You have two servers named Server1 and Server2. Both servers run Windows Server 2008 R2. Server1 is
configured as an enterprise root certification authority (CA).
You install the Online Responder role service on Server2.
You need to configure Server1 to support the OnlineResponder.
What should you do?

A.
Import the enterprise root CA certificate.
B.
Configure the Certificate Revocation List Distribution Point extension.
C.
Configure the Authority Information Access (AIA) extension.
D.
Add the Server2 computer account to the CertPublishers group.
Explanation:
Reference:
http://technet.microsoft.com/en-us/library/cc732526.aspx
Configure a CA to Support OCSP Responders
To function properly, an Online Responder must havea valid Online Certificate Status Protocol (OCSP)
Response Signing certificate. This OCSP Response Signing certificate is also needed if you are using anon-Microsoft OCSP responder.
Configuring a certification authority (CA) to support OCSP responder services includes the following steps:
1. Configure certificate templates and issuance properties for OCSP Response Signing certificates.
2. Configure enrollment permissions for any computers that will be hosting Online Responders.
3. If this is a Windows Server 2003based CA, enablethe OCSP extension in issued certificates.
4. Add the location of the Online Responder or OCSP responder to the authority information access
extension on the CA.
5. Enable the OCSP Response Signing certificate template for the CA.