Identity with Windows Server 2016 — Question 2

Your network contains an Active Directory domain named contoso.com. The domain contains an enterprise certification authority (CA) named CA1.
You duplicate the Computer certificate template, and you name the template Cont_Computers.
You need to ensure that all of the certificates issued based on Cont_Computers have a key size of 4,096 bits.
What should you do?

Answer options

• A. From the properties of CA1, modify the Security settings.
• B. From the properties of CA1, modify the Request Handling settings.
• C. From the properties of the Computer template, modify the Key Attestation settings.
• D. From the properties of Cont_Computers, modify the Cryptography settings.

Correct answer: D

Explanation

The correct answer is D because the Cryptography settings of the certificate template determine the key size for certificates issued from that template. Options A, B, and C do not pertain to the key size configuration for the specific certificate template in question.