Your company has recently signed up for Azure. You plan to register a Data Protection Manager
(DPM) server with the Azure Backup service. You need to recommend a method for registering the
DPM server with the Azure Backup vault. What are two possible ways to achieve this goal? Each
correct answer presents a complete solution.

A.
Import a self-signed certificate created using the makecert tool.

B.
Import a self-signed certificate created using the createcert tool.

C.
Import an X.509 v3 certificate with valid clientauthentication EKU.

D.
Import an X.509 v3 certificate with valid serverauthentication EKU.

Explanation:
A: You can create a self-signed certificate using the makecert tool, or use any valid SSL certificate
issued by a Certification Authority (CA) trusted by Microsoft, whose root certificates are distributed
via the Microsoft Root Certificate Program.
C: The certificate must have a valid ClientAuthentication EKU.
http://technet.microsoft.com/en-us/library/dn296608.aspx