You need to design a PKI for the Northwind Traders internal network. What should you do?

A.
Add an enterprise root CA to the northwindtraders.com domain. Configure cross-certification between the northwindtraders.com domain and the boston.northwindtraders.com domain.

B.
Add an enterprise subordinate issuing CA to the northwindtraders.com domain. Configure qualified subordination for the enterprise subordinate issuing CA in Boston.

C.
Add enterprise subordinate issuing CAs to the New York, Boston, and Seattle LANs.
Configure qualified subordinations for each enterprise subordinate issuing CA.

D.
Add a stand-alone commercial issuing CA to only the northwindtraders.com domain.
Configure crosscertification between the commercial CA and the boston.northwindtraders.com domain.