YournetworkcontainsanActiveDirectorydomainnamedcontoso.com.Contoso.comcontainsamemberserverthatrunsWindowsSerever2008Standart.Youneedtoinstallanenterprisesubordinatecertificationauthority（CA）thatsupportprivatekeyarchival.Youmustachievethisgoalbyusingtheminimumamountofadministrativeeffort.Whatdoyoudofirst（）
A.InitializetheTrustedPlatformModule（TPM）
B.UpgradethemenberservertoWindowsServer2008R2Standard.
C.InstalltheCertificateEnrollmentPolicyWebServiceroleserviceonthememberserver.
D.RuntheSecurityConfigurationWizard（SCW）andselecttheActiveDirectoryCertificateServices-Certification

A.DesignacustomIPSecpolicytoimplementEncapsulatingSecurityPayload（ESP）forallIPtrafficDesigntheIPSecpolicytousecertificate-basedauthenticationbetweenthetwodepartments’computers
B.DesignacustomerIPSecpolicytoimplementAuthenticationHeader（AH）forallIPtraffic.DesingtheIPSecpolicytousepresharedkeyauthenticationbetweenthetwodepartments’computers
C.DesignacustomerIPSecpolicytoimplementEncapsulatingPayload（ESP）forallIPtraffic.DesingtheIPSecpolicytousepresharedkeyauthenticationbetweenthetwodepartments’computers
D.DesignacustomerIPSecpolicytoimplementAuthenticationHeader（AH）forallIPtraffic.DesingtheIPSecpolicytousecertificate-basedauthenticationbetweenthetwodepartments’computers

A.Server1hasaservercertificatefromatrustedauthorityinstalled.AllTerminalServicesclientshavetheRDPclientversion5.2installed.YouneedtoensurethatallTerminalServicesconnectionstoServer1useTransportLayerSecurity.Whatshouldyoudo？（）
A.InTerminalServicesConfiguration，changethepermissionsforRemoteDesktopUserstoFullControl.
B.InTerminalServicesConfiguration，changethesecuritylayersettingtoNegotiateandsettheencryptionleveltoHigh.
C.InLocalSecurityPolicy，enableDomainMember：Requirestrong（Windows2000orlater）sessionkey.
D.InLocalSecurityPolicy，enableDomainMember：Digitallyencryptorsignsecurechanneldata（always）.