Your network contains an Active Directory forest named contoso.com. The forest contains a single
domain. The domain contains a server named Server1. An administrator named Admin01 plans to
configure Server1 as a standalone certification authority (CA). You need to identify to which group
Admin01 must be a member to configure Server1 as a standalone CA. The solution must use the
principle of least privilege. To which group should you add Admin01?

A.
Administrators on Server1.

B.
Domain Admins in contoso.com

C.
Cert Publishers on Server1

D.
Key Admins in contoso.com