You have an enterprise subordinate certification authority （CA）. You have a custom certificate  template that has a key length of 1，024 bits. The template is enabled for autoenrollment.    
You increase the template key length to 2，048 bits.  
You need to ensure that all current certificate holders automatically enroll for a certificate that  uses the new template.    
Which console should you use（）

来源：考试资料网2018-07-27

You have an enterprise subordinate certification authority （CA）. You have a group named  Group1.    
You need to allow members of Group1 to publish new certificate revocation lists. Members of  Group1 must not be allowed to revoke certificates.    
What should you do（）

来源：考试资料网2018-07-27

You have Active Directory Certificate Services （AD CS） deployed. You create a custom certificate  template.  
You need to ensure that all of the users in the domain automatically enroll for a certificate based  on the custom certificate template.    
Which two actions should you perform（）

来源：考试资料网2018-07-27

You create a new Active Directory domain. The functional level of the domain is Windows Server  2003.    
The domain contains five domain controllers that run Windows Server 2008 R2.    
You need to monitor the replication of the group policy template files.    
Which tool should you use（）

来源：考试资料网2018-07-27

Your network contains an Active Directory domain named contoso.com. Contoso.com contains a  member server that runs Windows Serever 2008 Standart.  
You need to install an enterprise subordinate certification authority （CA） that support private key  archival. You must achieve this goal by using the minimum amount of administrative effort.
What do you do first（）

来源：考试资料网2018-07-27