EXERCISE 12.01.E XERCISE 12.03R EQUESTING A C ERTIFICATE FROM A W EB S...

11. You are the CA administrator for your branch office and want to have greater controlover your certificate managers.Your plan is to have each manager manage certificatesover a different Active Directory group, but you do not want to give any manager thecapability to renew the CA’s certificate.What is your best course of action?A. In the Certification Authority snap-in, use the Securitytab of the CA’s prop-erty sheet to configure manager restrictions.B. Using the Certificate Templatessnap-in, right-click the Certificate Templatescontainer, and choose Properties. On the Securitytab, give the CertificateManagers group the Issue and Manage Certificates permission.C. In the Certification Authority snap-in, use the Certificate ManagersRestrictions tab of the CA’s property sheet and choose the Restrict certificatemanagers option.D. It cannot be done.