Your network contains an Active Directory domain named adatum.com. The domain contains three servers.
The servers are configured as shown in the following table.
Server1 is configured as shown in the exhibit. (Click the Exhibit button.)
Template1 contains custom cryptography settings that are required by the corporate security team.
On Server2, an administrator successfully installs a certificate based on Template1.
The administrator reports that Template1 is not listed in the Certificate Enrollment wizard on Server3, even after
selecting the Show all templates check box.
You need to ensure that you can install a server authentication certificate on Server3. The certificate must
comply with the cryptography requirements.
Which three actions should you perform in sequence?
To answer, move the appropriate three actions from the list of actions to the answer area and arrange them in
the correct order.
Select and Place:
Explanation:
Note:
Duplicate an existing template, modify the Compatibility Settings (to Windows Server 2008), and modify the
Request Handling settings.
I believe the given answer is wrong. The answer should be:
Box 1- From Certificate Templates, click Duplicate Template <– by duplicating Template1, we get a new template with all the custom cryptography settings necessary (as said in the scenario: "certificate must comply with the cryptography requirements.")
Box 2 – From Certificate Templates, modify the Compatibility settings of the template that means that certificate is not compatible with it and needs to be changed.
Box 3 – From Certification Authority, click New, and then click Certificate Template to Issue <– If we don't issue certificate, it is "just" there without any purpose. In order to see it and to make it also available we must issue it.
I agree with pikapoka. If you do not issue the new certificate template, the admin will still not be able to request the new certificate we just created.
also agree Box3 has to be corrected…
I concur. Request handling defines the certificate purpose.
https://technet.microsoft.com/en-us/library/cc732007(v=ws.11).aspx
pikapoka is correct, but it appears the answer has been updated to what he has stated.
Actually the shown answer is still incorrect.
pikapoka provides the correct answer.