Your network contains a single Active Directory domain. Active Directory Rights
Management Services (AD RMS) is deployed on the network.
A user named User1 is a member of only the AD RMS Enterprise Administrators group.
You need to ensure that User1 can change the service connection point (SCP) for the AD
RMS installation.The solution must minimize the administrative rights of User1.
To which group should you add User1?

A.
AD RMS Auditors

B.
AD RMS Service Group

C.
Domain Admins

D.
Schema Admins

Explanation:
http://social.technet.microsoft.com/wiki/contents/articles/710.the-ad-rms-service-connectionpoint.aspx
The AD RMS Service Connection Point
The Active Directory Rights Management Services (AD RMS) Service Connection Point
(SCP) is an object in Active Directory that holds the web address of the AD RMS certification
cluster. AD RMS-enabled applications use the SCP to discover the AD RMS service; it is the
first connection point for users to discover the AD RMS web services.
The AD RMS SCP can be registered automatically during AD RMS installation, or it can be
registered after installation has completed. To register the SCP you must be a member of
the local AD RMS Enterprise Administrators group and the Active Directory Domain Services
(AD DS) Enterprise Admins group, or you must have been given the appropriate authority.