Which setting should you modify?

HOTSPOT
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2. Server1 has the Active Directory Certificate Services server role installed and configured.
For all users, you are deploying smart cards for logon. You are using an enrollment agent to enroll the smart card certificates for the users.
You need to configure the Contoso Smartcard Logon certificate template to support the use of the enrollment agent.
Which setting should you modify? To answer, select the appropriate setting in the answer area.
Hot Area:

Correct Answer:

Explanation/Reference:
/ In application policy drop-down list select Certificate Request Agent. / The Issuance Requirements Tab
* Application policy. This option specifies the application policy that must be included in the signing certificate used to sign the certificate request. It is enabled when
Policy type required in signature is set to either Application policy or Both application and issuance policy.
Reference: Administering Certificate Templates
http://technet.microsoft.com/en-us/library/cc725621(v=WS.10)