What should you do first?

You network contains an Active Directory domain named contoso.com. The domain contains an enterprise certification authority (CA) named CA1.

You have a test environment that is isolated physically from the corporate network and the Internet.

You deploy a web server to the test environment. On CA1, you duplicate the Web Server template, and you name the template Web_Cert_Test.

For the web server, you need to request a certificate that does not contain the revocation information of CA1.

What should you do first?
A . From the properties of CA1, allow certificates to be published to the file system.
B . From the properties of CA1, select Restrict enrollment agents, and then add Web_Cert_Test to the restricted enrollment agent.
C . From the properties of Web_Cert_Test, assign the Enroll permission to the guest account.
D . From the properties of Web_Cert_Test, set the Compatibility setting of CA1 to Windows Server 2016.

View Answer

Answer: D