You have an enterprise subordinate certification authority (CA).
You have a custom certificate template that has a key length of 1,024 bits. The template is enabled for
autoenrollment.
You increase the template key length to 2,048 bits.
You need to ensure that all current certificate holders automatically enroll for a certificate that uses the new
template.
Which console should you use?

A.
Group Policy Management MMC Snap-In

B.
Certificates MMC Snap-In on the Certificate Authority

C.
Certificate Templates MMC Snap-In

D.
Certification Authority MMC Snap-In

Explanation:
Practically the same question as F/Q13.
Reference:
http://technet.microsoft.com/en-us/library/cc771246.aspx
Re-Enroll All Certificate Holders
This procedure is used when a critical change is made to the certificate template and you want all subjects that
hold a certificate that is based on this template to re-enroll as quickly as possible. The next time the subject
verifies the version of the certificate against theversion of the template on the certification authority (CA), the
subject will re-enroll.
Membership in Domain Admins or Enterprise Admins, or equivalent, is the minimum required to complete this
procedure. For more information, see Implement Role-Based Administration.
To re-enroll all certificate holders
1. Open the Certificate Templates snap-in.
2. Right-click the template that you want to use, and then click Reenroll All Certificate Holders.