HOTSPOT
Your network contains one Active Directory domain.
The domain contains an enterprise certification authority (CA).
You need to ensure that members of a group named Group1 can issue certificates for the User
certificate template only.
Which two tabs should you use to perform the configuration? To answer, select the appropriate tabs
in the answer area.
Answer: 
Explanation:
Restrict Certificate Managers
https://technet.microsoft.com/en-us/library/cc753372.aspx