You need to ensure that a user named User1 can decrypt private keys archived in the Active Directory Certificate Services (AD CS) database
You need to ensure that the users in Site2 are authenticated by DC1 or DC2 only if DC3 is unavailable
You need to ensure that if the WAN link between Site1 and Site2 fails while you are performing maintenance on Server3, the cluster resource will remain available in Site1
You need to change the zone type of the contoso.com zone from an Active Directory-integrated zone to a standard primary zone