Which cmdlet should you use?

Your network contains an Active Directory forest named corp.contoso.com.
You are implementing Privileged Access Management (PAM) by using a bastion forest named priv.contoso.com You need to create shadow groups in priv.contoso.com.
Which cmdlet should you use?
A. New-RoleGroup
B. New-PamRole
C. New-ADGroup
D. New-PamGroup