Which of the following CA types must be deployed on domain-joined computers?

Which of the following CA types must be deployed on domain-joined computers?

A.
Enterprise root

B.
Enterprise subordinate

C.
Standalone root

D.
Standalone subordinate