What should you do to manage certificate settings on all machines in a domain from one main location?

ABC.com has a domain controller that runs Windows Server 2008. The ABC.com network
boasts 40 Windows Vista client machines.
As an administrator at ABC.com, you want to deploy Active Directory Certificate service (AD
CS) to authorize the network users by issuing digital certificates.
What should you do to manage certificate settings on all machines in a domain from one
main location?

A.
Configure Enterprise CA certificate settings

B.
Configure Enterprise trust certificate settings

C.
Configure Advance CA certificate settings

D.
Configure Group Policy certificate settings

E.
All of the above

Explanation:
http://technet.microsoft.com/en-us/library/cc725911.aspx

AD CS: Policy Settings
In the Windows Server® 2008 operating system, certificate-related Group Policy settings
enable administrators to manage certificate validation settings according to the security
needs of the organization.
What are certificate settings in Group Policy?
Certificate settings in Group Policy enable administrators to manage the certificate settings
on all the computers in the domain from a central location.