You deploy System Center Operations Manager 2007 in an Active Directory domain. You configure the firewall rules to allow the Operations Manager agent to communicate with the Management Server. A computer named Computer1 in the perimeter network is not joined to the Active Directory domain. After you manually install the Operations Manager agent on
Computer1, you discover that Computer1 is unable to communicate with the assigned Management Server. You need to ensure that Computer1 is able to communicate with the assigned Management Server. What should you do?

A.
Configure Computer1 to use Kerberos authentication.

B.
Configure Computer1 to use certificate-based authentication.

C.
Disable the mutual authentication requirement for the Management Group.

D.
Reinstall the agent by using a push installation on Computer1.

Explanation:
Authentication and Data Encryption for Windows Computers in Operations Manager 2007 – http://technet.microsoft.com/en-us/library/bb735408.aspx

Certificate-Based Authentication
When an Operations Manager agent and management server are separated by either an untrusted forest or workgroup boundary, certificate-based authentication will need to be implemented.