You install a standalone root certification authority (CA)on a servernamed Server1.
You need to ensure that every computer in the forest has a copy of the root CA certificate installed in
the local computer’s Trusted Root Certification Authorities store.
Which command should you run on Server1?

A.
certreq.exe and specify the -accept parameter

B.
certreq.exe and specify the -retrieve parameter

C.
certutil.exe and specify the -dspublish parameter

D.
certutil.exe and specify the -importcert parameter

Explanation:
Reference:
http://technet.microsoft.com/en-us/library/cc732443.aspx
Certutil.exe is a command-line program that is installed as part of Certificate Services. You can use Certutil.exe
to dump and display certification authority (CA) configuration information, configure Certificate Services, back
up and restore CA components, and verify certificates, key pairs, and certificate chains.
Syntax
Certutil <-parameter> [-parameter]
Parameter
-dsPublish
Publish a certificate or certificate revocation list (CRL) to Active Directory