What should you do first?

Your network contains an Active Directory forest named contoso.com. The functional level of the forest is Windows Server 2012. The forest contains five domain controllers and five VPN servers that run Windows Server 2016. Five hundred users connect to the VPN servers daily. You need to configure a new server named Server1 as a RADIUS server.

What should you do first?
A . On Server1, deploy the Remote Access server role.
B . On Server1, deploy the Network Policy and Access Services role.
C . On a domain controller, set the forest functional level to Windows Server 2016.
D . On each VPN server, run the New-NpsRadiusClient cmdlet.

Answer: B

Explanation:

http://www.nyazit.com/configure-network-policy-server-2016/