Your network contains an Active Directory domain named contoso.com.
All servers run Windows Server 2012. The domain contains two servers.
The servers are configured as shown in the following table.

All client computers run Windows 8 Enterprise.
You plan to deploy Network Access Protection (NAP) by using IPSec enforcement.
A Group Policy object (GPO) named GPO1 is configured to deploy a trusted server group to all of the client
computers.
You need to ensure that the client computers can discover HRA servers automatically.
Which three actions should you perform? (Each correct answer presents part of the solution. Choose three.)

A.
On Server2, configure the EnableDiscovery registry key.

B.
On DC1, create an alias (CNAME) record.

C.
On DC1, create a service location (SRV) record.

D.
In a GPO, modify the Trusted Server setting for the NAP Client Configuration.

E.
On all of the client computers, configure the EnableDiscovery registry key.

Explanation:
http://technet.microsoft.com/en-us/library/dd296901(v=ws.10).aspx