单项选择题 YournetworkcontainsanActiveDirectorydomain.Therelevantserversinthedomainareconfiguredasshowninthefollowingtable： ServernameOperatingSystemServerroleServer1Windows2008Domaincontroller Server2Windows2008R2Enterpriserootcertificationauthority（CA） Server3Windows2008R2NetworkDeviceEnrollmentService（NDES） YouneedtoensurethatalldevicecertificaterequestsusetheMD5hashalgorithm. Whatshouldyoudo（）

单项选择题 Your network contains an Active Directory forest. All domain controllers run Windows Server 2008   Standard. The functional level of the domain is Windows Server 2003.  You have a certification authority （CA）.   The relevant servers in the domain are configured as shown in the following table.  Server name  Operating system  Server role   Server1  Windows Server 2003  Enterprise root CA  Server2  Windows Server 2008  Enterprise subordinate CA    Server3  Windows Server 2008 R2    Web Server   You need to ensure that you can install the Active Directory Certificate Services （AD CS） Certificate   Enrollment Web Service on the network.   What should you do（）

单项选择题 You have an enterprise subordinate certification authority （CA）.   You have a custom certificate template that has a key length of 1，024 bits. The template is enabled for  autoenrollment.   You increase the template key length to 2，048 bits.   You need to ensure that all current certificate holders automatically enroll for a certificate that uses the  new template.   Which console should you use（）