Your network contains an Active Directory domain named contoso.com. Contoso.com contains  three servers.The servers are configure as shown in the following table.    
Server name   Server roel Service  
Server1                          Certification authority （CA）  
Server2                         Certificate Enrollment Web Service  Server3                          Certificate Enrollment Policy Web Service  
You need to ensure that users can manually enroll and renew their certificates by using the  Certificate Enrollment Web Service.    
Which two actions should you perform（）

Your network contains two Active Directory forests named contoso.com and    nwtraders.com. A  two-way forest trust exists between contoso.com and nwtraders.com. The forest trust is  configured to use selective authentication.  
Contoso.com contains a server named Server1. Server1 contains a shared folder named  Marketing. Nwtraders.com contains a global group named G_Marketing. The Change share  permission and the Modify NTFS permissions for the Marketing folder are assignes to the  G_Marketing group.  
Members of G_Marketing report that they cannot accesss the Marketing folder.  
You need to ensure that the G_Marketing members can accesss the folder from the network.    
What should you do（）