Youhaveanenterprisesubordinatecertificationauthority（CA）configuredforkeyarchival.Threekeyrecoveryagentcertificatesareissued.TheCAisconfiguredtousetworecoveryagents.Youneedtoensurethatalloftherecoveryagentcertificatescanbeusedtorecoverallnewprivatekeys.Whatshouldyoudo（）
A.AddadatarecoveryagenttotheDefaultDomainPolicy.
B.ModifythevalueintheNumberofrecoveryagentstousebox.
C.Revokethecurrentkeyrecoveryagentcertificatesandissuethreenewkeyrecoveryagentcertificates.
D.AssigntheIssueandManageCertificatespermissiontouserswhohavethekeyrecoveryagentcertificates.
参考答案：B
