Explanation/Reference:
Explanation:
A: To specify CRL distribution points in issued certificates
Open the Certification Authority snap-in.

In the console tree, click the name of the CA.

On the Action menu, click Properties , and then click the Extensions tab. Confirm that Select

extension is set to CRL Distribution Point (CDP).
Do one or more of the following. (The list of CRL distribution points is in the Specify locations from

which users can obtain a certificate revocation list (CRL) box.)
/To indicate that you want to use a URL as a CRL distribution point Click the CRL distribution point, select the Include in the CDP extension of issued certificates check box, and then click OK .
Click Yes to stop and restart Active Directory Certificate Services (AD CS).

D: You can specify CRL Distribution Points (CDPs) in CAPolicy.inf. Note that any CDP in CAPolicy.inf will take precedence for certificate verifiers over the CDP's specified in the CA policy module.
Note:
CRLDistributionPoint
You can specify CRL Distribution Points (CDPs) for a root CA certificate in the CAPolicy.inf. This section does not configure the CDP for the CA itself. After the CA has been installed you can configure the CDP URLs that the CA will include in each certificate that it issues. The URLs specified in this section of the CAPolicy.inf file are included in the root CA certificate itself.
Example:
[CRLDistributionPoint]
URL=http://pki.wingtiptoys.com/cdp/WingtipToysRootCA.crl