HOTSPOT
Your network contains an Active Directory forest named contoso.com.
The forest contains an enterprise certification authority (CA). The enterprise CA is
inaccessible from the internet.
You have a server named Server1 that runs Windows Server 2008 R2. Server1 is accessible
from the Internet. Server1 can communicate with the enterprise CA.
You need to ensure that laptops that are joined to the domain can renew their certificates
automatically from the Internet.
Which two role services should you install on Server1? (To answer, select the two
appropriate role services in the answer area.)

Answer:

Explanation: