Your network contains an Active Directory domain named contoso.com.
The network has an Active Directory Certificate Services (AD CS) infrastructure.
You need to issue a certificate to users to meet the following requirements:
– Ensure that the users can encrypt files by using Encrypting File System (EFS).
– Ensure that all of the users reenroll for their certificate every six months.
What should you do first?
A.
From the properties of the User certificate template, assign the Allow -Enroll permission to the Authenticated
Users group.
B.
From the properties of the Basic EFS template, assign the Allow -Enroll permission to the Authenticated
Users group.
C.
Create a copy of the User certificate template, and then modify the extensions of the copy.
D.
Create a copy of the Basic EFS certificate template, and then modify the validity period of the copy.
Explanation:
http://technet.microsoft.com/en-us/library/cc786499(v=ws.10).aspx
