Identity with Windows Server 2016 — Question 124

Your network contains an Active directory domain named contoso.com. The domain has an enterprise certification authority (CA).
You duplicate the Basic EFS template, and you name the template Template1.You configure the CA to issue Template1.
Users are configured to obtain a new certificate automatically when they sign in to a computer in the domain.
You need to enable the users to automatically obtain a certificate based on Template1.
What should you modify?

Answer options

• A. The Publication Settings for the CA.
• B. The Security Settings for Template1.
• C. The Request Handling properties for Template1.
• D. The Request Handling properties for the CA.

Correct answer: B

Explanation

The correct answer is B because the Security Settings for Template1 must be configured to allow user enrollment for the certificates. The other options do not directly influence the ability of users to obtain a certificate based on Template1, as they pertain to different aspects of certificate management.