A company has an Active Directory forest that contains 250 domains. All domain controllers run
Windows Server 2003. The forest functional level is Windows 2000. The domain functional level is
Windows 2000 mixed. You are planning to migrate the domain controllers in only one domain to
Windows Server 2008 R2. You need to ensure that Kerberos can be encrypted with Advanced
Encryption Standard (AES) after the migration. What should you recommend? (More than one
answer choice may achieve the goal. Select the BEST answer.)

A.
Raise the forest functional level to Windows Server 2003.

B.
Raise the domain functional level to Windows Server 2008.

C.
Raise the domain functional level to Windows Server 2003.

D.
Raise the forest functional level to Windows Server 2008 R2.

Explanation: