access Edge to use sip.fabrikam.com
-Web Conferencing to use conf.fabrikam.com You also want to enable the federated access feature.
You need to assign internal and external certificates to the Lync 2013 Edge server. Which two
actions should you perform? (Each correct answer presents part of the solution. Choose two.)
A. Request a private certificate from an internal certificate authority (CA) and include the name
Lync2013Edge.contoso.local. Assign the certificate to internal interface of the Edge Server.
B. Request a wildcard certificate for *.contoso.local from an internal certificate authority (CA).
Assign the certificate to internal and external interfaces of the Edge Server.
C. Request a certificate from a public certificate authority (CA) and include the names
sip.fabrikam.com, sip.litware.com, and conf.fabrikam.com. Assign this certificate to the external
interface of the Edge Server.
D. Request a certificate from a public certificate authority (CA) and include the names
Lyncdiscoverexternal.fabrikam.com and sipfederation.fabrikam.com. Assign the certificate to
internal and external interfaces of the Edge Server.
E. Request a certificate from a public certificate authority (CA) and include the names
sip.fabrikam.com and sip.litware.com. Assign this certificate to the internal interface of Edge Server.
Correct Answer: A,C
Explanation:
Lync Server 2013 uses certificates to provide communications
encryption and server identity authentication. In some cases, such as web publishing through the
reverse proxy, strong subject alternative name (SAN) entry matching to the fully qualified domain
name (FQDN) of the server presenting the service is not required. In these cases, you can use
certificates with wildcard SAN entries (commonly known as "wildcard certificates") to reduce the
cost of a certificate requested from a
public certification authority and to reduce the complexity of the planning process for certificates.