Your network contains an Active Directory domain named contoso.com. The domain contains a server named
Server1 that runs Windows Server 2012 R2. Server1 has the Active Directory Certificate Services server role
installed and configured.
For all users, you are deploying smart cards for logon. You are using an enrollment agent to enroll the smart
card certificates for the users.
You need to configure the Contoso Smartcard Logon certificate template to support the use of the enrollment
agent.
Which setting should you modify? To answer, select the appropriate setting in the answer area.
Point and Shoot:
Answer: 
Explanation:
http://social.technet.microsoft.com/Forums/en-US/winserversecurity/thread/162e1108-bd46-4b2b-9ea0-
4fff8949a810
http://technet.microsoft.com/en-us/library/cc725621(v=WS.10).aspx
In application policy drop-down list select Certificate Request Agent
Application policy. This option specifies the application policy that must be included in the signing certificate used to sign the certificate request. It is enabled when Policy type required in signature is set to either Application policy or Both application and issuance policy.
Answer is correct
7
0