Your network contains an Active Directory domain named adatum.com.
The domain contains four servers. The servers are configured as shown in the following table.

You plan to deploy an enterprise certification authority (CA) on a server named Server5. Server5 will be used to
issue certificates to domain-joined computers and workgroup computers.
You need to identify which server you must use as the certificate revocation list (CRL) distribution point for
Server5.
Which server should you identify?

A.
Server 3

B.
Server 2

C.
Server 4

D.
Server 1

Explanation:
A:
We cannot use AD DS because workgroup computers must access CRL distribution point
B:
We cannot use FileShare because workgroup computers must access CRL distribution point
C:
Public facing web server can beused
D:
AD DS, Web & File Share only
http://technet.microsoft.com/en-us/library/cc771079.aspx