Your network contains an Active Directory domain named contoso.com. The domain contains an enterprise certification authority (CA) named CA1.

You have a test environment that is isolated physically from the corporate netw

ork and the Internet.

You deploy a web server to the test environment. On CA1, you duplicate the Web Server template, and you name the template Web_Cert_Test.

For the web server, you need to request a certificate that does not contain the revocation

information of CA1.

What should you do first?

A. From the properties of CA1, allow certificates to be published to the file system.

B. From the properties of CA1, select Restrict enrollment agents, and then add Web_Cert_Test to the restricted enrollment

agent.

C. From the properties of Web_Cert_Test, assign the Enroll permission to the guest account.

D. From the properties of Web_Cert_Test, set the Compatibility setting of CA1 to Windows Server 2016.

Explanation:

The option -Do not include revo

cation information in issued certificates checkbox- is only available with the compatibility mode set to Windows Server 2008 R2 or later.