Your network contains an Active Directory domain named contoso.com. The network has an Active
Directory Certificate Services (AD CS) infrastructure.
You need to issue a certificate to users to meet the following requirements:
Ensure that the users can encrypt files by using Encrypting File System (EFS).
Ensure that all of the users reenroll for their certificate every six months.
Solution: You create a copy of the User certificate template, and then you modify the extensions of
the copy.
Does this meet the goal?
A.
Yes
B.
No
A. Yes
User certificate template includes the following Enhanced key usage :
Encrypting File System
Secure Email
Client Authentication
Basic EFS certificate template includes:
Encrypting File System
0
0
Correction.
Given answer correct.
I missed auto renewal requirement.
0
0
Correct answer is B, No.
Re-enrollment is configured under the Properties tab of the template
https://technet.microsoft.com/en-us/library/cc755033(v=ws.11).aspx
0
0