You network contains an Active Directory domain named contoso.com. The domain contains an
enterprise certification authority (CA) named CA1. You have a test environment that is isolated
physically from the corporate network and the Internet. You deploy a web server to the test
environment. On CA1, you duplicate the Web Server template, and you name the template
Web_Cert_Test. For the web server, you need to request a certificate that does not contain the
revocation information of CA1. What should you do first?

A.
From the properties of CA1, allow certificates to be published to the file system.

B.
From the properties of CA1, select Restrict enrollment agents, and then add Web_Cert_Test to the restricted
enrollment agent.

C.
From the properties of Web_Cert_Test, assign the Enroll permission to the guest account.

D.
From the properties of Web_Cert_Test, set the Compatibility setting of CA1 to Windows Server 2016.