You have the following Windows PowerShell Output.

You need to create a Managed Service Account.
What should you do?

A.
Run New-ADServiceAccount –Name “service01” –DNSHostName service01.contoso.com –
SAMAccountName service01.

B.
Run New-AuthenticationPolicySilo, and then run New-ADServiceAccount –Name “service01” –
DNSHostName service01.contoso.com.

C.
Run Add-KDSRootKey, and then run New-ADServiceAccount –Name “service01” –DNSHostName
service01.contoso.com.

D.
Run Set-KDSConfiguration, and then run New-ADServiceAccount –Name “service01” –
DNSHostName service01.contoso.com.

Explanation:
From the exhibit we see that the required key does not exist. First we create this key, then we create
the managed service account.
The Add-KdsRootKey cmdlet generates a new root key for the Microsoft Group Key Distribution
Service (KdsSvc) within Active Directory (AD). The Microsoft Group KdsSvc generates new group keys
from the new root key.
The New-ADServiceAccount cmdlet creates a new Active Directory managed service account.

New-ADServiceAccount
https://technet.microsoft.com/en-us/library/hh852236(v=wps.630).aspx

Add-KdsRootKey
ttps://technet.microsoft.com/en-us/library/jj852117(v=wps.630).aspx