Your network contains an Active Directory domain named contoso.com. The domain
contains two member servers named Server1 and Server2.
You configure Server1 as a standalone root certification authority (CA).
You identify the following requirements for the public key infrastructure (PKI):
The root CA must be offline once the PKI is deployed.
Users must be able to enroll for certificates automatically.
You need to configure Server2 to meet the PKI requirements.
What should you configure on Server2?

A.
A standalone subordinate CA
B.A standalone root CA
C.An enterprise subordinate CA
D.An enterprise root CA