Your network contains an Active Directory domain named contoso.com. Contoso.com contains  three servers.The servers are configure as shown in the following table.    Server name   Server roel Service  Server1                          Certification authority （CA）  Server2                         Certificate Enrollment Web Service  Server3                          Certificate Enrollment Policy Web Service  You need to ensure that users can manually enroll and renew their certificates by using the  Certificate Enrollment Web Service.    Which two actions should you perform（）

Your company has four offices.  The network contains a single Active Directory domain.  Each office has domain controller. Each office has an organitational unit （OU） that contains the  user accounts for the users in that office.  In each office， support technicians perform basic troubleshooting for the users in their respective  office.  You need to ensure that the support technicians can reset the password for the user accounts in  their respective office only. The solution must prevent the thechnicians from creating user  accounts.  What shoul you do（）

Your network contains an Active Directory forest. The forest contains an Acitve Directory site for a  remote office. The remote site contains a read-only domain controller （RODC）.    You need to configure the RODC to store only the password of users in the remote site.    What should you do（）

Your network contains an Active Directory forest. All domain controllers run Windows Server  2008 Standard. The functional level of the domain is Windows Server 2003. You have a  certification authority （CA）.  The relevant servers in the domain are configured as shown in the following table：    Server name  Operating system  Server role  Server1  Windows Server 2003  Enterprise root CA  Server2  Windows Server 2008  Enterprise subordinate CA  Server3  Windows Server 2008 R2  Web Server  You need to ensure that you can install the Active Directory Certificate Services （AD CS）  Certificate Enrollment Web Service on the network.    What should you do（）

You have an enterprise subordinate certification authority （CA）. You have a custom Version 3  certificate template.    Users can enroll for certificates based on the custom certificate template by using the Certificates  console.    The certificate template is unavailable for Web enrollment. You need to ensure that the certificate  template is available on the Web enrollment pages.    What should you do（）

You have an enterprise subordinate certification authority （CA）. You have a custom certificate  template that has a key length of 1，024 bits. The template is enabled for autoenrollment.    You increase the template key length to 2，048 bits.  You need to ensure that all current certificate holders automatically enroll for a certificate that  uses the new template.    Which console should you use（）

Your network contain 10 domain controller that run Windows Server    R2.  The network contain a member server that is configured to collect all of events that occur on the  domain controllers.  Your need to ensure that administrators are notified when a specific event occurs on any of the  domain controllers. You want to achive the goal by using the minimum amount effort.  What should you do（）

You need to receive an e-mail message whenever a domain user account is locked out.    Which tool should you use（）

Your network contains an Active Directory domain.  A user named User1 takes a leave of absence for one year.  You need to restrict access to the User1 user account while User1 is away.    What should you do（）

Your network contains an Active Directory domain named contoso.com. You have a management  computer named Computer1 that runs Windows 7.    You need to forward the logon events of all the domain controllers in contoso.com to Computer1.    All new domain controllers must be dynamically added to the subscription.  What should you do（）