Active Directory Rights Management Services (AD RMS) is deployed on your network.
You need to configure AD RMS to use Kerberos authentication.
Which two actions should you perform? (Each correct answer presents part of the solution.
Choose two.)

A.
Register a service principal name (SPN) for AD RMS.

B.
Register a service connection point (SCP) for AD RMS.

C.
Configure the identity setting of the _DRMSAppPool1 application pool.

D.
Configure the useAppPoolCredentials attribute in the Internet Information Services (IIS)
metabase.

Explanation:
http://technet.microsoft.com/en-us/library/dd759186.aspx
If you plan to use Active Directory Rights Management Services (AD RMS) with Kerberos
authentication, you must take additional steps to configure the server running AD RMS after
installing the AD RMS server role and provisioning the server. Specifically, you must perform
these procedures:
Set the Internet Information Services (IIS) useAppPoolCredentials variable to True
Set the Service Principal Names (SPN) value for the AD RMS service account