Identity with Windows Server 2016 — Question 35

You deploy a new enterprise certification authority (CA) named CA1.
You plan to issue certificates based on the User certificate template.
You need to ensure that the issued certificates are valid for two years and support autoenrollment.
What should you do first?

Answer options

• A. Run the certutil.exe command and specify the resubmit parameter.
• B. Duplicate the User certificate template.
• C. Add a new certificate template for CA1 to issue.
• D. Modify the Request Handling settings for the CA.

Correct answer: B

Explanation

The correct first step is to duplicate the User certificate template, allowing modifications such as validity period and enabling autoenrollment. The other options do not directly address the need to customize the existing template for the desired certificate properties.