You have two servers named Server1 and Server2. Both servers run Windows Server 2008
R2. Server1 is configured as an enterprise root certification authority (CA).
You install the Online Responder role service on Server2.
You need to configure Server1 to support the Online Responder.
What should you do?

A.
Import the enterprise root CA certificate.

B.
Configure the Certificate Revocation List Distribution Point extension.

C.
Configure the Authority Information Access (AIA) extension.

D.
Add the Server2 computer account to the CertPublishers group.

Explanation:
http://technet.microsoft.com/en-us/library/cc732526.aspx
Configure a CA to Support OCSP Responders
To function properly, an Online Responder must have a valid Online Certificate Status
Protocol (OCSP)Response Signing certificate. This OCSP Response Signing certificate is
also needed if you are using a non-Microsoft OCSP responder.
Configuring a certification authority (CA) to support OCSP responder services includes the
following steps:
1. Configure certificate templates and issuance properties for OCSP Response Signing
certificates.
2. Configure enrollment permissions for any computers that will be hosting Online
Responders.
3. If this is a Windows Server 2003–based CA, enable the OCSP extension in issued
certificates.
4. Add the location of the Online Responder or OCSP responder to the authority information
access extension on the CA.
5. Enable the OCSP Response Signing certificate template for the CA.