Your network contains an Active Directory domain named contoso.com. Contoso.com
contains a member server that runs Windows Server 2008 R2 Standard.
You need to create an enterprise subordinate certification authority (CA) that can issue
certificates based on version 3 certificate templates.
You must achieve this goal by using the minimum amount of administrative effort.
What should you do first?

A.
Run the certutil.exe – addenrollmentserver command.

B.
Install the Active Directory Certificate Services (AD CS) role on the member server.

C.
Upgrade the member server to Windows Server 2008 R2 Enterprise.

D.
Run the certutil.exe – installdefaulttemplates command.