Your network consists of one Active Directory domain. All domain controllers run Windows Server
2008 R2. You need to deploy Certificate Services on the network to support the following
requirements:
Maintain availability if a single server fails.
Dele gate the enrollment of certificates for separate groups of users.
Restrict the types of certificates that can be issued by a certificate manager.
What should you do?

A.
Deploy two servers that run Windows Server 2008 R2 Enterprise Edition. Configure a failover
cluster. Configure an enterprise certification authority (CA).

B.
Deploy two servers that run Windows Server 2008 Enterprise Edition. Configure a failover cluster.
Configure a stand-alone root certification authority (CA).

C.
Deploy two servers that run Windows Server 2008 Enterprise Edition. Configure an enterprise root
certification authority (CA) and a stand-alone subordinate CA.

D.
Deploy two servers that run Windows Server 2008 Standard Edition. Configure a stand-alone root
certification authority (CA) and an enterprise subordinate CA.

Explanation:
To deploy Certificate Services on the network and ensure that the server services are available if a
single server fails, you need to deploy two servers that run Windows Server 2008 Enterprise Edition
because Enterprise Edition of Windows Server 2008 should be used to configure failover clustering.
You need to deploy two servers to configure a failover cluster. You need to then configure a failover
cluster, so that the server services are available if a single server fails. Finally you need to configure
an enterprise certification authority (CA). You should use Enterprise CA because you need to use
certificates in the internal network and not in the external world.
Certificate Server / Enterprise CA
http://www.windowsitlibrary.com/Content/405/17/1.html
Windows Server 2008: Features by Edition / 8 Node Failover Clustering
http://uxevangelist.blogspot.com/2008/02/windows-server-2008-features-by-edition.html