You have a Windows Server 2008 R2 Enterprise Root CA . Security policy prevents port 443 and  port 80 from being opened on domain controllers and on the issuing CA .  
You need to allow users to request certificates from a Web interface. You install the Active  Directory Certificate Services （AD CS） server role.    
What should you do next（）

单项选择题You have a Windows Server 2008 R2 that has the Active Directory Certificate Services server  role installed.   You need to minimize the amount of time it takes for client computers to download a certificate  revocation list （CRL）.     What should you do（）

A.Install and configure an Online Responder.
B.Install and configure an additional domain controller.
C.Import the Root CA certificate into the Trusted Root Certification Authorities store on all client workstations.
D.Import the Issuing CA certificate into the Trusted Root Certification Authorities store on all client workstations.

单项选择题YourcompanyhasanActiveDirectoryforest.YouplantoinstallanEnterprisecertificationauthority（CA）onadedicatedstand-aloneserver. WhenyouattempttoaddtheActiveDirectoryCertificateServices（ADCS）serverrole，youfindthattheEnterpriseCAoptionisnotavailable. YouneedtoinstalltheADCSserverroleasanEnterpriseCA. Whatshouldyoudofirst（）

A.Add the DNS Server server role.
B.Join the server to the domain.
C.Add the Web Server （IIS） server role and the AD CS server role.
D.Add the Active Directory Lightweight Directory Services （AD LDS） server role.

单项选择题You have an Active Directory domain that runs Windows Server 2008 R2. You need to implement  a certification authority （CA） server that meets the following requirements：     - Allows the certification authority to automatically issue certificates  - Integrates with Active Directory Domain Services     What should you do（）

A.Install and configure the Active Directory Certificate Services server role as a Standalone Root CA .
B.Install and configure the Active Directory Certificate Services server role as an Enterprise Root CA .
C.Purchase a certificate from a third-party certification authority. Install and configure the Active Directory Certificate S
D.Purchase a certificate from a third-party certification authority. Import the certificate into the computer store of the sc

单项选择题Your network consists of a single Active Directory domain. All domain controllers run Windows  Server 2008 R2.     You need to capture all replication errors from all domain controllers to a central location.     What should you do（）

A.Configure event log subscriptions.
B.Start the System Performance data collector set.
C.Start the Active Directory Diagnostics data collector set.
D.Install Network Monitor and create a new capture.

单项选择题Your network consists of a single Active Directory domain.？ All domain controllers run Windows  Server 2008 R2.     You need to identify the Lightweight Directory Access Protocol （LDAP） clients that are using the  largest amount of available CPU resources on a domain controller.     What should you do（）

A.Review performance data in Resource Monitor.
B.Review the Hardware Events log in the Event Viewer.
C.Run the LAN Diagnostics Data Collector Set. Review the LAN Diagnostics report.
D.Run the Active Directory Diagnostics Data Collector Set. Review the Active Directory Diagnostics report