HOTSPOT
Your network contains an Active Directory domain named contoso.com. The domain contains four
servers. The servers are configured as shown in the following table.
You plan to provide users with the ability to use Workplace Join for their personal device when they
connect to the internal network.
You need to recommend a certificate configuration for the planned deployment.
What should you include in the recommendation? To answer, select the appropriate names in the
answer area.
Answer: 
Explanation:
Box 1, Box 2: Server3.contoso.com
Workplace Join client devices will attempt to discover the Device Registration Server by combining the
user account name with a well-known Device Registration server name. This would be the AD FS server
name, which is Server3.contoso.com here.
Note: For the Workplace Join client to discover the Device Registration server using a well-known DNS
CNAME record, AD FS must be configured with a server SSL certificate that includes the well-known
Device Registration server names
Box 3: Enterpriseregistration.contoso.com
You must create a DNS CNAME record that points to the A record associated with your AD FS farm. The
CNAME record must use the well-known prefix EnterpriseRegistration followed by the UPN suffix used by
the user accounts at your organization.
Configuring Device Registration
https://technet.microsoft.com/en-us/library/dn614658.aspx