Your network contains an enterprise certification authority (CA) that runs Windows Server 2008 R2 Enterprise.
You have a custom certificate template named Template 1. Template1 is published to the CA.
You need to ensure that all of the members of a group named Group1 can enroll for certificates that use
Template1.
Which snap-in should you use?

A.
Security Templates

B.
Enterprise PKI

C.
Certification Authority

D.
Certificate Templates

E.
Certificates

F.
TPM Management

G.
Authorization Manager

H.
Group Policy Management

I.
Active Directory Users and Computers

Explanation:
Reference:
MCTS 70-640 Cert Guide: Windows Server 2008 Active Directory, Configuring (Pearson IT Certification, 2010)
page 593
Configuring Certificate Templates
AD CS provides the Certificate Templates snap-in(Certtmpl.msc), which provides the following capabilities:
(…)
Configuring access control lists (ACLs) on certificate templates