单项选择题 You have an enterprise subordinate certification authority （CA） configured for key archival. Three  key recovery agent certificates are issued.  The CA is configured to use two recovery agents.     You need to ensure that all of the recovery agent certificates can be used to recover all new  private keys.     What should you do（）

单项选择题 You have an enterprise subordinate certification authority （CA）. You have a group named  Group1.     You need to allow members of Group1 to publish new certificate revocation lists. Members of  Group1 must not be allowed to revoke certificates.     What should you do（）

单项选择题 Your network contains an Active Directory forest. The forest contains two domains. You have a  standalone root certification authority （CA）.     On a server in the child domain， you run the Add Roles Wizard and discover that the option to  select an enterprise CA is disabled.     You need to install an enterprise subordinate CA on the server.     What should you use to log on to the new server（）