单项选择题
A.On DC1 and DC2， configure a trust anchor.
B.On DC1 and DC2， configure a connection security rule.
C.On DC1， configure the zone transfer settings.
D.On DC1， configure the zone to be stored in Active Directory.
多项选择题 You have two servers named Server1 and Server2. Both servers run Windows Server 2008 R2. Server1 is configured as an Enterprise Root certification authority （CA）. You install the Online Responder role service on Server2. You need to configure Server2 to issue certificate revocation lists （CRLs） for the enterprise root CA. Which two tasks should you perform（）
单项选择题 Your company has an Active Directory domain. You have a two-tier PKI infrastructure that contains an offline root CA and an online issuing CA. The Enterprise certification authority is running Windows Server 2008 R2. You need to ensure users are able to enroll new certificates. What should you do（）
单项选择题 Your company has an Active Directory domain. All servers run Windows Server 2008 R2. Your company uses an Enterprise Root certificate authority （CA）. You need to ensure that revoked certificate information is highly available. What should you do（）