多项选择题
A.Configure auditing in the Certification Authority snap-in.
B.Enable auditing of successful and failed attempts to change permissions on files in the %SYSTEM32%\CertSrv dire
C.Enable auditing of successful and failed attempts to write to files in the %SYSTEM32%\CertLog directory.
D.Enable the Audit object access setting in the Local Security Policy for the Active Directory Certificate Services
单项选择题 You have a Windows Server 2008 R2 Enterprise Root CA . Security policy prevents port 443 and port 80 from being opened on domain controllers and on the issuing CA . You need to allow users to request certificates from a Web interface. You install the Active Directory Certificate Services （AD CS） server role. What should you do next（）
单项选择题 You have a Windows Server 2008 R2 that has the Active Directory Certificate Services server role installed. You need to minimize the amount of time it takes for client computers to download a certificate revocation list （CRL）. What should you do（）
单项选择题 YourcompanyhasanActiveDirectoryforest.YouplantoinstallanEnterprisecertificationauthority（CA）onadedicatedstand-aloneserver. WhenyouattempttoaddtheActiveDirectoryCertificateServices（ADCS）serverrole，youfindthattheEnterpriseCAoptionisnotavailable. YouneedtoinstalltheADCSserverroleasanEnterpriseCA. Whatshouldyoudofirst（）