Your network contains one Active Directory domain named contoso.com. The domain contains
three users named User1, User2, and User3.
You need to ensure that the users can log on to the domain by using the user principal names
(UPNs) shown in the following table.

What should you use?

A.
the Set-ADDomain cmdlet

B.
the Add-DNSServerSecondaryZone cmdlet

C.
the Setspn command

D.
the Set-ADUser cmdlet

Explanation:
The Set-ADUser cmdlet modifies the properties of an Active Directory user.Youcan modify
commonly used property values by using the cmdlet parameters.
Parameters include: UserPrincipalName
Each user account has a user principal name (UPN) in the format <user>@<DNS-domain-name>. A
UPN is a friendly name assigned by an administrator that is shorter than the LDAP distinguished
name used by the system and easier to remember.The UPN is independent of the user object’s DN,
so a user object can be moved or renamed without affecting the user logon name. When logging on
using a UPN, users no longer have to choose a domain from a list on the logon dialog box.
Incorrect answers:
Not A: The Set-ADDomain cmdlet modifies the properties of an Active Directory domain. Youcan
modify commonly used property values by using the cmdlet parameters.
Not B: The Add-DnsServerSecondaryZone cmdlet adds a specified secondary zone on a Domain
Name System (DNS) server.
Not C: Setspn reads, modifies, and deletes the Service Principal Names (SPN) directory property for
an Active Directory service account. Youuse SPNs to locate a target principal name for running a
service. Youcan use setspn to view the current SPNs, reset the account’s default SPNs, and add or
delete supplemental SPNs. Technet, Set-ADUser
https://technet.microsoft.com/en-us/library/ee617215.aspx