Your network contains an Active Directory domain named contoso.com. The domain does not contain a
certification authority (CA). All servers run Windows Server 2012. All client computers run Windows 8.You
need to add a data recovery agent for the Encrypting File System (EFS) to the domain. Which two actions
should you perform? (Each correct answer presents part of the solution. Choose two.)
A.
From Windows PowerShell, run Get-Certificate.
B.
From the Default Domain Controllers Policy, select Create Data Recovery Agent.
C.
From the Default Domain Policy, select Add Data Recovery Agent.
D.
From a command prompt, run cipher.exe.
E.
From the Default Domain Policy, select Create Data Recovery Agent.
F.
From the Default Domain Controllers Policy, select Add Data Recovery Agent.