You need to ensure that the live migration traffic is a…

Your network contains an Active Directory domain. The domain contains two Hyper-V hosts. You
plan to perform live migrations between the hosts. You need to ensure that the live migration traffic
is authenticated by using Kerberos. What should you do first?

A.
From Server Manager, install the Host Guardian Service server role on a domain controller.

B.
From Active Directory Users and Computers, add the computer accounts for both servers to the Cryptographic
Operators group.

C.
From Active Directory Users and Computers, modify the Delegation properties of the computer accounts for both
servers.

D.
From Server Manager, install the Host Guardian Service server role on both servers.

Explanation:
If you have decided to use Kerberos to authenticate live migration traffic, configure constrained
delegation before you proceed to the rest of the steps. To configure constrained delegation:
* Open the Active Directory Users and Computers snap-in.
* From the navigation pane, select the domain and double-click the Computers folder.
* From the Computers folder, right-click the computer account of the source server and then click
Properties.
* In the Properties dialog box, click the Delegation tab.
* On the delegation tab, select Trust this computer for delegation to the specified services only.
* Under that option, select Use Kerberos only.

https://technet.microsoft.com/en-us/library/cc720385(v=ws.10).aspx
https://technet.microsoft.com/en-us/library/jj134199(v=ws.11).aspx