1. Which of the following roles must be available on a network to implement an Enterprise CA that supports web enrollment? (Choose all that apply.)
   1. DNS server
   2. Active Directory Domain Services
   3. Certificate Services
   4. Web server
2. Which of the following statements is considered a recommended configuration or best practice for Active Directory Certificate Services? (Choose all that apply.)
   1. Protect encrypted data from loss by configuring key archival and recovery for EFS certificates.
   2. Avoid placing certificates on smart cards because loss of the smart card requires initiating the certificate revocation processes.
   3. Enhance certificate revocation checking by setting up an online responder.
   4. Enhance wireless network security by requiring certificates for authentication and encryption.
3. The private key created in Step 32 of this lab will be duplicated on every digital signature or digital certificate issued by the CA. (True or False)?
4. Which of the following statements regarding Windows Server 2016 certificate authorities is correct?
   1. An enterprise CA requires users to request certificates.
   2. A stand-alone CA cannot automatically approve requests for certificates.
   3. An enterprise CA is integrated with the NWLink service.
   4. A stand-alone CA is integrated with Active Directory Domain Services.