You work as a Network Administrator for NetTech Inc. The company has a Windows Server 2008 Active Directory-based single

[answerhappygod]

You work as a Network Administrator for NetTech Inc. The company has a Windows Server 2008 Active Directory-based single domain single forest network. The company's network is connected to the Internet through a T1 line. The firewall is configured on the network for securing the internal network from the intruders on the Internet. You are designing a public key infrastructure (PKI) for the network. The network will use a root enterprise certificate authority (CA) and two subordinate CAs. The root CA will be used to issue certificates to the subordinate CAs, and the subordinate CAs will be used to issue certificates to the clients.
The security policy of the company dictates that the security of high-level CAs should not be compromised. Which of the following steps will you take to implement the security policy of the company?

A. Take the root enterprise CA offline after it issues certificates to its subordinate CAs.
B. Place all CA servers in a locked room.
C. Take subordinate CAs offline after they get their certificates from the root CA.
D. Configure a firewall on the network.