Question: You have a running Active Directory Certificate Services (AD CS) server and need to back up the certificate databases and private keys. How do you accomplish this?

  1. Use the certutil.exe command.
  2. Schedule a full backup of the server.
  3. Perform a direct copy of database files and private keys to a file share.
  4. Schedule an incremental backup of the server.

Answer: The correct answer of the above question is Option A:Use the certutil.exe command.