Your network contains an Active Directory domain. All client computers run Windows 8
Enterprise.
Your company uses virtual smart cards.
A user named User1 requires a virtual smart card on a new client computer named Computer1.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
A.
Enroll User1 for a certificate.
B.
Run the Enable-BitLocker cmdlet.
C.
Run the tpmvscmgr.exe command.
D.
Enroll Computer1 for a certificate.
Explanation:
A: Smart cards (virtual or otherwise) are based on digital certificates, which means you need
a Public Key Infrastructure (PKI). A Windows Server 2012 certification authority (CA) has
two default certificate templates that can be used for issuing smart card certificates. The
Smartcard Logon template is appropriate when the card’s use will be for logging on only. If
you want users to be able to use the certificate for encrypting email, use the Smartcard User
template.
C: To create a Virtual Smart Card, use the Tpmvscmgr.exe command line utility.