Which setting should you modify?

HOTSPOT
Your network contains an Active Directory domain named contoso.com. The domain
contains a server named Server1 that runs Windows Server 2012 R2. Server1 has the
Active Directory Certificate Services server role installed and configured.

For all users, you are deploying smart cards for logon. You are using an enrollment agent to
enroll the smart card certificates for the users.
You need to configure the Contoso Smartcard Logon certificate template to support the use
of the enrollment agent.
Which setting should you modify? To answer, select the appropriate setting in the answer area.

Answer:

Explanation:

http://social.technet.microsoft.com/Forums/en-US/winserversecurity/thread/162e1108-bd46-4b2b-9ea0-4fff8949a810
http://technet.microsoft.com/en-us/library/cc725621(v=WS.10).aspx