How should you configure the CodeIntegrity template?

Your network contains an Active Directory domain named contoso.com. The domain contains a certification authority (CA).

You need to implement code integrity policies and sign them by using certificates issued by the CA.

You plan to use the same certificate to sign policies on multiple computers.

You duplicate the Code Signing certificate template and name the new template CodeIntegrity.

How should you configure the CodeIntegrity template?

A. Enable the Allow private key to be exported setting and modify the Key Usage extension.

B. Disable the Allow private key to be exported setting and modify the Application Policies extension.

C. Disable the Allow private key to be exported setting and disable the Basic Constraints extension.

D. Enable the Allow private key to be exported setting and enable the Basic Constraints extension

View Answer

Answer: D

Explanation:

References: https://blogs.technet.microsoft.com/ukplatforms/2017/05/04/create-code-integrity-signing­certificate/