YourcompanyhasanActiveDirectorydomain.YouplantoinstalltheActiveDirectoryCertificateServices(ADCS)serverroleonamemberserverthatrunsWindowsServer2008R2.YouneedtoensurethatmembersoftheAccountOperatorsgroupareabletoissuesmartcardcredentials.Theyshouldnotbeabletorevokecertificates.Whichthreeactionsshouldyouperform()
A.InstalltheADCSserverroleandconfigureitasanEnterpriseRootCA.
B.InstalltheADCSserverroleandconfigureitasaStandaloneCA.
C.RestrictenrollmentagentsfortheSmartcardlogoncertificatetotheAccountOperatorgroup.
D.RestrictcertificatemanagersfortheSmartcardlogoncertificatetotheAccountOperatorgroup.
E.CreateaSmartcardlogoncertificate.
F.CreateanEnrollmentAgentcertificate.