单项选择题
A.From the Default Domain Controllers Policy， modify the Enterprise Trust settings.
B.From the Default Domain Controllers Policy， modify the Trusted Publishers settings.
C.From the Default Domain Policy， modify the Certificate Enrollment policy.
D.From the Default Domain Policy， modify the Trusted Root Certification Authority settings.
单项选择题 Your network contains an Active Directory domain. You have a server named Server1 that runs Windows Server 2008 R2. Server1 is an enterprise root certification authority （CA）. You have a client computer named Computer1 that runs Windows 7. You enable automatic certificate enrollment for all client computers that run Windows 7. You need to verify that the Windows 7 client computers can automatically enroll for certificates. Which command should you run on Computer1（）
单项选择题 Your network contains an Active Directory domain. The relevant servers in the domain are configured as shown in the following table. You need to ensure that all device certificate requests use the MD5 hash algorithm. What should you do（）
单项选择题 Certkiller .com has a server that runs on Windows Server 2008. The server also has an instance of Active Directory Lightweight Directory Services （AD LDS） running. In order to test AD LDS， you need to replicate the AD LDS instance on a test computer located on the network. What should you do to achieve this objective（）