Which server role should you deploy first?

You use Application Request Routing (ARR) to make internal web applications available to the Internet by using NTLM authentication.
You need to replace ARR by using the Web Application Proxy.
Which server role should you deploy first?
A. Active Directory Certificate Services
B. Active Directory Federation Services
C. Active Directory Lightweight Directory Service
D. Active Directory Rights Management Services