Your network contains an enterprise certification authority (CA) that runs Windows Server
2008 R2 Enterprise.
You have a custom certificate template named Template 1. Template1 is published to the
CA.
You need to ensure that all of the members of a group named Group1 can enroll for
certificates that use Template1.
Which snap-in should you use?

A.
Security Templates

B.
Enterprise PKI

C.
Certification Authority

D.
Certificate Templates

E.
Certificates

F.
TPM Management

G.
Authorization Manager

H.
Group Policy Management

I.
Active Directory Users and Computers

Explanation:

MCTS 70-640 Cert Guide: Windows Server 2008 Active Directory, Configuring (Pearson IT
Certification, 2010) page 593
Configuring Certificate Templates
AD CS provides the Certificate Templates snap-in (Certtmpl.msc), which provides the
following capabilities:
(…)
Configuring access control lists (ACLs) on certificate templates