You administer your company’s Windows 2003 network. The network consists of 25 Windows
Server 2003 computers. The network contains an offline root Certification Authority (CA) located in
the main office and a subordinate issuing CA in the main office and each of the remaining four
retail locations.
One of the four retail locations has been purchased and will operate as a franchise. You must
ensure that resources on the company network will not accept certificates from the associated
subordinate CA in this retail location after the sale is completed. Your solution must use a
minimum amount of administrative effort.
What should you do? (Choose three. Each correct answer presents part of the solution.)

A.
On the company’s root CA, revoke the certificate of the subordinate CA.

B.
Disconnect the subordinate CA from the network.

C.
On the subordinate CA, remove the CA software and remove the CA files.

D.
On the subordinate CA, revoke the certificates that it has issued.

E.
Publish a new Certificate Revocation List.

F.
Copy the Edb.log file from the root CA to its Certification Distribution Point on your network.

G.
Copy the Edb.log file from the subordinate CA to its Certification Distribution Point on your
network.

H.
Copy the Certificate Revocation List file to the Certificate Distribution Point on your network.