HOTSPOT

Your network contains two Active Directory forests named contoso.com and fabrikam.com.
The contoso.com forest contains a server named Server1l that has the Certification Authority
role service installed.
You need to ensure that Windows 7 client computers in the fabrikam.com forest can enroll
for certificates from Server1. The solution must minimize the number of role services
installed on Server1.
Which additional role service or role services should you install?
To answer, select the appropriate role service or role services in the answer area.

Answer:

Explanation: