Your company has two Active Directory forests namedcontoso.com and fabrikam.com. Both forests run only
domain controllers that run Windows Server 2008. The domain functional level of contoso.com is Windows
Server 2008. The domain functional level of fabrikam.com is Windows Server 2003 Native mode.
You configure an external trust between contoso.comand fabrikam.com.
You need to enable the Kerberos AES encryption option.
What should you do?

A.
Raise the forest functional level of fabrikam.comto Windows Server 2008.

B.
Raise the domain functional level of fabrikam.comto Windows Server 2008.

C.
Raise the forest functional level of contoso.com to Windows Server 2008.

D.
Create a new forest trust and enable forest-wide authentication.