Your company has two Active Directory forests named contoso.com and fabrikam.com. Both forests run only domain controllers that run Windows Server 2008. The domain functional level of contoso.com is Windows Server 2008. The domain functional level of fabrikam.com is Windows Server 2003 Native mode. You configure an external trust between contoso.com and fabrikam.com. You need to enable the Kerberos AES encryption option. What should you do（）

• A、Create a new forest trust and enable forest-wide authentication.
• B、Raise the forest functional level of contoso.com to Windows Server 2008.
• C、Raise the forest functional level of fabrikam.com to Windows Server 2008.
• D、Raise the domain functional level of fabrikam.com to Windows Server 2008.