Which group policy item should you configure to enable automatic reenrollment of certificates?
A.
Certificate Path Validation Settings
B.
Certificate Services Client – Certificate Enrollment Policy
C.
Certificate Services Client – Auto-Enrollment
D.
Trusted Root Certification Authorities
Explanation:
1.On a domain controller, open the Group Policy Management console.
2.In the console tree, double-click Group Policy Objects in the forest and domain containing the Default Domain Policy Group Policy object (GPO) that you want to edit.
3.Right-click the Default Domain Policy GPO, and then click Edit.
4.In the Group Policy Management Console (GPMC), click User Configuration, Policies, Windows Settings, Security Settings, and then click Public Key Policies.
5.Double-click Certificate Services Client – Auto-Enrollment.
6.In Configuration Model, select Enabled to enable autoenrollment
MikeZZL
Provided answer is correct. C
https://technet.microsoft.com/en-us/library/dd379539(v=ws.10).aspx