Your network contains one Active Directory domain named contoso.com. The domain contains three users
named User1, User2, and User3.
You need to ensure that the users can log on to the domain by using the user principal names (UPNs) shown in
the following table.

What should you use?

A.
the Set-ADDomain cmdlet

B.
the Add-DNSServerSecondaryZone cmdlet

C.
the Setspn command

D.
the Set-ADUser cmdlet

Explanation:
The Set-ADUser cmdlet modifies the properties of an Active Directory user. You can modify commonly used
property values by using the cmdlet parameters.
Parameters include: UserPrincipalName
Each user account has a user principal name (UPN) in the format <user>@<DNS-domain-name>. A UPN is a
friendly name assigned by an administrator that is shorter than the LDAP distinguished name used by the
system and easier to remember. The UPN is independent of the user object’s DN, so a user object can be
moved or renamed without affecting the user logon name. When logging on using a UPN, users no longer have
to choose a domain from a list on the logon dialog box.
Incorrect answers:
Not A: The Set-ADDomain cmdlet modifies the properties of an Active Directory domain. You can modify
commonly used property values by using the cmdlet parameters.
Not B: The Add-DnsServerSecondaryZone cmdlet adds a specified secondary zone on a Domain Name
System (DNS) server.
Not C: Setspn reads, modifies, and deletes the Service Principal Names (SPN) directory property for an Active
Directory service account. You use SPNs to locate a target principal name for running a service. You can use
setspn to view the current SPNs, reset the account’s default SPNs, and add or delete supplemental SPNs.Reference: Technet, Set-ADUser
https://technet.microsoft.com/en-us/library/ee617215.aspx