You need to issue a certificate to users to meet the following requirements:  Ensure that the users can encrypt files by using Encrypting File System (EFS)

Your network contains an Active Directory domain named contoso.com. The network has an Active
Directory Certificate Services (AD CS) infrastructure.
You need to issue a certificate to users to meet the following requirements:
 Ensure that the users can encrypt files by using Encrypting File System (EFS).
 Ensure that all of the users reenroll for their certificate every six months.
What should you do first?

A.
From the properties of the User certificate template, assign the Allow -Enroll permission to the
Authenticated Users group.

B.
From the properties of the Basic EFS template, assign the Allow -Enroll permission to the
Authenticated Users group.

C.
Create a copy of the User certificate template, and then modify the extensions of the copy.D. Create a copy of the Basic EFS certificate template, and then modify the validity period of the copy.

Explanation:

http://technet.microsoft.com/en-us/library/cc786499(v=ws.10).aspx