70-640 Questions Answers

 QUESTION : 10

Your network contains an Active Directory domain named contoso.com. The domain contains an enterprise certification authority (CA). You plan to delegate certificate enrollment for Smartcard Logon certificates to a user named User1. User1 is the member of a group named CONTOSO\DelegatedAdmins. You need to recommend a solution to provide User1 with the ability to enroll for Smartcard Logon certificates on behalf of other domain users. What should you include in the recommendation?

A. Duplicate the Smartcard Logon certificate template. Modify the Extensions settings and the Request Handling settings of the new template.
B. Modify the Issuance Requirements settings and the Security settings of the Smartcard Logon certificate template.
C. Modify the Extensions settings and the Request Handling settings of the Smartcard Logon certificate template.
D. Duplicate the Smartcard Logon certificate template. Modify the Issuance Requirements settings and the Security settings of the new template.

Answer : D