Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain
Services (AD DS) domain named ABC.com. The network includes servers that run Windows Server 2012. All
client computers run Windows 7 Professional. A server named ABC-CA1 runs Certificate Services and is
configured as an Enterprise Certification Authority (CA) for the ABC.com domain. Company security policy
states that users should be able to log on to the network and encrypt their emails using smart cards. You want
to configure auto-enrollment for certificates that can be used for authentication and email encryption.
You plan to configure a domain-wide group policy object (GPO) to enable the auto-enrollment.
What should you do first?

A.
You should duplicate the Computer certificate template and then publish the duplicated template.

B.
You should duplicate the User certificate template and then publish the duplicated template.

C.
You should duplicate the Smart Card Logon certificate template and then publish the duplicated template.

D.
You should duplicate the Smart Card User certificate template and then publish the duplicated template.