HOTSPOT
Your network contains an Active Directory domain named contoso.com.
You need to create a certificate template for the BitLocker Drive Encryption (BitLocker) Network Unlock
feature.
Which Cryptography setting of the certificate template should you modify?
To answer, select the appropriate setting in the answer area.
Answer: 
Explanation:
http://technet.microsoft.com/en-us/library/jj574173.aspx
[1024] isn’t it?
its 2048
https://technet.microsoft.com/en-us/library/jj574173.aspx#BKMK_CreateCertTmpl
Step 6 (from the link) to create the certificate template for Network Unlock:
6) Select the Cryptography tab. Set the Minimum key size to 2048.