多项选择题
A.Import the enterprise root CA certificate.
B.Import the OCSP Response Signing certificate.
C.Add the Server1 computer account to the CertPublishers group.
D.Set the Startup Type of the Certificate Propagation service to Automatic.
单项选择题 YourcompanyhasanActiveDirectorydomain.Youlogontothedomaincontroller.TheActiveDirectorySchemasnap-inisnotavailableintheMicrosoftManagementConsole（MMC）.YouneedtoaccesstheActiveDirectorySchemasnap-in.Whatshouldyoudo（）
单项选择题 Yourcompanyhasamainofficeand10branchoffices.EachbranchofficehasanActiveDirectorysitethatcontainsonedomaincontroller.OnlydomaincontrollersinthemainofficeareconfiguredasGlobalCatalogservers.YouneedtodeactivatetheUniversalGroupMembershipCaching（UGMC）optiononthedomaincontrollersinthebranchoffices.AtwhichlevelshouldyoudeactivateUGMC（）
单项选择题 Your company has two Active Directory forests named contoso.com and fabrikam.com. The company network has three DNS servers named DNS1， DNS2， and DNS3. The DNS servers are configured as shown in the following table. All computers that belong to the fabrikam.com domain have DNS3 configured as the preferred DNS server. All other computers use DNS1 as the preferred DNS server. Users from the fabrikam.com domain are unable to connect to the servers that belong to the contoso.com domain. You need to ensure users in the fabrikam.com domain are able to resolve all contoso.com queries. What should you do（）