Exam 70-742 topic 1 question 208 discussion

Actual exam question from Microsoft's 70-742

Question #: 208
Topic #: 1

Your network contains an Active directory domain named contoso.com. The domain has an enterprise certification authority (CA).
You duplicate the Basic EFS template, and you name the template Template1.You configure the CA to issue Template1.
Users are configured to obtain a new certificate automatically when they sign in to a computer in the domain.
You need to enable the users to automatically obtain a certificate based on Template1.
What should you modify?

A. The Publication Settings for the CA.
B. The Security Settings for Template1.
C. The Request Handling properties for Template1.
D. The Request Handling properties for the CA.

Show Suggested Answer

Suggested Answer: B 🗳️

by mvthul at Dec. 6, 2019, 10:46 a.m.

Comments

Submit Cancel

Nhan

Highly Voted 5 years, 4 months ago

B is correct answer, go the the template security setting then click on advanced, then click on the user then click on edit and check autoenroll.

upvoted 13 times

lofzee

4 years, 5 months ago

you dont even need to go into advanced, just the security tab is fine.

upvoted 1 times

...

Dlam

Most Recent 4 years, 5 months ago

On exam

upvoted 2 times

...

[Removed]

5 years, 5 months ago

I believe that "C. The Request Handling properties for Template1" should be the correct answer. The security settings of Template 1 should be adjusted so that users are allowed to do autoenrollment, but this would be the second step. The first step is enabling autoenrollment under "Request Handling" by selecting "Enroll Subject without requiring any user input". The whole process is described here: https://docs.druva.com/Knowledge_Base/inSync/How_To/How_to_set_up_automatic_certificate_enrollment_in_Active_Directory

upvoted 1 times

Giles

5 years, 5 months ago

In the Basic EFS template, the Request Handling tab is used to select CSPs.

upvoted 2 times

...

coleman

5 years, 6 months ago

answer B. The Security Settings for Template1 is correct.

upvoted 3 times

...