Your network contains an Active Directory domain named adatum.com.
The domain contains four servers. The servers are configured as shown in the following table.

You plan to deploy an enterprise certification authority (CA) on a server named Server5. Server5
will be used to issue certificates to domain-joined computers and workgroup computers.

You need to identify which server you must use as the certificate revocation list (CRL) distribution
point for Server5.
Which server should you identify?

A.
Server 3

B.
Server 2

C.
Server 4

D.
Server 1

Explanation:
A)
We cannot use AD DS because workgroup computers must access CRL distribution point
B)
We cannot use File Share because workgroup computers must access CRL distribution point
C)
Public facing web server can be used
D)
AD DS, Web & File Share only
http://technet.microsoft.com/en-us/library/cc771079.aspx