A.Import the enterprise root CA certificate.
B.Import the OCSP Response Signing certificate.
C.Add the Server1 computer account to the CertPublishers group.
D.Set the Startup Type of the Certificate Propagation service to Automatic.

A.Register Schmmgmt.dll.
B.Log off and log on again by using an account that is a member of the Schema Administrators group.
C.Use the Ntdsutil.exe command to connect to the Schema Master operations master and open the schema for writing.
D.Add the Active Directory Lightweight Directory Services （AD LDS） role to the domain controller by using Server Manager.

A.Site
B.Server
C.Domain
D.Connection object

A.Create a copy of the _msdcs.contoso.com zone on the DNS3 server.
B.Create a copy of the fabrikam.com zone on the DNS1 server and the DNS2 server.
C.Configure conditional forwarding on DNS3 to forward contoso.com queries to DNS1.
D.Configure conditional forwarding on DNS1 and DNS2 to forward fabrikam.com queries to DNS3.

A.Create a new forest trust and enable forest-wide authentication.
B.Raise the forest functional level of contoso.com to Windows Server 2008.
C.Raise the forest functional level of fabrikam.com to Windows Server 2008.
D.Raise the domain functional level of fabrikam.com to Windows Server 2008.

A.Create a NS record in the contoso.com zone.
B.Create a delegation in the contoso.com zone.
C.Create a standard secondary zone on a Global Catalog server.
D.Modify the properties of the SOA record in the contoso.com zone.

A.Create a new delegation in the ForestDnsZones application directory partition.
B.Create a new delegation in the DomainDnsZones application directory partition.
C.From the command prompt， run dnscmd and specify the /enlistdirectorypartition parameter.
D.From the command prompt， run dnscmd and specify the /createdirectorypartition parameter.

A.Run the Ntdsutil.exe > DS Behavior commands on DC3.
B.Run the Dnscmd.exe /ZoneResetType command on DC3.
C.Reinstall Active Directory Domain Services on DC3 as a writable domain controller.
D.Create a custom application directory partition on DC1. Configure the partition to store Active Directory- integrated zones.

A.Create and link a new GPO to the SecureServers organizational unit Configure the Audit privilege use Failure audit policy setting.
B.Create and link a new GPO to the SecureServers organizational unit Configure the Audit object access Failure audit policy setting.
C.Create and link a new GPO to the SecureServers organizational unit Configure the Deny access to this computer from the network user rights setting for the TempWorkers global group.
D.On each shared folder on the three file servers， add the three servers to the Auditing tab Configure the Failed Full control setting in the Auditing Entry dialog.
E.On each shared folder on the three file servers， add the TempWorkers global group to the Auditing tab Configure the Failed Full control setting in the Auditing Entry dialog box.

A.Set dynamic updates to Secure Only.
B.Enable zone transfers to Name Servers.
C.Remove the Authenticated Users group.
D.Deny the Everyone group the Create All Child Objects permission.

A.Configure the Enforce setting on the software deployment GPO.
B.Configure the Block Inheritance setting on the R&D organizational unit.
C.Configure the Block Inheritance setting on the Production organizational unit.
D.Configure security filtering on the Software Deployment GPO to Deny Apply group policy for the R&D security group.