You are an Enterprise administrator for contoso.com. The corporate network of the company consists of a single Active Directory forest called contoso.com. The forest contains five domains. The domain controllers on the network run Windows Server 2008 and have the DNS server role installed.
You company has decided to replace a legacy Windows Internet Name Service (WINS) environment with a DNS-only environment for name resolution.
Which of the following options would you choose to plan the infrastructure for name resolution to support IPv4 and IPv6 environments, enable single-label name resolution across all domains, and minimizing the amount of NetBIOS over TCP/IP (NetBT) traffic on the network?

You are an Enterprise administrator for contoso.com. The company consists of a head office and three branch offices. The corporate network of the company consists of a single Active Directory domain.
Each office contains an Active Directory domain controller. Which of the following options would you choose to create a DNS infrastructure for the network that would allow the client computers in each office to register DNS names within their respective offices? You also need to ensure that the client computers must be able to resolve names for hosts in all offices.

You are an Enterprise administrator for contoso.com. The corporate network of the company consists of a single Active Directory forest called contoso.com. The forest contains two domains. You want to configure another child domain called Branch3.contoso.com with two domain controllers having the DNS server role installed.
You want to put all the users and computers in the new branch office in the branch3.contoso.com domain. Which of the following options would you choose to implement a DNS infrastructure for the child domain to ensure resources in the root domain and child domains are accessible by fully qualified domain names?
You solution must also provide name resolution services in the event that a single server fails for a prolonged period of time and automatically recognize when new DNS servers are added to or removed from the contoso.com domain.

You are an Enterprise administrator for contoso.com. The corporate network of the company consists of a single Active Directory domain. All the servers on the network either run Windows Server 2003 or Windows Server 2008 and all client computers run Windows Vista.
The company possesses a public key infrastructure (PKI) that consists of an offline root certification authority (CA) and two Enterprise Subordinate CAs that run Windows Server 2003.
You publish the certificates to the user accounts and the computer accounts in Active Directory.
Which of the following options would you choose to create a PKI solution for the Windows Vista client computers and the Windows Server 2008 servers in such a way that the certificates must support Suite B hashing and encryption algorithms and store private keys in Active Directory in minimum amount of administrative effort?

You are an Enterprise administrator for contoso.com. The corporate network of the company is configured with Perimeter network as shown in the exhibit.
Exhibit:
The company uses an enterprise certification authority (CA) and a Microsoft Online Responder on the internal network.
Which of the following options would you choose to implement a secure method for Internet users to verify the validity of individual certificates with the use of minimum network bandwidth? (Select two. Each correct answer will form a part of the answer.)

You are an Enterprise administrator for contoso.com. The corporate network of the company consists of a single Active Directory domain. All domain controllers on the corporate network run Windows Server 2008 and all client computers run either Windows Vista or Windows XP Service Pack 1.
The corporate network contains 100 servers and 5,000 client computers. Which of the following options would you choose to implement a VPN solution that allows you to store VPN passwords as encrypted text and provide support for Suite B cryptographic algorithms?
Besides it should support client computers that are configured as members of a workgroup and allow automatic enrollment of certificates. (Select three. Each correct answer will form a part of the answer.)