Your company has a single Active Directory directory service domain. All servers in your environment run Windows Server 2003. You are designing a public key infrastructure (PKI) that uses Certificate Services. You have the following requirements. The root certification authority (CA) must be offline unless maintenance is required. You must use certificate templates. You need to specify the CA types to use in your PKI.

Which two types should you specify? (Each correct answer presents part of the solution. Choose two.)

A.
an Enterprise root CA

B.
a Stand-alone root CA

C.
an Enterprise issuing CA

D.
a Stand-alone issuing CA