What should you do first?

Your role of Network Administrator at ABC.com includes the management of the Active Directory
Domain Services (AD DS) domain named ABC.com. The network includes servers that run
Windows Server 2012. All client computers run Windows 7 Professional.
A server named ABC-CA1 runs Certificate Services and is configured as an Enterprise
Certification Authority (CA) for the ABC.com domain.
Company security policy states that users should be able to log on to the network and encrypt
their emails using smart cards. You want to configure auto-enrollment for certificates that can be
used for authentication and email encryption.
You plan to configure a domain-wide group policy object (GPO) to enable the auto-enrollment.
What should you do first?

A.
You should duplicate the Computer certificate template and then publish the duplicated
template.

B.
You should duplicate the User certificate template and then publish the duplicated template.

C.
You should duplicate the Smart Card Logon certificate template and then publish the duplicated
template.

D.
You should duplicate the Smart Card User certificate template and then publish the duplicated
template.

Explanation: