Your role of Network Administrator at ABC.com includes the management of the Active Directory
Domain Services (AD DS) domain named ABC.com. The network includes servers that run
Windows Server 2012. All client computers run Windows 7 Professional.
A server named ABC-CA1 runs Certificate Services and is configured as an Enterprise
Certification Authority (CA) for the ABC.com domain.
Company security policy states that users should be able to encrypt their files and emails. You
want to configure auto-enrollment for certificates that can be used for e-mail encryption and
signing, Encrypting File System (EFS), and client authentication.
You plan to configure a domain-wide group policy object (GPO) to enable the auto-enrollment.
What should you do first?
A.
You should duplicate the User certificate template and then publish the duplicated template.
B.
You should duplicate the Code Signing certificate template and then publish the duplicated
template.
C.
You should duplicate the Basic EFS certificate template and then publish the duplicated
template.
D.
You should duplicate the Computer certificate template and then publish the duplicated
template.
Explanation: