Identity with Windows Server 2016 — Question 40

Which of the following CA types would you deploy if you wanted to deploy a CA at the top of a hierarchy that could issue signing certificates to other CAs and which would be taken offline if not issuing, renewing, or revoking signing certificates?

Answer options

• A. Enterprise root
• B. Enterprise subordinate
• C. Standalone root
• D. Standalone subordinate

Correct answer: C

Explanation

The correct answer is C, Standalone root, as it is designed to be the top-level CA and can issue certificates to other CAs, while being taken offline when not in use. The other options, such as Enterprise root and subordinate CAs, are typically used in different contexts and setups, not suited for the specified hierarchical role.