You install a standalone root certification authority (CA) on a server named Server1.
You need to ensure that every computer in the forest has a copy of the root CA certificate
installed in the local computer’s Trusted Root Certification Authorities store.
Which command should you run on Server1?
A.
certreq.exe and specify the -accept parameter
B.
certreq.exe and specify the -retrieve parameter
C.
certutil.exe and specify the -dspublish parameter
D.
certutil.exe and specify the -importcert parameter
Explanation:
http://technet.microsoft.com/en-us/library/cc732443.aspx
Certutil.exe is a command-line program that is installed as part of Certificate Services. You
can use Certutil.exe to dump and display certification authority (CA) configuration
information, configure Certificate Services, back up and restore CA components, and verify
certificates, key pairs, and certificate chains.
Syntax
Certutil <-parameter> [-parameter]Parameter
-dsPublish
Publish a certificate or certificate revocation list (CRL) to Active Directory