Your network contains an Active Directory domain named contoso.com. Contoso.com contains a  member server that runs Windows Serever 2008 Standart.  You need to install an enterprise subordinate certification authority （CA） that support private key  archival. You must achieve this goal by using the minimum amount of administrative effort.What do you do first（）

Your network contains an Active Directory forest. The forest contains two domains. You have a  standalone root certification authority （CA）.    On a server in the child domain， you run the Add Roles Wizard and discover that the option to  select an enterprise CA is disabled.    You need to install an enterprise subordinate CA on the server.    What should you use to log on to the new server（）

Your network contains three Active Directory forest named Forest1， Forest2， and Forest3. Each  forest contains three domains.  A two-way forest trust exists between Forest1 and Forest2. A two-way forest trust exists between  Forest2 and Forest3.     You need to configure the forest to meet the following requirements    Users in Forest3 must be able to access resources in Forest1.  Users in Forest1 must be able to access resources in Forest3.  The number of trusts must be minimized.    What should you do（）

Your network contains an Active Directory domain named contoso.com. Contoso.com contains  three servers.The servers are configure as shown in the following table.    Server name   Server roel Service  Server1                          Certification authority （CA）  Server2                         Certificate Enrollment Web Service  Server3                          Certificate Enrollment Policy Web Service  You need to ensure that users can manually enroll and renew their certificates by using the  Certificate Enrollment Web Service.    Which two actions should you perform（）

Your network contains a single Active Directory domain named contoso.com.    An administrator accidentally deletes the _msdsc.contoso.com zone.  You recreate the _msdsc.contoso.com zone.    You need to ensure that the _msdsc.contoso.com zone contains all of the required DNS records.    What should you do on each domain controller（）

Your network contains an Active Directory domain controller named DC1. DDC1 runs Windows  Server 2008 R2.  You need to defragment the Active Directory database on DC1. The solution must minimize  downtime on DC1.    What should you do first（）

Your network contains an Active Directory domain that has two sites.    You need to identify whether logon scripts are replicated to all domain controllers.    Which folder should you verify（）

Your network contains an Active Directory domain named contoso.com. You have a management  computer named Computer1 that runs Windows 7.    You need to forward the logon events of all the domain controllers in contoso.com to Computer1.    All new domain controllers must be dynamically added to the subscription.  What should you do（）

Your network contains an Active Directory domain named contoso.com. All domain controllers  and member servers run Windows Server 2008. All client computer run Windows 7.  From a client computer， you create an audit policy by using the Advanced Audit Policy  Configuration settings in the Default Domain Policy Group Policy object （GPO）.  You discover that the audit policy is not applied to the member servers.    The audit policy is  applied to the client computers.  You need to ensure that the audit policy is applied to all member servers and all client computers.    What should you do（）

You have an enterprise subordinate certification authority （CA）. You have a custom certificate  template that has a key length of 1，024 bits. The template is enabled for autoenrollment.    You increase the template key length to 2，048 bits.  You need to ensure that all current certificate holders automatically enroll for a certificate that  uses the new template.    Which console should you use（）