Exam 70-742 topic 1 question 198 discussion

Actual exam question from Microsoft's 70-742

Question #: 198
Topic #: 1

You deploy a new enterprise certification authority (CA) named CA1.
You plan to issue certificates based on the User certificate template.
You need to ensure that the issued certificates are valid for two years and support autoenrollment.
What should you do first?

A. Run the certutil.exe command and specify the resubmit parameter.
B. Duplicate the User certificate template.
C. Add a new certificate template for CA1 to issue.
D. Modify the Request Handling settings for the CA.

Show Suggested Answer

Suggested Answer: B 🗳️
The built-in templates to do support allow auto-enrollment. You need to duplicate the template then modify the permissions on the new template.
Reference:
https://www.mowasay.com/2017/06/pki-ca-manage-certificate-templates/

by paprda at Aug. 5, 2019, 7:17 p.m.

Comments

Submit Cancel

TMW

Highly Voted 5 years, 8 months ago

This appears to be correct, you open certificate authority, right click certificate templates folder, Manage, select the certificate you want to Duplicate, and rename it. The Auto enrollment step is performed in Group Policy editor The first step in the answer choices would be to duplicate the template.

upvoted 6 times

...

coleman

Highly Voted 5 years, 6 months ago

right , answer B is correct. The built-in version 1 template "User" was not modifiable, you have to duplicate it to a new template first to modify its configuration settings like validity and autoenrollment support.

upvoted 5 times

...

Kamikazekiller

Most Recent 4 years, 10 months ago

Answer is: B. Duplicate the User certificate template.

upvoted 1 times

...

paprda

5 years, 10 months ago

User B. User certificate temple is schema V1 dont have autoenrollment after duplication you get higher V and get autoenrollment

upvoted 1 times

...