Which three actions should you perform in sequence?

Explanation/Reference:
From http://blogs.technet.com/b/systemcenter/archive/2014/03/16/using-azure-backup-with-dpm.aspx –
. Before you can register your DPM server you need to have a Backup Vault up and running in Azure.
. Now it’s time to create a certificate that must be used between your DPM server and your backup vault in Windows Azure.
. When your certificate has successfully been uploaded to your Windows Azure Backup Vault you must install the Windows Azure Backup Agent.
I am not sure because the question asks: “configure NWT-DPM01 to back up the SharePoint Server 2013 infrastructure”.
The Sharepoint infrastructure includes servers in Perimeter Network and the doc [DOC]DPM – Download Center – Microsoft mentions:
“Protection of perimeter network (DMZ) machines is not supported in DPM.”
The question statement also mentions:
Virtualization Infrastructure ” After the planned deployment of System Center 2012 R2, Northwind Traders plans to move all virtual machines to four new private clouds named IT, Sales, Finance, and Corporate. Northwind Traders also plans to virtualize all of the servers that run SharePoint Server 2013 ” So the Sharepoint FE servers will be new VMs in private cloud. Waiting for review and comments.