Which three tasks must the desktop administrator perform to prepare Active Directory (AD)?

An organization requires a higher level of security for desktops that cannot be achieved with passwords alone. A certificate has been procured from a Certificate Authority, and smart cards have been purchased for the users.

Which three tasks must the desktop administrator perform to prepare Active Directory (AD)? (Choose three.)

A.
add the user principal names to the Trusted Root Certification Authorities group

B.
add the root certificate to the Enterprise NTAuth store in AD

C.
add the root certificate to the Trusted Root Hierarchy in AD

D.
add user principal names to the AD accounts of users

E.
add the root certificate to the Trusted Root Certification Authorities group policy in AD