Your network contains three Active Directory forest named Forest1， Forest2， and Forest3. Each  forest contains three domains.  A two-way forest trust exists between Forest1 and Forest2. A two-way forest trust exists between  Forest2 and Forest3.     You need to configure the forest to meet the following requirements    Users in Forest3 must be able to access resources in Forest1.  Users in Forest1 must be able to access resources in Forest3.  The number of trusts must be minimized.    What should you do（）

Your company has four offices.  The network contains a single Active Directory domain.  Each office has domain controller. Each office has an organitational unit （OU） that contains the  user accounts for the users in that office.  In each office， support technicians perform basic troubleshooting for the users in their respective  office.  You need to ensure that the support technicians can reset the password for the user accounts in  their respective office only. The solution must prevent the thechnicians from creating user  accounts.  What shoul you do（）

You have Active Directory Certificate Services （AD CS） deployed. You create a custom certificate  template.  You need to ensure that all of the users in the domain automatically enroll for a certificate based  on the custom certificate template.    Which two actions should you perform（）

You create a new Active Directory domain. The functional level of the domain is Windows Server  2008 R2.  The domain contains five domain controllers. You need to monitor the replication of the group  policy template files. Which tool should you use（）

You have an enterprise subordinate certification authority （CA）. You have a custom certificate  template that has a key length of 1，024 bits. The template is enabled for autoenrollment.    You increase the template key length to 2，048 bits.  You need to ensure that all current certificate holders automatically enroll for a certificate that  uses the new template.    Which console should you use（）

Your network contains an Active Directory domain named contoso.com. All domain controllers  and member servers run Windows Server 2008. All client computer run Windows 7.  From a client computer， you create an audit policy by using the Advanced Audit Policy  Configuration settings in the Default Domain Policy Group Policy object （GPO）.  You discover that the audit policy is not applied to the member servers.    The audit policy is  applied to the client computers.  You need to ensure that the audit policy is applied to all member servers and all client computers.    What should you do（）

You have an enterprise subordinate certification authority （CA）. You have a group named  Group1.    You need to allow members of Group1 to publish new certificate revocation lists. Members of  Group1 must not be allowed to revoke certificates.    What should you do（）

Your network contains an Active Directory forest. All domain controllers run Windows Server  2008 Standard. The functional level of the domain is Windows Server 2003. You have a  certification authority （CA）.  The relevant servers in the domain are configured as shown in the following table：    Server name  Operating system  Server role  Server1  Windows Server 2003  Enterprise root CA  Server2  Windows Server 2008  Enterprise subordinate CA  Server3  Windows Server 2008 R2  Web Server  You need to ensure that you can install the Active Directory Certificate Services （AD CS）  Certificate Enrollment Web Service on the network.    What should you do（）

You have a domain controller named Server1 that runs Windows Server 2008 R2.    You need to determine the size of the Active Directory database on Server1.    What should you do（）

Your network contains an Active Directory domain named contoso.com. You have a management  computer named Computer1 that runs Windows 7.    You need to forward the logon events of all the domain controllers in contoso.com to Computer1.    All new domain controllers must be dynamically added to the subscription.  What should you do（）