HOTSPOT Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains the sites and site links shown in the following exhibit. 

Seen this on a practice test. You have to get the new cert first, grab its thumbprint, then run WAC setup and pick Change so you can update it with the new cert. Order is:
Obtain and install a new certificate → Copy the certificate thumbprint → Run Windows Admin Center Setup and select Change.
I think that's spot on, open to corrections though.
DC1 can't replicate directly to DC3, no load balancing to DC4 since there's only one lowest-cost link, and no need to change the IP intersite transport config for DC4 → DC2 routing. Seen similar in practice sets, so pretty confident. If anyone sees it differently let me know!
