Your network contains an Active Directory forest. All domain controllers run Windows Server  2008 Standard. The functional level of the domain is Windows Server 2003. You have a  certification authority （CA）.  The relevant servers in the domain are configured as shown in the following table：    Server name  Operating system  Server role  Server1  Windows Server 2003  Enterprise root CA  Server2  Windows Server 2008  Enterprise subordinate CA  Server3  Windows Server 2008 R2  Web Server  You need to ensure that you can install the Active Directory Certificate Services （AD CS）  Certificate Enrollment Web Service on the network.    What should you do（）

You create a new Active Directory domain. The functional level of the domain is Windows Server  2003.    The domain contains five domain controllers that run Windows Server 2008 R2.    You need to monitor the replication of the group policy template files.    Which tool should you use（）

Your company has four offices.  The network contains a single Active Directory domain.  Each office has domain controller. Each office has an organitational unit （OU） that contains the  user accounts for the users in that office.  In each office， support technicians perform basic troubleshooting for the users in their respective  office.  You need to ensure that the support technicians can reset the password for the user accounts in  their respective office only. The solution must prevent the thechnicians from creating user  accounts.  What shoul you do（）

Your network contains a single Active Directory domain named contoso.com.    An administrator accidentally deletes the _msdsc.contoso.com zone.  You recreate the _msdsc.contoso.com zone.    You need to ensure that the _msdsc.contoso.com zone contains all of the required DNS records.    What should you do on each domain controller（）

You need to receive an e-mail message whenever a domain user account is locked out.    Which tool should you use（）

Your network contains an Active Directory domain named contoso.com. Contoso.com contains a  member server that runs Windows Serever 2008 Standart.  You need to install an enterprise subordinate certification authority （CA） that support private key  archival. You must achieve this goal by using the minimum amount of administrative effort.What do you do first（）

Your network contains an Active Directory domain named contoso.com. The domain contains five  domain controllers.You add a logoff script to an existing Group Policy object （GPO）. You need to verify that each  domain controller successfully replicates the updated group policy.    Which two objects should you verify on each domain controller（）

Your network contains three Active Directory forest named Forest1， Forest2， and Forest3. Each  forest contains three domains.  A two-way forest trust exists between Forest1 and Forest2. A two-way forest trust exists between  Forest2 and Forest3.     You need to configure the forest to meet the following requirements    Users in Forest3 must be able to access resources in Forest1.  Users in Forest1 must be able to access resources in Forest3.  The number of trusts must be minimized.    What should you do（）

Your network contains an Active Directory forest. The forest contains two domains. You have a  standalone root certification authority （CA）.    On a server in the child domain， you run the Add Roles Wizard and discover that the option to  select an enterprise CA is disabled.    You need to install an enterprise subordinate CA on the server.    What should you use to log on to the new server（）

What should you do()