Your network contains an Active Directory forest named contoso.com. The forest contains a single domain. The
domain contains a server named Server1.
An administrator named Admin01 plans to configure Server1 as a standalone certification authority (CA).
You need to identify to which group Admin01 must be a member to configure Server1 as a standalone CA. The
solution must use the principle of least privilege.To which group should you add Admin01?

A.
Administrators on Server1.

B.
Domain Admins in contoso.com

C.
Cert Publishers on Server1

D.
Key Admins in contoso.com