What are two possible ways to achieve this goal?

Your company has recently signed up for Azure.
You plan to register a Data Protection Manager (DPM) server with the Azure Backup service.
You need to recommend a method for registering the DPM server with the Azure Backup vault.
What are two possible ways to achieve this goal? Each correct answer presents a complete solution.

A.
Import a self-signed certificate created using the makecert tool.

B.
Import a self-signed certificate created using the createcert tool.

C.
Import an X.509 v3 certificate with valid clientauthentication EKU.

D.
Import an X.509 v3 certificate with valid serverauthentication EKU.

Explanation:
A: You can create a self-signed certificate using the makecert tool, or use any valid SSL certificate issued by a
Certification Authority (CA) trusted by Microsoft, whose root certificates are distributed via the Microsoft Root
Certificate Program.
C: The certificate must have a valid Client Authentication EKU.

http://technet.microsoft.com/en-us/library/dn296608.aspx