Your network contains an Active Directory domain named contoso.com. You need to create a
certificate template for the BitLocker Drive Encryption (BitLocker) Network Unlock feature. Which Cryptography setting of the certificate template should you
modify? To answer, select the appropriate setting in the answer area.
Solution:
Cryptographic provider that supports RSA (Microsoft Software Key Storage Provider)
A.
True
B.
False
A.
True
Select the Cryptography tab. Set the Minimum key size to 2048. (Any Microsoft cryptographic provider that supports RSA can be used for this template, but for simplicity and forward compatibility we recommend using the Microsoft Software Key Storage Provider.)
https://docs.microsoft.com/en-us/windows/device-security/bitlocker/bitlocker-how-to-enable-network-unlock#BKMK_CreateCertTmpl
A.
True
Select the Cryptography tab. Set the Minimum key size to 2048. (Any Microsoft cryptographic provider that supports RSA can be used for this template, but for simplicity and forward compatibility we recommend using the Microsoft Software Key Storage Provider.)
https://docs.microsoft.com/en-us/windows/device-security/bitlocker/bitlocker-how-to-enable-network-unlock#BKMK_CreateCertTmpl