Your network contains an Active Directory domain named contoso.com. Contoso.com contains a  member server that runs Windows Serever 2008 Standart.  
You need to install an enterprise subordinate certification authority （CA） that support private key  archival. You must achieve this goal by using the minimum amount of administrative effort.
What do you do first（）

Your network contains an Active Directory domain named contoso.com. Contoso.com contains  three servers.The servers are configure as shown in the following table.    
Server name   Server roel Service  
Server1                          Certification authority （CA）  
Server2                         Certificate Enrollment Web Service  Server3                          Certificate Enrollment Policy Web Service  
You need to ensure that users can manually enroll and renew their certificates by using the  Certificate Enrollment Web Service.    
Which two actions should you perform（）

Your network contains two Active Directory forests named contoso.com and    nwtraders.com. A  two-way forest trust exists between contoso.com and nwtraders.com. The forest trust is  configured to use selective authentication.  
Contoso.com contains a server named Server1. Server1 contains a shared folder named  Marketing. Nwtraders.com contains a global group named G_Marketing. The Change share  permission and the Modify NTFS permissions for the Marketing folder are assignes to the  G_Marketing group.  
Members of G_Marketing report that they cannot accesss the Marketing folder.  
You need to ensure that the G_Marketing members can accesss the folder from the network.    
What should you do（）

Your network contains an Active Directory domain. The domain contains 1000 user accounts.  You have a list that contains the mobile phone number of each user  You need to add the mobile number of each user to Active Directory.    
What should you do（）

Your network contains an Active Directory domain named contoso.com. All domain controllers  and member servers run Windows Server 2008. All client computer run Windows 7.  From a client computer， you create an audit policy by using the Advanced Audit Policy  Configuration settings in the Default Domain Policy Group Policy object （GPO）.  
You discover that the audit policy is not applied to the member servers.    The audit policy is  applied to the client computers.  
You need to ensure that the audit policy is applied to all member servers and all client computers.    
What should you do（）

Your network contains an Active Directory domain controller named DC1. DDC1 runs Windows  Server 2008 R2.  
You need to defragment the Active Directory database on DC1. The solution must minimize  downtime on DC1.    
What should you do first（）

Your network contain 10 domain controller that run Windows Server    R2.  
The network contain a member server that is configured to collect all of events that occur on the  domain controllers.  
Your need to ensure that administrators are notified when a specific event occurs on any of the  domain controllers. You want to achive the goal by using the minimum amount effort.  
What should you do（）

Your network contains an Active Directory domain.  
A user named User1 takes a leave of absence for one year.  
You need to restrict access to the User1 user account while User1 is away.    
What should you do（）

Your network contains an Active Directory domain. The domain contains a group named Group1.  The minimum password lenght for the domain is set to six characters.  
you need to ensure that the passwords for all users in Group1 are at least 10 characters long. All  other users must be able to use passwords that are six characters long.    
What should you do first（）

Your network contains an Active Directory forest. All domain controllers run Windows Server  2008 Standard. The functional level of the domain is Windows Server 2003. You have a  certification authority （CA）.  
The relevant servers in the domain are configured as shown in the following table：    
Server name  Operating system  Server role  
Server1  Windows Server 2003  Enterprise root CA  Server2  Windows Server 2008  Enterprise subordinate CA  Server3  Windows Server 2008 R2  Web Server  
You need to ensure that you can install the Active Directory Certificate Services （AD CS）  Certificate Enrollment Web Service on the network.    
What should you do（）

You have an enterprise subordinate certification authority （CA）. You have a custom certificate  template that has a key length of 1，024 bits. The template is enabled for autoenrollment.    
You increase the template key length to 2，048 bits.  
You need to ensure that all current certificate holders automatically enroll for a certificate that  uses the new template.    
Which console should you use（）